Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          4ztWup6Dn097KNkSfJrAeUgSdqf2nbTWgbiM+36nJfM=
Subject key identifier:   D3:AD:D3:CC:5C:9B:5B:59:9E:77:76:30:81:9B:E0:41:47:CB:8C:AF
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       6245325192B587B510DC0F490DC1D240F5EC6C40
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:01:58 +0000
ROA not before:           Thu 04 Apr 2024 15:56:58 +0000
ROA not after:            Thu 03 Apr 2025 16:01:58 +0000
asID:                     268726
IP address blocks:        2804:59cc::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:45:32:51:92:b5:87:b5:10:dc:0f:49:0d:c1:d2:40:f5:ec:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:56:58 2024 GMT
            Not After : Apr  3 16:01:58 2025 GMT
        Subject: CN=D3ADD3CC5C9B5B599E777630819BE04147CB8CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:ff:61:e9:4d:46:bc:27:ed:35:e8:9a:3f:
                    a9:1f:32:fe:04:d5:13:62:31:8f:58:c4:e0:70:98:
                    f4:2f:fb:b0:14:03:75:e5:ab:0a:a7:97:27:b3:0b:
                    37:bd:2d:cf:7d:5e:af:e3:f6:3a:22:91:7c:6d:c4:
                    05:40:e0:9f:4f:e7:27:48:67:89:aa:c7:1f:ef:8e:
                    5e:a8:48:98:e0:05:7a:c0:e7:28:24:52:ed:c5:96:
                    85:51:d9:e4:8d:53:b3:01:c2:d4:69:40:9c:8b:88:
                    d3:38:0a:33:78:03:0e:2e:a3:6d:c4:13:c3:99:f9:
                    25:02:f8:5e:bc:ca:59:55:0e:7d:af:88:58:f1:f5:
                    3f:10:d2:82:8d:9d:b1:5f:3e:8d:46:fa:66:c4:25:
                    d9:7b:b2:e6:75:83:aa:31:7c:49:6a:ee:b0:4c:e5:
                    f5:21:d1:e4:f0:16:c0:a7:3e:47:d7:fe:e2:b3:be:
                    c5:72:6f:a7:70:b9:59:09:d8:81:15:7a:a9:a5:61:
                    f3:92:15:74:d5:23:a8:b9:80:7a:72:42:45:12:2a:
                    50:12:c0:d7:09:55:79:55:62:ed:af:05:ac:78:aa:
                    de:cf:8e:50:c5:69:c3:10:8e:c3:1b:7c:f5:04:b0:
                    65:de:2c:72:49:8f:5b:37:61:9f:ac:0d:a0:45:cc:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AD:D3:CC:5C:9B:5B:59:9E:77:76:30:81:9B:E0:41:47:CB:8C:AF
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:0c:32:75:b3:62:33:f9:77:4e:7c:ca:e8:c7:96:92:e9:
         18:ce:2b:16:d9:95:3d:58:97:b8:28:6f:78:d8:22:b5:43:07:
         9e:dc:55:aa:72:99:22:0e:4a:9d:a9:42:d9:23:08:1f:8d:0d:
         6f:34:4f:19:63:b0:86:ed:3b:5c:c5:4d:f1:0c:dd:a8:e8:c5:
         31:03:d2:81:8d:20:1f:bf:02:05:d4:eb:6b:7c:dd:c7:7c:f3:
         66:a4:72:bc:ac:b0:be:54:be:e1:f1:9f:5e:99:4a:aa:a0:58:
         24:0e:a2:2d:fb:64:99:97:d2:b9:21:bb:c6:8a:4d:f9:4e:9d:
         7a:d4:4d:71:0a:8c:c0:b6:64:1e:98:82:c4:39:14:4d:b5:88:
         6f:a2:4e:36:7e:74:63:84:93:f0:d3:c0:8a:be:f0:95:28:d7:
         15:00:a8:9b:1a:a9:25:78:f0:4b:c5:40:4f:d3:9a:57:93:f2:
         6e:17:96:c1:a3:04:99:d4:d8:3c:c1:7f:43:7f:21:8b:7c:6e:
         e0:d5:bf:65:03:ff:74:c7:2e:c7:75:92:1d:93:4b:98:ba:17:
         92:a3:35:d4:6c:77:15:a7:0f:99:9f:96:29:8c:da:7b:1e:89:
         0f:fe:39:14:d0:9a:bb:80:c3:72:b0:be:1a:33:61:e8:35:8f:
         ed:75:2e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:50 2024 by rpki-client on console-fra.rpki-client.org