Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa
File:                     323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa (raw, json)
Hash identifier:          8gB3RvlMyEi33VCJiio0ZP1fdGluasg2Ai8rthIUIdw=
Subject key identifier:   34:7F:D4:BA:35:07:2F:C2:8D:17:13:44:A9:6A:53:0D:26:A2:F2:D5
Certificate issuer:       /CN=282867FDA1906735DA18D9838B50748AC97E1655
Certificate serial:       602C72BCD962A8A7D885D5C4014D34D404F46642
Authority key identifier: 28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa
Signing time:             Tue 16 Apr 2024 18:44:58 +0000
ROA not before:           Tue 16 Apr 2024 18:39:58 +0000
ROA not after:            Tue 15 Apr 2025 18:44:58 +0000
asID:                     265484
IP address blocks:        2804:34d8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2c:72:bc:d9:62:a8:a7:d8:85:d5:c4:01:4d:34:d4:04:f4:66:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282867FDA1906735DA18D9838B50748AC97E1655
        Validity
            Not Before: Apr 16 18:39:58 2024 GMT
            Not After : Apr 15 18:44:58 2025 GMT
        Subject: CN=347FD4BA35072FC28D171344A96A530D26A2F2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:07:97:af:98:25:cb:60:53:03:af:79:85:
                    1b:d1:70:8d:b5:10:16:45:cc:8c:b9:bb:30:54:34:
                    cd:7c:0c:70:79:b7:91:fe:f2:2a:05:2f:bc:57:87:
                    a0:5b:80:bb:fa:97:00:09:bd:f5:00:d3:2b:95:1b:
                    08:f0:27:8e:a3:bd:ba:24:56:14:d1:fc:80:c6:5c:
                    2c:6e:90:38:99:69:3e:e1:e9:48:2a:cf:f4:51:44:
                    3f:7a:4e:c1:a1:ce:86:1a:65:ed:63:89:0b:5c:96:
                    e8:f2:ac:ee:0f:48:fc:21:57:c7:aa:0c:12:30:1c:
                    fc:ce:66:f0:87:d6:42:5b:3c:03:9d:19:0f:45:28:
                    70:2c:71:ac:13:df:ce:60:ee:1d:8f:d9:8e:7a:87:
                    b0:7e:82:42:a0:55:2d:94:4f:40:8f:92:32:0a:33:
                    7c:8f:a9:61:88:24:61:4c:a6:b1:52:2d:c5:1b:ff:
                    52:60:9a:98:de:6c:97:4e:c0:31:e4:72:f1:db:07:
                    44:55:48:cd:3e:be:dd:0b:b8:f1:36:3f:63:d0:b9:
                    73:7f:46:4f:1a:99:90:10:85:ef:14:75:18:bc:7e:
                    6e:49:80:10:b5:b3:db:c8:92:b7:c3:88:37:c1:09:
                    8a:84:c4:e9:e0:ac:88:c8:89:08:65:b8:49:68:f1:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:D4:BA:35:07:2F:C2:8D:17:13:44:A9:6A:53:0D:26:A2:F2:D5
            X509v3 Authority Key Identifier:
                keyid:28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b7:ff:ef:f0:50:e7:1e:98:d1:61:69:ef:3f:a8:d1:ad:15:d7:
         c0:5e:f6:66:73:98:83:7f:5e:af:a7:68:ed:e9:84:6e:44:99:
         ba:f5:6d:e6:b6:21:2b:69:4a:0f:04:09:6d:b9:0b:e7:d3:24:
         a0:06:03:3c:43:64:6b:90:34:17:d0:3a:89:a3:28:bb:41:e6:
         45:9d:d4:31:76:a6:27:18:7f:15:a0:40:11:7c:fa:5a:c7:66:
         5d:50:84:e2:28:50:d5:5e:de:c7:77:1d:14:3f:9a:45:ac:d3:
         82:e2:07:89:59:0e:fe:24:9d:e1:09:09:ed:bf:01:55:4e:b0:
         e3:7a:52:09:89:60:88:f5:44:a2:b3:3f:dc:f5:c4:ab:13:a6:
         26:e8:5d:1d:a1:73:62:4a:3e:0a:39:d9:ca:34:bf:69:4f:21:
         33:3c:19:5d:df:88:e0:11:1a:06:34:c1:a2:a2:b3:37:40:2f:
         24:a2:e3:05:07:3e:62:87:af:cd:4b:ac:4b:80:31:85:9c:ed:
         89:f6:e7:b2:c5:2e:db:23:61:f5:ba:09:bd:54:f9:ad:da:54:
         ad:ef:51:cf:ad:d7:4b:60:75:cf:46:97:6d:dd:36:00:44:42:
         97:5b:8c:5a:0c:62:2f:91:f5:99:9a:3b:2b:8b:66:5a:d3:a0:
         4f:b8:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:35 2024 by rpki-client on console-fra.rpki-client.org