Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/323830343a3133303a3a2f33322d3333203d3e203238323634.roa
File:                     323830343a3133303a3a2f33322d3333203d3e203238323634.roa (raw, json)
Hash identifier:          i2fFyxNEdk9q3dTHMOvfcoPjXxEJuHSoqT5icCs5XE8=
Subject key identifier:   36:75:F9:07:37:96:60:F8:3F:89:34:62:AA:E6:9F:7C:6F:73:AC:AC
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       3631E42B6BFDFD87E2ECC5714C8D4F6905BFFE9A
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/323830343a3133303a3a2f33322d3333203d3e203238323634.roa
Signing time:             Thu 04 Apr 2024 13:04:14 +0000
ROA not before:           Thu 04 Apr 2024 12:59:14 +0000
ROA not after:            Thu 03 Apr 2025 13:04:14 +0000
asID:                     28264
IP address blocks:        2804:130::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:31:e4:2b:6b:fd:fd:87:e2:ec:c5:71:4c:8d:4f:69:05:bf:fe:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Apr  4 12:59:14 2024 GMT
            Not After : Apr  3 13:04:14 2025 GMT
        Subject: CN=3675F907379660F83F893462AAE69F7C6F73ACAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:7c:7a:02:21:48:08:66:20:c7:7e:ac:a0:
                    df:84:c5:1f:ab:56:4f:31:b2:4e:e4:bf:bc:3b:02:
                    af:31:c1:8c:d0:ed:b2:fa:83:25:29:a4:88:5d:22:
                    b7:ce:58:af:ca:72:21:70:e7:b6:ed:87:f9:86:ba:
                    70:b4:b0:6b:3f:a3:d9:dc:22:f9:c4:aa:57:93:63:
                    7f:a5:e3:ad:96:53:7e:1f:0d:76:b1:6d:3f:9d:d5:
                    c8:db:0e:81:1f:f9:e1:49:84:49:d8:43:ea:80:4c:
                    c2:d6:a0:aa:52:bc:79:4b:8a:60:34:ee:0f:40:48:
                    cf:4f:e3:ce:44:79:98:12:84:c8:94:0b:49:4f:b3:
                    75:81:2d:0a:14:12:9e:d9:a5:b2:13:e6:f5:6e:1e:
                    f0:2e:12:12:98:88:9d:b6:d8:a0:bb:38:04:6b:84:
                    f4:57:8f:77:06:b2:9a:43:cf:62:b3:1e:73:6e:2d:
                    98:fb:63:00:bd:30:aa:b5:d7:e7:8c:07:f2:e1:6c:
                    54:ba:74:3a:fc:ea:30:4a:de:4c:77:34:9f:b6:64:
                    bc:38:6b:b5:f8:1c:d4:c9:85:58:1c:a7:df:bb:ae:
                    2f:46:38:c1:b0:25:4b:97:5a:2d:96:76:75:4c:75:
                    c9:ac:1e:be:21:87:a8:97:dd:11:d6:04:82:f8:0e:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:75:F9:07:37:96:60:F8:3F:89:34:62:AA:E6:9F:7C:6F:73:AC:AC
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/323830343a3133303a3a2f33322d3333203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:130::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:43:04:07:bc:d7:9e:8e:df:ff:e9:cd:0b:e7:17:e8:e1:72:
         94:8f:b2:83:95:54:c3:a7:10:4f:cb:0e:70:47:fb:dc:ef:6e:
         4e:f4:94:05:2f:ed:dd:ef:1a:d3:fd:7b:23:c1:0a:07:eb:d0:
         a7:75:05:e1:61:af:22:05:31:6e:76:a7:7f:cd:d5:13:70:08:
         04:37:08:88:7f:b8:84:47:37:10:1e:57:d7:8e:0a:8c:f5:49:
         60:7c:80:47:4f:27:5f:49:5a:cb:e2:c4:1f:aa:f1:a4:79:09:
         a2:54:a8:2d:12:7b:03:4a:28:27:a2:70:67:91:02:0f:4e:3d:
         85:6f:cf:59:f3:ea:0b:c4:8d:fa:f8:a8:a6:c4:c3:5f:c4:a2:
         ce:7d:5e:93:fe:45:4d:8c:96:d1:36:38:f1:28:86:3d:11:0b:
         c4:af:d7:15:a6:d1:9a:80:c7:c7:7c:f9:91:88:70:ec:c0:a2:
         2f:fd:9f:44:83:4e:7e:24:35:f6:ff:5c:44:d3:fe:61:3e:01:
         e3:60:4c:5c:e4:ce:85:09:20:bf:8e:40:21:08:1b:fd:02:9d:
         16:a4:eb:03:48:3d:c4:43:4d:36:0e:93:ea:30:46:86:73:2e:
         bd:81:d9:c0:a2:7f:6e:6d:1d:16:4b:bd:70:a7:df:19:aa:ca:
         52:28:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:51 2024 by rpki-client on console-fra.rpki-client.org