Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa
File:                     323830343a373033303a3a2f33332d3333203d3e20323730373131.roa (raw, json)
Hash identifier:          v4hltuGhGloSR+s/w1LqD7M4PSCb+J8ogln1tNLHklM=
Subject key identifier:   D6:EE:47:43:B3:86:31:33:B8:8B:07:48:90:DB:72:00:1C:D7:F8:68
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       33372CE97E1F6AD5FFEEFF52A37A7F6AEC136746
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa
Signing time:             Thu 29 Aug 2024 14:22:57 +0000
ROA not before:           Thu 29 Aug 2024 14:17:57 +0000
ROA not after:            Thu 28 Aug 2025 14:22:57 +0000
asID:                     270711
IP address blocks:        2804:7030::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:37:2c:e9:7e:1f:6a:d5:ff:ee:ff:52:a3:7a:7f:6a:ec:13:67:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Aug 29 14:17:57 2024 GMT
            Not After : Aug 28 14:22:57 2025 GMT
        Subject: CN=D6EE4743B3863133B88B074890DB72001CD7F868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:11:43:4c:13:f1:49:07:b5:1e:60:1c:4d:
                    90:6b:59:c7:21:88:85:07:2d:3e:10:55:b8:56:28:
                    24:62:d6:ac:a2:6c:48:4b:ee:23:63:45:99:83:b3:
                    db:5c:19:05:a6:ff:39:fc:84:98:b2:6f:1a:3d:b6:
                    df:90:28:8b:45:70:bd:02:91:40:65:43:ed:94:a3:
                    48:5b:a3:ba:a4:ca:06:ef:95:f5:e5:93:33:cb:05:
                    da:de:fb:83:3e:42:b7:bf:fd:53:48:83:93:f8:ad:
                    07:fd:e1:65:64:c3:40:4e:5f:07:93:39:b1:cd:30:
                    71:3f:e7:30:1b:c7:5e:c2:01:11:c6:37:00:39:7f:
                    84:81:95:d7:37:96:56:42:df:22:d5:27:a2:66:57:
                    0c:c3:ff:05:35:d6:3b:ff:b0:25:c4:b1:06:37:8d:
                    2e:a5:05:d9:1e:a7:60:0e:5f:f5:3f:4c:46:99:62:
                    44:54:aa:64:05:36:9d:0d:ad:6d:cd:5b:67:5f:be:
                    d5:ee:42:4f:04:dc:c3:52:4a:e7:a3:07:e5:be:65:
                    0b:9c:8c:ca:26:85:b4:78:bb:97:e2:87:46:6d:e0:
                    9c:38:c9:1c:1a:01:45:be:3e:9b:84:d3:32:1d:73:
                    0a:bc:81:e5:4c:4c:07:b6:1b:19:43:2a:ba:fc:b6:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EE:47:43:B3:86:31:33:B8:8B:07:48:90:DB:72:00:1C:D7:F8:68
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7030::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:36:cd:60:32:b6:4f:b4:4c:a0:ca:d2:cf:8b:03:18:53:
         1a:7e:96:d7:be:3c:c9:d3:65:55:ce:4c:91:b9:1b:f1:e6:07:
         6e:f5:63:7c:06:ca:24:b8:2b:0d:1e:5a:7f:9e:3d:9d:31:7d:
         23:ef:d6:35:9e:b6:9d:c2:29:4a:31:bc:30:50:b3:0f:bd:c6:
         40:30:7d:20:77:59:34:cf:73:42:81:ea:d6:ac:b0:9c:23:7f:
         8d:6d:8a:c4:8e:e2:7f:89:21:09:64:0a:3f:be:25:d9:f9:8b:
         4d:1f:40:1a:4e:62:d5:9c:da:34:bf:1e:c7:0a:f5:25:b2:89:
         bc:42:6a:6f:e6:fb:eb:5f:e7:49:9d:7d:9e:ae:a6:01:8e:a1:
         a9:0a:32:d2:b4:de:28:aa:00:2c:1f:2c:75:5e:5e:2a:0a:94:
         6c:ba:bb:33:61:ac:2c:a4:da:a6:59:6b:60:67:3f:03:f5:12:
         3c:68:b9:2e:17:5d:dc:6d:69:82:dd:5e:d8:d6:49:29:09:46:
         2b:28:97:45:b7:6b:60:d1:53:53:75:70:b2:79:75:f7:58:fc:
         bd:21:32:f5:80:e1:3c:59:c0:ce:55:90:df:c4:d6:d1:db:f5:
         b2:c1:90:77:08:8e:cb:84:45:3f:f1:6f:20:e1:5a:04:e1:f7:
         f3:34:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:59 2024 by rpki-client on console-fra.rpki-client.org