Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa
File:                     323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa (raw, json)
Hash identifier:          QLY7cufl5aPWddG0jnNlotplKaHCUdxyeWP9iwAhquc=
Subject key identifier:   47:30:33:9E:41:F7:3F:00:01:C2:AE:1C:57:83:30:E6:DB:30:EB:D9
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       66BCA6F58C6A9C0819FF5CA97DC780FAD2EE71AD
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa
Signing time:             Thu 04 Apr 2024 08:26:53 +0000
ROA not before:           Thu 04 Apr 2024 08:21:53 +0000
ROA not after:            Thu 03 Apr 2025 08:26:53 +0000
asID:                     53086
IP address blocks:        2804:4fe4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bc:a6:f5:8c:6a:9c:08:19:ff:5c:a9:7d:c7:80:fa:d2:ee:71:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Apr  4 08:21:53 2024 GMT
            Not After : Apr  3 08:26:53 2025 GMT
        Subject: CN=4730339E41F73F0001C2AE1C578330E6DB30EBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:c8:4b:3a:e2:1d:b1:0c:36:38:b9:98:3f:
                    aa:45:8a:8d:25:62:37:cf:58:29:ed:1c:e3:cd:ec:
                    4b:8a:5e:e8:d4:0d:d8:3a:0f:ef:89:bc:8b:6f:33:
                    9e:59:d9:c4:5f:2f:31:b5:a9:9b:1b:ab:86:ab:86:
                    04:2b:0b:f3:34:9c:c1:13:0f:44:90:a2:c3:a3:c1:
                    c4:14:bf:51:c5:e9:61:d5:ac:ec:9d:85:2a:6a:8c:
                    13:92:2b:f1:57:72:13:ec:c5:fd:2f:93:a5:96:e3:
                    77:ca:4d:15:18:7f:a1:dc:06:a9:0b:64:76:2a:89:
                    b9:8f:5e:32:ed:69:66:2a:d3:6f:bf:48:5e:68:65:
                    f4:c3:08:05:c9:9c:3a:b6:be:1a:ae:5e:ae:60:19:
                    49:29:14:20:44:a0:06:cc:ae:07:d9:39:d5:6a:5b:
                    3a:03:38:4d:f5:44:94:e3:e1:32:ad:74:1c:0a:15:
                    f5:ce:6b:fc:dd:2a:0b:94:ed:b1:21:0a:4f:7a:c1:
                    0e:10:07:a9:ec:c8:3a:26:cb:cb:d1:cf:dc:22:41:
                    ca:3a:06:0d:19:bc:b1:dc:fe:3a:47:64:f9:fa:4b:
                    c0:b2:fc:96:a4:7a:f8:84:2d:0b:8f:e8:75:e0:65:
                    1e:be:94:6a:29:3f:ee:0c:59:31:3f:f4:01:51:6b:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:30:33:9E:41:F7:3F:00:01:C2:AE:1C:57:83:30:E6:DB:30:EB:D9
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a4:6b:1e:b1:19:a6:6c:45:56:ce:0a:7d:0c:ef:87:dc:97:9f:
         fa:a4:9c:31:1f:01:63:bf:c4:f9:98:ba:f4:9d:c7:97:d2:b0:
         35:57:76:0c:e8:dc:43:cb:6b:f7:e5:17:a5:3f:e1:05:ec:49:
         e6:6d:8f:b3:5b:21:bc:65:bf:04:f9:75:05:f6:b4:12:26:7b:
         23:07:60:a8:89:a1:47:da:9d:25:76:7e:bb:69:90:83:40:84:
         aa:e1:60:b1:b8:83:e6:69:74:74:9a:26:f7:35:92:2d:37:d6:
         f2:95:d6:49:60:71:3d:f3:28:00:17:a9:6d:cf:2a:f0:f7:20:
         4c:4d:99:a3:12:9a:cc:7f:d9:f7:48:a0:98:66:ef:c0:50:95:
         6f:c7:15:a2:8f:77:40:08:db:cf:95:ea:6a:d2:f4:e5:45:da:
         45:f5:66:54:21:d4:7a:e8:22:03:a3:78:96:c0:01:4a:d6:6b:
         61:64:49:44:b7:31:ed:e6:e1:20:f7:1c:bd:79:37:d2:09:06:
         94:ea:45:6e:15:2b:58:f1:ec:7a:db:1c:89:a7:74:ca:e8:7f:
         f4:35:2b:33:fc:44:a4:ee:ce:6d:58:8b:fd:9c:e0:e1:c6:c2:
         d2:04:14:b0:ec:01:6a:2c:a1:fd:4b:50:5b:3a:b3:6d:00:b8:
         d5:49:6c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org