Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa
File:                     323830343a373461343a3a2f33322d3334203d3e20323730393934.roa (raw, json)
Hash identifier:          e7ElA6SvAhLdY6ciu5ye/DjmkJisJOe+mbc8EBQrltI=
Subject key identifier:   7E:1F:05:54:43:42:7D:A0:97:1A:3C:F1:58:8B:E8:25:37:74:6F:B1
Certificate issuer:       /CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
Certificate serial:       1BC6304C884710CC6320E0211E757EE711150495
Authority key identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa
Signing time:             Wed 03 Apr 2024 18:32:36 +0000
ROA not before:           Wed 03 Apr 2024 18:27:36 +0000
ROA not after:            Wed 02 Apr 2025 18:32:36 +0000
asID:                     270994
IP address blocks:        2804:74a4::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl
                          rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c6:30:4c:88:47:10:cc:63:20:e0:21:1e:75:7e:e7:11:15:04:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
        Validity
            Not Before: Apr  3 18:27:36 2024 GMT
            Not After : Apr  2 18:32:36 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:4c:4f:82:71:2f:fd:b9:3e:61:4c:0d:24:
                    eb:66:fd:30:24:8e:5d:d6:92:d2:a8:df:00:71:b8:
                    a5:87:55:9f:95:52:a7:19:c5:18:ab:83:1a:1b:85:
                    3a:16:57:9c:ce:d7:dd:df:24:89:79:92:ea:2e:d0:
                    3b:a6:16:b7:fe:b4:e4:f8:47:7a:05:eb:5e:ce:34:
                    da:be:00:92:a9:fb:5e:c2:a9:00:9e:0e:94:e3:98:
                    b1:17:59:c0:3e:ef:2f:67:40:5b:73:72:f4:82:7d:
                    72:07:3b:df:65:70:3e:b0:c8:c3:1a:15:dd:30:f7:
                    7e:18:a1:17:e0:04:49:ba:2b:4e:fe:53:89:68:cc:
                    0c:dd:69:54:37:68:64:7c:9a:22:d5:0f:f6:12:5a:
                    4b:e7:9b:4d:10:65:e7:3d:f5:d6:64:65:7f:fa:0b:
                    0e:7c:fa:e6:13:bc:9f:d2:5c:bd:dd:61:e2:fc:75:
                    79:b1:09:6c:dd:33:5f:82:76:56:16:00:47:7c:09:
                    d1:27:92:f3:9e:ca:a7:85:52:1b:e3:0f:10:93:90:
                    f4:39:81:80:8b:76:b2:c1:03:9d:63:28:34:bb:6e:
                    d0:55:b9:56:12:e3:e3:c5:9d:0a:d8:3a:22:f6:01:
                    3f:71:25:ce:31:5b:6f:f1:0e:c7:b4:f0:b8:d2:f0:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:05:54:43:42:7D:A0:97:1A:3C:F1:58:8B:E8:25:37:74:6F:B1
            X509v3 Authority Key Identifier:
                keyid:B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:16:0a:29:31:cf:27:93:f3:fa:da:0e:9f:a1:32:0e:c5:
         a8:9e:8f:4c:92:9c:c7:a4:a4:70:72:a7:dd:56:0c:2d:bb:b7:
         bd:b6:51:34:59:87:d8:30:16:5c:80:2a:ad:e8:94:bf:f9:a2:
         fc:63:b6:bd:66:69:fa:2e:37:6c:60:82:e8:cf:c9:e0:fb:a5:
         20:a3:e0:15:02:70:c2:61:a1:60:41:20:30:6f:d7:8c:fb:e1:
         1e:0a:e6:16:b4:cb:7f:88:af:39:85:bc:de:ae:56:ef:74:1d:
         13:85:9c:00:12:dd:07:db:3c:e7:2d:76:f9:e2:06:57:53:be:
         b0:93:72:ff:6c:3b:15:ce:69:78:25:df:fc:f9:16:f4:8a:6a:
         7b:af:f8:6c:4b:9a:9c:4d:4b:41:8f:8b:7d:d7:88:e5:10:ab:
         f7:c4:b3:c9:53:5e:a5:79:b0:0f:60:02:83:fb:24:3b:b2:ba:
         0e:0a:cb:00:b6:1c:05:89:4f:7f:25:7a:eb:f5:1c:15:f7:19:
         d8:4d:b1:fa:13:14:83:3a:9e:a7:8d:64:71:b7:f1:67:ed:a9:
         d7:85:50:62:a7:92:55:37:89:f3:ff:8f:f0:63:f3:a4:27:28:
         96:d4:59:59:d9:1f:d2:a2:50:7d:b4:9b:d1:d0:95:d7:be:d5:
         e8:7d:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:45 2024 by rpki-client on console-fra.rpki-client.org