Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a343030303a3a2f33342d3334203d3e20323730333735.roa
File:                     323830343a366231303a343030303a3a2f33342d3334203d3e20323730333735.roa (raw, json)
Hash identifier:          Nt0dvVtIDoWI7ZBkiiP5oanus59FALn0CLe8t2rjSAU=
Subject key identifier:   57:BE:4B:2E:95:8E:96:3D:6F:D0:BA:31:8F:4F:2A:28:8C:1F:6E:DC
Certificate issuer:       /CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
Certificate serial:       0653F1ADE9EDB51A585000A718DEFF271497192B
Authority key identifier: 72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a343030303a3a2f33342d3334203d3e20323730333735.roa
Signing time:             Tue 09 Apr 2024 14:24:26 +0000
ROA not before:           Tue 09 Apr 2024 14:19:26 +0000
ROA not after:            Tue 08 Apr 2025 14:24:26 +0000
asID:                     270375
IP address blocks:        2804:6b10:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl
                          rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 17:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:53:f1:ad:e9:ed:b5:1a:58:50:00:a7:18:de:ff:27:14:97:19:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
        Validity
            Not Before: Apr  9 14:19:26 2024 GMT
            Not After : Apr  8 14:24:26 2025 GMT
        Subject: CN=57BE4B2E958E963D6FD0BA318F4F2A288C1F6EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:22:3c:61:94:8d:31:b7:dc:bd:30:21:6a:
                    6b:b6:a8:27:b6:00:da:c1:65:13:e2:5b:d2:2b:74:
                    de:dd:fc:a6:ae:4c:73:d2:8b:ab:a8:a8:09:fb:f4:
                    e1:2d:6d:13:ee:ca:03:5f:2d:72:ff:a5:e8:72:3a:
                    e2:f9:8c:33:78:a8:9a:91:e7:88:3b:79:86:91:a5:
                    24:e1:84:62:f9:43:b4:2e:a4:86:10:27:67:04:67:
                    4d:d4:f6:ac:01:0c:37:41:4c:2b:96:78:75:9a:81:
                    11:57:e6:92:1a:69:49:db:1b:44:37:d9:c1:37:4b:
                    85:10:e4:e4:ea:8f:b7:5e:fe:0a:92:e2:e0:e6:d6:
                    b1:f6:f3:e7:88:d7:46:cf:80:11:cb:d4:3f:f9:d8:
                    73:75:41:78:23:e5:57:9b:57:59:d0:13:05:66:ac:
                    3e:af:53:be:d4:4d:91:59:e4:66:1a:7c:01:e9:d0:
                    59:d7:01:94:89:75:4f:ec:e1:58:4a:b3:23:62:d2:
                    e8:5a:ab:57:47:73:23:55:f7:de:c0:cc:27:09:80:
                    46:f1:22:13:07:66:8d:e7:98:91:f9:e3:5c:8a:99:
                    c7:d2:db:a7:a0:8b:77:91:2d:c3:3a:38:85:8a:1c:
                    e0:be:43:c4:bb:fa:bc:c3:26:14:00:65:2e:a1:11:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BE:4B:2E:95:8E:96:3D:6F:D0:BA:31:8F:4F:2A:28:8C:1F:6E:DC
            X509v3 Authority Key Identifier:
                keyid:72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a343030303a3a2f33342d3334203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b10:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:93:fe:3a:b9:0c:23:0d:bd:2d:1c:58:c6:df:e7:f5:fe:
         11:06:52:da:cb:54:0e:a4:c6:6e:72:f3:99:fc:a6:91:67:54:
         02:f3:1b:8a:4a:98:56:4e:7c:04:93:67:91:1d:8f:06:04:e3:
         9a:f1:e1:81:88:05:15:01:73:72:2f:9e:35:02:2f:f1:54:16:
         e8:6b:55:05:fb:c5:56:1f:5f:09:34:13:ec:b2:30:35:2f:a8:
         26:e1:6c:c1:e4:80:f2:70:bd:bf:70:54:f4:1f:dd:1e:36:82:
         f6:82:cf:69:17:d6:c4:32:3b:3d:7f:8f:f1:50:31:9d:0a:ef:
         b0:ff:54:d1:17:8c:7c:ec:89:10:65:51:e7:e4:cc:c0:82:78:
         a8:0a:73:a1:2a:23:15:b4:da:ca:34:33:2d:10:32:ea:79:ab:
         93:b6:67:59:4b:c6:2e:35:66:67:95:06:8f:8b:a4:b9:bc:44:
         28:f7:8c:1c:c0:cf:12:5c:da:f7:d9:03:da:6a:f8:07:9e:76:
         38:48:51:5d:f8:30:f5:37:e6:03:4e:cc:8f:48:f8:4a:0c:9a:
         fa:53:cd:96:dd:ab:d4:82:b2:3f:36:06:79:70:39:73:bd:c4:
         9b:e5:9a:55:86:43:5d:f9:a2:43:ae:7f:ce:05:18:02:2d:4b:
         1c:62:78:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:53:57 2024 by rpki-client on console-fra.rpki-client.org