Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a383030303a3a2f33332d3333203d3e20323730333735.roa
File:                     323830343a366231303a383030303a3a2f33332d3333203d3e20323730333735.roa (raw, json)
Hash identifier:          YY3sKcoYeMtMbRym6QD0/UNWgFFFNHTY2fsA5J5uGTw=
Subject key identifier:   7D:BE:C1:10:80:D5:B3:CD:46:D6:42:31:8C:D4:37:31:59:45:9C:AE
Certificate issuer:       /CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
Certificate serial:       44ED903E11D90B63F4F9EA751F292E6A560ED089
Authority key identifier: 72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a383030303a3a2f33332d3333203d3e20323730333735.roa
Signing time:             Thu 04 Apr 2024 12:59:51 +0000
ROA not before:           Thu 04 Apr 2024 12:54:51 +0000
ROA not after:            Thu 03 Apr 2025 12:59:51 +0000
asID:                     270375
IP address blocks:        2804:6b10:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl
                          rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 17:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ed:90:3e:11:d9:0b:63:f4:f9:ea:75:1f:29:2e:6a:56:0e:d0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
        Validity
            Not Before: Apr  4 12:54:51 2024 GMT
            Not After : Apr  3 12:59:51 2025 GMT
        Subject: CN=7DBEC11080D5B3CD46D642318CD4373159459CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:73:c0:8d:46:59:a6:e1:66:87:2d:b6:4a:
                    7f:e7:2b:88:10:08:9d:21:55:b8:4a:a3:4f:ab:4d:
                    44:8d:56:83:23:71:9c:c6:ea:f5:0f:67:34:cd:b0:
                    fb:ae:31:9b:c6:ac:80:23:7d:86:e5:bf:5c:f3:75:
                    49:c8:3a:6e:0a:13:24:be:c1:0c:eb:53:cf:f6:5f:
                    4e:49:87:d3:fc:1f:2a:99:c7:96:3c:5d:c0:1a:9e:
                    9d:38:ea:e0:03:96:71:8c:1a:84:37:ad:bc:e7:bb:
                    30:78:9c:41:6e:8d:bd:04:b4:f7:46:e1:2a:0a:1c:
                    cb:5b:1f:1f:e1:e9:27:b3:c3:f9:22:e2:b4:b0:45:
                    25:f0:0b:12:6d:d2:84:4a:2a:c6:a5:9c:ef:f5:05:
                    1f:b0:d0:56:b7:16:34:7a:1b:d2:3d:6d:7c:32:3a:
                    83:a0:98:86:2c:05:48:cf:1f:de:c2:27:08:c5:40:
                    86:6b:92:1a:9d:f8:27:c7:1d:c0:d7:e2:7d:8a:cf:
                    f0:b5:5c:6a:83:a8:9d:8b:9f:e9:36:bd:31:da:17:
                    d4:f7:3f:de:ee:c6:69:5c:70:55:25:d2:ff:33:71:
                    14:c2:13:14:8a:86:77:af:5d:08:6f:41:c7:63:7d:
                    36:87:c6:a6:7d:75:c8:6d:a7:33:d1:f8:cf:d9:26:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BE:C1:10:80:D5:B3:CD:46:D6:42:31:8C:D4:37:31:59:45:9C:AE
            X509v3 Authority Key Identifier:
                keyid:72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a383030303a3a2f33332d3333203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:8d:0e:b5:0a:ff:7b:61:74:a0:e8:b3:a3:d9:68:c9:a7:8a:
         e0:11:6c:2a:33:bd:76:e2:ff:bf:82:52:6b:08:4d:67:31:35:
         95:6d:15:58:21:21:cc:3c:ad:77:a3:e0:86:dd:1f:77:80:ea:
         e6:3e:6c:4f:c5:13:5f:0e:b4:47:3d:02:f4:c3:3a:7b:18:01:
         91:9a:31:57:1a:81:00:a2:b2:f7:da:25:1b:71:47:08:61:24:
         66:0b:37:2b:c0:c6:60:8f:c1:bb:1f:78:53:ea:6c:a2:57:7a:
         a8:d6:2c:a5:90:77:af:57:e4:21:57:70:6d:bb:2c:84:72:6d:
         f4:52:4d:cf:f6:83:f4:92:3b:5c:a2:ec:fc:57:a7:4b:e2:0f:
         61:0a:e5:62:c9:d1:7c:26:09:70:90:f3:61:ed:01:f1:e4:d9:
         33:60:94:02:dd:d4:16:84:41:a6:c1:79:9b:81:8a:37:c5:30:
         15:48:5d:f5:75:ec:c0:79:83:27:4d:e6:39:d7:7c:d4:0a:e2:
         cf:17:06:07:fa:91:dd:9c:fe:64:3e:ba:f9:f7:af:10:9a:9f:
         3c:e2:24:e6:6d:6a:a7:29:1c:4e:df:d8:bb:11:fc:70:d8:d8:
         b4:18:70:d9:39:e9:1e:91:a4:74:a0:30:2b:bc:cd:25:60:0f:
         e7:3d:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:53:57 2024 by rpki-client on console-fra.rpki-client.org