Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a633030303a3a2f33342d3334203d3e20323733363036.roa
File:                     323830343a383937383a633030303a3a2f33342d3334203d3e20323733363036.roa (raw, json)
Hash identifier:          IBwqEJXh2QDyLx5IHHfK+n4akEysfW9yyBTO2m92QvI=
Subject key identifier:   11:0A:5B:54:7D:69:F5:36:8B:C1:77:59:6E:DE:FA:92:E4:31:16:20
Certificate issuer:       /CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
Certificate serial:       46548039ACD8345C93DE2192B26138B970E36C47
Authority key identifier: 39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a633030303a3a2f33342d3334203d3e20323733363036.roa
Signing time:             Mon 08 Apr 2024 20:38:50 +0000
ROA not before:           Mon 08 Apr 2024 20:33:50 +0000
ROA not after:            Mon 07 Apr 2025 20:38:50 +0000
asID:                     273606
IP address blocks:        2804:8978:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:54:80:39:ac:d8:34:5c:93:de:21:92:b2:61:38:b9:70:e3:6c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
        Validity
            Not Before: Apr  8 20:33:50 2024 GMT
            Not After : Apr  7 20:38:50 2025 GMT
        Subject: CN=110A5B547D69F5368BC177596EDEFA92E4311620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:6c:21:16:9a:f1:64:26:55:91:46:d0:fd:
                    7c:20:e9:f1:56:3e:31:93:58:09:28:bd:33:dd:6b:
                    f6:4c:f0:60:5d:81:b3:6f:e7:86:7d:7d:5a:d2:1e:
                    4d:13:09:5c:6d:2d:e2:0f:25:f6:21:b6:70:5d:64:
                    b7:bc:d8:38:1e:7b:35:84:5d:01:e1:2f:bd:cb:83:
                    56:ea:c7:9b:e6:83:10:91:5c:21:9e:68:7c:af:f5:
                    9d:af:0f:c0:3c:5d:30:17:dc:30:3e:e1:82:6b:18:
                    47:95:2b:d4:4f:f8:62:56:2b:e1:74:60:27:80:23:
                    e4:2a:c1:7a:e1:d8:06:f1:42:19:12:3e:8a:9e:36:
                    77:90:77:db:36:da:1a:0e:3b:70:fb:41:91:46:73:
                    22:13:ea:bb:14:76:2d:db:af:c8:05:60:48:49:ba:
                    75:1a:e0:4d:8c:b3:73:66:57:66:f7:50:5e:69:00:
                    0c:f4:e5:58:f1:fd:b5:8c:b0:cb:e8:1c:d9:1f:98:
                    e2:66:63:d9:79:5f:a3:7d:9e:c5:97:1d:83:ff:e7:
                    6f:a3:76:19:c4:40:98:8d:d7:9f:7d:76:5c:25:ef:
                    45:41:32:3e:61:57:95:3e:8a:1b:81:33:3a:33:f3:
                    bf:c9:55:b4:a4:a8:82:bf:95:c3:14:c8:0f:d0:bc:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0A:5B:54:7D:69:F5:36:8B:C1:77:59:6E:DE:FA:92:E4:31:16:20
            X509v3 Authority Key Identifier:
                keyid:39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a633030303a3a2f33342d3334203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:6c:09:e0:04:0f:55:2c:ff:e1:55:00:38:b7:50:83:a1:
         a0:93:cd:b9:61:b4:b2:c5:fa:32:35:31:40:5b:84:bf:7e:3e:
         b3:a4:8f:ef:0d:23:37:ca:6d:79:db:ad:72:7c:ee:b8:9a:f7:
         91:ff:01:38:f0:b6:7a:81:3a:35:56:aa:ba:ba:2e:28:d6:5a:
         fd:c9:4d:f8:6e:af:36:96:9a:c6:06:9e:60:dc:c7:51:84:a3:
         36:16:ba:ac:50:9b:e3:60:f6:b6:ad:4c:af:16:23:4c:27:3c:
         36:05:13:c3:84:ce:49:d3:09:1d:33:19:34:1d:a6:e2:68:d4:
         2f:da:ec:9d:d4:d4:bb:ac:87:f9:88:78:8d:8d:0b:13:9e:be:
         11:59:12:ef:45:25:de:e8:66:14:65:54:b5:37:12:46:98:74:
         d7:5e:5a:17:32:e0:aa:f9:90:3c:c8:a5:f4:04:1c:47:8f:d8:
         7b:25:be:10:4e:a5:53:97:a6:b6:12:e2:17:91:04:58:04:d7:
         71:24:6d:89:2f:89:ee:e2:fc:c9:e1:54:48:04:b4:29:1e:05:
         7f:6d:e6:03:1e:e2:92:76:94:ca:bb:09:df:2e:28:c5:cc:83:
         fe:9e:db:e3:ea:7e:2c:5b:96:6d:7e:d2:0b:a4:3c:b7:b6:6a:
         17:75:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org