Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          ly/picm937q2BVOt40pXDlcmPA0LtA9FEkC3bqB3tUg=
Subject key identifier:   30:70:F9:8E:4D:F0:61:D5:16:E9:65:CE:D2:B9:D8:6C:3F:9F:30:90
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       6950F175356CC4AA9AB1F9FB3F2A047F519B01CD
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114:164::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:50:f1:75:35:6c:c4:aa:9a:b1:f9:fb:3f:2a:04:7f:51:9b:01:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:1e:b7:1b:b2:dc:56:6a:52:10:23:6c:f3:
                    4a:00:2d:68:c3:5e:43:22:17:7d:5a:0e:5e:d2:86:
                    a9:68:70:19:b4:98:ba:90:87:42:1b:f3:17:b5:af:
                    c3:44:ca:33:f4:74:75:6d:30:6e:36:a4:7f:6b:6d:
                    27:1c:50:26:6e:e3:1a:08:7e:f8:3b:bd:6b:1c:51:
                    2d:14:8a:c6:66:44:36:ab:eb:64:c0:b3:92:95:b9:
                    fe:ae:52:24:64:cb:f2:9b:73:4d:f4:fc:3c:9a:2f:
                    b0:13:ba:4e:19:97:94:2f:1d:ee:1b:88:ac:15:0e:
                    8a:99:49:3b:e6:d1:45:51:ea:db:6d:32:a8:a9:5b:
                    fe:b3:82:b8:05:6b:b6:2d:82:8e:3a:b9:69:f4:ad:
                    4d:c1:bc:d2:d1:9c:a7:0f:9c:2e:e9:e2:8f:04:0b:
                    86:f9:d6:05:01:7c:7a:33:04:5d:9d:44:a4:a1:aa:
                    e2:ab:2d:2b:fa:76:f6:9d:9d:93:52:ae:23:9b:0a:
                    cc:40:ad:78:4f:90:82:a3:f1:3b:d2:72:e1:10:52:
                    70:67:2f:1b:f0:17:e0:43:e1:f1:05:4c:50:64:57:
                    0e:bb:51:ca:5c:91:a6:8e:8d:ed:d7:d9:2c:f6:a0:
                    7a:b5:08:b6:a3:fb:28:5e:81:99:4b:e1:ae:fa:32:
                    43:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:70:F9:8E:4D:F0:61:D5:16:E9:65:CE:D2:B9:D8:6C:3F:9F:30:90
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:164::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:52:dd:a1:08:9b:58:13:3d:0f:8b:85:bb:aa:91:5b:bf:78:
         b3:c8:82:b3:4a:2b:af:78:89:e0:52:64:17:f7:f7:9c:65:35:
         01:75:d0:4e:78:64:23:fe:7c:f9:4b:4f:47:df:15:7f:99:b1:
         95:b1:b9:b8:43:19:37:82:71:42:de:2a:4b:d0:fd:17:d5:34:
         83:78:89:80:b2:6d:5a:65:5c:13:9a:f5:99:da:66:0a:11:c3:
         1a:5c:07:bd:87:44:77:1c:1f:43:d1:e0:40:27:89:c1:70:d7:
         cc:e6:81:d4:29:9a:cc:95:c8:45:f7:7a:e0:af:22:dd:6c:d3:
         29:80:f9:3d:ee:59:7d:c6:51:fe:4c:df:b3:cd:95:f7:f6:92:
         fd:2a:ca:e7:17:d3:52:69:c6:ad:d6:dd:6f:07:4e:fd:0c:41:
         6b:2e:11:0e:67:1c:4e:a8:08:8c:cc:99:76:1b:72:1b:41:54:
         78:27:33:d4:6f:03:8f:ef:6a:76:8e:8c:ac:90:8b:8c:17:f0:
         1b:09:c3:23:76:65:ac:3a:25:52:0c:e8:4c:b2:74:f5:c7:52:
         fd:b8:d3:93:5a:93:1e:a6:51:8e:78:4d:e0:a5:e5:25:1b:2a:
         b1:b6:0e:a7:11:9c:fb:6f:7c:47:69:bc:cc:32:41:6c:9b:af:
         50:13:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org