Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a633030303a3a2f33342d3334203d3e20323633313434.roa
File:                     323830343a313736383a633030303a3a2f33342d3334203d3e20323633313434.roa (raw, json)
Hash identifier:          HZVMqbqy8xcO9F1dH1dM6xhYzvxKsh+wYg7wBtPFaow=
Subject key identifier:   56:59:DC:C7:84:C2:AA:E2:E0:68:C2:CB:B1:C4:DB:A0:39:6F:37:9D
Certificate issuer:       /CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
Certificate serial:       67608DFFC3F46FACEA47D52A283E00B38DD3ACD9
Authority key identifier: 41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a633030303a3a2f33342d3334203d3e20323633313434.roa
Signing time:             Thu 04 Apr 2024 00:02:58 +0000
ROA not before:           Wed 03 Apr 2024 23:57:58 +0000
ROA not after:            Thu 03 Apr 2025 00:02:58 +0000
asID:                     263144
IP address blocks:        2804:1768:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl
                          rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 20:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:60:8d:ff:c3:f4:6f:ac:ea:47:d5:2a:28:3e:00:b3:8d:d3:ac:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
        Validity
            Not Before: Apr  3 23:57:58 2024 GMT
            Not After : Apr  3 00:02:58 2025 GMT
        Subject: CN=5659DCC784C2AAE2E068C2CBB1C4DBA0396F379D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:32:bd:5e:08:2e:72:e5:32:79:31:96:7b:
                    c7:d3:7a:dc:33:b5:e5:9d:96:bc:04:1d:a3:18:2b:
                    dd:8f:02:6d:a4:b7:bb:9e:14:25:5e:23:93:04:11:
                    3e:57:8c:56:96:5d:13:fd:ab:b3:cf:b5:41:38:22:
                    db:79:99:31:87:e4:c6:6c:49:06:f2:be:49:09:66:
                    72:2b:6d:81:d9:2b:8c:8f:2a:ef:4d:ef:2e:2d:f4:
                    9b:45:7c:e5:b2:e5:51:a9:ce:2c:f6:50:79:82:53:
                    f3:da:a6:e5:49:d1:14:bf:5b:a9:a3:2e:d7:9f:f9:
                    c7:52:a1:f5:55:64:d6:88:e4:68:41:db:07:e6:66:
                    94:50:eb:0e:23:d6:2d:aa:d8:21:2c:75:74:a4:00:
                    46:cf:a4:bb:e2:ef:f6:fb:38:45:dd:67:93:78:f4:
                    4b:b5:47:33:00:b3:bc:78:23:cf:f5:e6:36:14:8c:
                    6d:64:58:f8:86:b5:4e:70:b5:15:9a:77:c7:bb:a4:
                    96:9a:57:7a:20:4e:c9:27:4f:3a:0d:1e:15:6d:0a:
                    03:02:76:96:4d:7f:77:6c:c9:66:c6:af:8e:e3:79:
                    d1:47:92:de:25:49:4b:e0:53:26:1d:a5:1c:2b:db:
                    93:40:65:27:17:b6:c9:49:8a:5e:72:84:d2:b6:30:
                    4f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:59:DC:C7:84:C2:AA:E2:E0:68:C2:CB:B1:C4:DB:A0:39:6F:37:9D
            X509v3 Authority Key Identifier:
                keyid:41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a633030303a3a2f33342d3334203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:bc:6d:a9:fe:6a:cd:ba:38:54:d9:d5:40:1e:92:3d:91:90:
         1a:d8:7c:70:83:ae:97:78:2d:30:6d:2b:b1:ce:68:9a:89:73:
         36:1c:1a:d4:4a:6e:f8:0c:c2:7c:a8:06:f8:cb:1e:16:37:7f:
         b7:1a:24:07:03:b1:66:14:51:ea:98:7a:12:bb:62:2d:f8:90:
         4d:9e:e5:2a:48:a6:8d:f7:1f:b2:e2:83:bc:69:8a:b9:00:10:
         5b:36:0e:1b:23:a1:d4:c2:98:04:7d:79:06:d4:9d:bd:9e:e5:
         8e:70:df:52:f6:ac:24:1d:44:08:f3:be:7c:fa:48:0f:b6:f1:
         3a:72:43:94:64:16:de:a6:92:1f:93:ba:bb:f7:9f:a6:08:14:
         b0:b8:46:00:a3:bc:b0:91:8e:de:e4:b0:f8:b5:1d:60:93:fe:
         d1:85:67:fd:d3:92:c0:9c:e7:d1:f4:72:72:6a:8d:0a:f6:31:
         a8:09:a2:95:b0:4a:93:62:ef:cc:59:16:45:fe:16:ea:93:9d:
         ca:60:2d:04:08:ab:9b:1d:db:f8:ba:ed:c0:ac:cd:a9:57:69:
         3e:35:1d:c2:78:b5:b7:e0:6e:55:2e:9a:2b:06:6d:81:a8:19:
         ff:f0:ca:ad:34:ee:20:b7:05:e8:ab:98:86:ba:7c:34:a3:31:
         cd:1c:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:41:58 2024 by rpki-client on console-fra.rpki-client.org