Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33342d3334203d3e20323731353030.roa
File:                     323830343a376338303a3a2f33342d3334203d3e20323731353030.roa (raw, json)
Hash identifier:          kCO7yNcId9qjSZRYa5Iw92IxJf4DXBCyEVYC34bLlv0=
Subject key identifier:   9B:04:BB:65:61:AE:C9:5F:D8:1F:CF:BB:ED:74:65:5D:43:57:83:76
Certificate issuer:       /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial:       3B916330D6DB942C39F88D25C81D4C98955072B3
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33342d3334203d3e20323731353030.roa
Signing time:             Tue 30 Apr 2024 08:05:31 +0000
ROA not before:           Tue 30 Apr 2024 08:00:31 +0000
ROA not after:            Tue 29 Apr 2025 08:05:31 +0000
asID:                     271500
IP address blocks:        2804:7c80::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl
                          rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:91:63:30:d6:db:94:2c:39:f8:8d:25:c8:1d:4c:98:95:50:72:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
        Validity
            Not Before: Apr 30 08:00:31 2024 GMT
            Not After : Apr 29 08:05:31 2025 GMT
        Subject: CN=9B04BB6561AEC95FD81FCFBBED74655D43578376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:e9:42:54:ce:e3:f4:0c:64:0c:22:25:ba:
                    35:b9:44:f7:8a:44:75:30:8d:52:6a:24:29:47:ad:
                    97:a0:06:dc:57:64:10:b4:53:fe:48:a2:53:74:6e:
                    1d:e6:64:42:1d:14:74:b7:aa:5e:89:3c:7d:bd:c2:
                    73:23:4b:3f:b9:b1:62:28:fc:e8:90:fe:29:c3:dc:
                    d5:9a:87:7a:24:bf:78:e4:b0:6b:f5:54:8d:18:84:
                    bd:99:1f:b3:bb:ec:14:e8:b1:7a:84:2b:cf:01:44:
                    c6:7e:8c:be:6a:b5:da:ec:50:36:a3:bf:4c:18:be:
                    f5:c4:f4:0e:1e:dd:6d:49:04:7a:e2:65:42:10:4c:
                    a2:56:6c:c0:89:b8:27:20:7a:d4:51:14:78:69:20:
                    1d:94:70:d8:4f:c8:6e:2f:ff:75:1c:94:a2:3f:aa:
                    7e:b8:d1:f1:13:d6:7d:70:b3:c6:a2:81:d9:68:9c:
                    54:4b:53:db:eb:de:a6:60:81:9b:e4:eb:b8:d3:d7:
                    05:48:17:03:a5:e8:52:0d:5d:e8:a5:1d:95:7a:01:
                    94:cb:3b:8d:00:c1:15:55:cf:3c:80:1e:e3:6a:88:
                    90:23:ae:90:7a:1d:21:ab:50:31:4a:8e:9b:20:5b:
                    26:28:4c:a5:7f:0c:bf:f0:c0:8a:1a:fb:c5:41:24:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:BB:65:61:AE:C9:5F:D8:1F:CF:BB:ED:74:65:5D:43:57:83:76
            X509v3 Authority Key Identifier:
                keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33342d3334203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c80::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:8b:99:aa:cb:69:96:f4:cf:c4:63:fe:86:37:88:31:5e:
         6f:c9:11:93:1d:b3:b4:f4:ac:83:1e:48:11:50:3a:01:27:b2:
         8f:f5:c7:a7:1c:d8:d4:63:0c:39:aa:41:65:e2:d0:cd:c9:de:
         9a:fa:c6:55:7e:33:44:a2:7a:1f:4b:b8:e9:6f:66:1d:5e:8e:
         95:70:52:fc:77:10:bb:2e:9e:4e:cc:5e:48:2b:81:61:fa:94:
         7c:76:c5:1b:8a:26:ef:1f:09:50:8f:ee:6f:f6:90:f4:d7:25:
         e6:6a:a1:c0:5d:06:d4:b2:19:02:fe:cb:27:84:99:5b:f0:59:
         3c:18:ae:f0:af:d6:d3:8b:6c:b5:26:d1:19:98:a9:e5:33:46:
         bb:0f:52:78:1d:e8:2c:10:7f:1a:9e:7b:24:f5:b6:fe:09:6f:
         39:e5:f2:0f:bb:eb:7e:fa:c0:e7:24:44:70:f7:ab:23:5b:ee:
         8a:71:3a:86:b4:8a:73:00:b8:67:ee:69:d5:3d:dc:7d:d0:45:
         b7:c4:96:3b:b1:4f:36:a7:fa:8a:46:7e:40:31:b4:0a:ef:b9:
         4a:f6:de:ba:d7:93:d3:a5:b9:3f:1f:29:6e:2a:4c:20:fa:61:
         a4:fc:2a:4b:48:99:cf:16:9d:8d:8e:a1:ef:51:c3:87:f1:54:
         b3:57:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:43 2024 by rpki-client on console-fra.rpki-client.org