Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33342d3334203d3e203533303836.roa
File:                     323830343a346665343a3a2f33342d3334203d3e203533303836.roa (raw, json)
Hash identifier:          rOSHw2v4mSh8sCTc5wdhgyjGfUhhpfPVc6LPDXcrcOI=
Subject key identifier:   3A:36:0B:1D:1A:60:70:A7:ED:26:6A:26:F2:DE:67:32:08:18:4A:90
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       031E122E82C8913F8241A4E61D319343149F93BA
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33342d3334203d3e203533303836.roa
Signing time:             Thu 04 Apr 2024 08:26:53 +0000
ROA not before:           Thu 04 Apr 2024 08:21:53 +0000
ROA not after:            Thu 03 Apr 2025 08:26:53 +0000
asID:                     53086
IP address blocks:        2804:4fe4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1e:12:2e:82:c8:91:3f:82:41:a4:e6:1d:31:93:43:14:9f:93:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Apr  4 08:21:53 2024 GMT
            Not After : Apr  3 08:26:53 2025 GMT
        Subject: CN=3A360B1D1A6070A7ED266A26F2DE673208184A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:c9:09:35:a9:a5:11:11:af:50:3b:b1:42:
                    5b:c8:38:0e:27:c7:26:fe:24:ce:18:8f:d2:f4:36:
                    ef:22:2c:94:48:c0:02:14:02:72:27:69:4e:49:02:
                    d6:e4:ed:05:29:b0:e1:57:e0:fd:58:c3:9c:3e:c4:
                    1e:19:a6:93:4d:8d:e1:5a:da:9e:9e:b3:fa:92:dd:
                    b1:77:be:7d:ad:69:b5:b6:b2:68:55:14:dd:e6:65:
                    3b:fb:e3:c9:d8:bd:fc:b3:5f:d3:70:5e:b4:c8:a8:
                    39:30:ed:40:af:5d:50:ef:75:35:af:36:27:92:98:
                    f0:b1:0d:b1:d2:58:93:1c:d3:70:fa:4e:69:dd:bc:
                    a0:2a:47:69:2f:d4:ba:1e:a3:6a:18:a8:a7:3c:33:
                    a6:91:23:0a:ea:22:00:a0:d7:25:7a:1a:8b:aa:90:
                    8c:2b:e6:ff:2e:34:95:47:fe:46:56:e1:31:0c:14:
                    57:37:ca:05:c9:b8:71:51:d1:c6:e9:4c:5c:5d:fe:
                    a5:8c:65:b5:e8:47:7e:24:a8:4f:f3:70:b2:7e:f3:
                    b6:c0:ea:5f:19:d6:1c:74:a8:cb:46:40:5c:4e:80:
                    e0:03:3f:5c:3e:e4:ee:29:0b:95:d1:b0:a4:15:54:
                    2f:a2:d1:5e:9d:25:1e:cc:cd:d1:32:a0:e2:c3:f6:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:36:0B:1D:1A:60:70:A7:ED:26:6A:26:F2:DE:67:32:08:18:4A:90
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33342d3334203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:48:a7:77:91:0d:e4:65:a6:f8:d6:d2:2c:37:ac:20:32:88:
         a8:ec:aa:e9:25:e9:cb:75:d6:cd:e0:9b:b3:7c:c9:e9:e4:54:
         e2:a7:d2:ee:28:90:c3:23:7b:83:f4:92:c7:14:ab:1f:e7:0b:
         d5:e9:a7:57:aa:bc:2e:63:7b:81:8e:c7:f7:91:6a:b8:38:6a:
         fd:17:ec:90:43:b1:56:50:66:03:ea:3b:01:82:73:a6:11:20:
         00:c5:82:9e:e2:f5:09:a8:ac:57:b9:00:e6:18:7e:a1:21:18:
         98:a0:d1:2b:ce:0a:1d:02:8f:af:be:36:1f:a6:04:62:c2:d0:
         f0:9d:50:61:c0:78:2e:3a:75:79:e6:b7:b7:24:eb:d4:b0:fb:
         c3:18:5e:1f:bb:31:2d:75:9a:f2:fb:61:a2:4c:30:1d:93:78:
         7d:f5:31:51:31:28:b4:22:5d:23:a9:2a:c0:f8:0f:3d:0f:cf:
         60:4c:e3:3c:18:5a:e0:21:f0:ec:be:d7:5b:74:2f:cd:49:de:
         e2:6f:bb:a9:51:16:2c:20:13:87:3a:4a:92:eb:cd:1a:e0:97:
         0d:2f:fa:12:a7:56:3e:95:83:1a:fc:72:fd:48:20:0b:92:c9:
         26:b5:32:4c:ba:7d:69:99:60:42:97:70:f4:42:9f:80:00:c7:
         9b:60:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org