Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa
File:                     323830343a373131343a3a2f33322d3438203d3e20323730373635.roa (raw, json)
Hash identifier:          vUxzMcQ05RVWyClSNRxU17ZrbOYtUdM7WCiirSbXvTo=
Subject key identifier:   20:0C:A4:FE:5F:AD:F6:1B:12:7B:42:7C:1C:3B:63:A1:AA:F4:3B:22
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       369E0C5D53D12C9BE13F5C568B9B37D0CCF9875A
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9e:0c:5d:53:d1:2c:9b:e1:3f:5c:56:8b:9b:37:d0:cc:f9:87:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:6d:93:fa:1d:a0:4f:8c:7a:a4:16:a4:0e:
                    a1:5a:7a:82:b3:98:4b:a5:d8:56:a0:e7:03:7b:58:
                    74:0b:79:70:d2:0b:14:dc:2d:40:29:fa:72:cd:aa:
                    7c:7c:97:fd:48:38:d6:e4:9e:a2:47:fc:a0:59:7b:
                    4f:a6:7b:05:37:eb:a7:52:dd:bc:c3:3f:f6:32:04:
                    08:ae:15:1f:b7:7f:65:54:ae:e0:33:ae:83:05:b5:
                    e4:5b:7a:9a:dc:ed:36:20:62:9a:4e:74:e7:95:c4:
                    82:5b:4f:54:04:13:ce:5f:48:3c:1b:3a:c1:fc:30:
                    09:05:7f:0a:3d:34:95:11:e0:5e:46:ac:1e:46:74:
                    07:90:58:71:06:e7:a0:c4:c5:d0:53:58:d7:8a:bc:
                    53:d2:8f:65:ab:51:e3:e0:66:18:7a:9b:42:5f:c7:
                    86:98:64:04:cc:b1:b3:14:fa:1a:6e:fb:cb:36:be:
                    24:fd:67:f4:df:8e:7f:b5:3b:d4:a0:9c:49:85:8b:
                    04:e5:53:6c:62:50:79:28:17:e1:96:d7:21:f1:b7:
                    7c:bd:29:af:d1:0d:b7:f1:c8:6b:aa:45:58:f2:26:
                    32:74:3b:97:9f:53:4f:98:a7:2c:ea:dc:98:82:9c:
                    85:5a:01:91:b8:60:3e:a0:26:39:ee:9a:58:20:b5:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0C:A4:FE:5F:AD:F6:1B:12:7B:42:7C:1C:3B:63:A1:AA:F4:3B:22
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:93:0e:4a:82:13:cb:c6:10:eb:bc:bc:e5:70:9a:d0:96:25:
         08:29:dd:ca:e8:42:79:68:73:b2:e5:b7:c6:ed:48:71:e3:da:
         c7:ae:a7:17:28:d8:0e:cc:56:f2:10:c3:7b:8a:1f:e6:31:02:
         50:b8:74:2f:f3:da:c4:93:ea:90:ea:31:50:71:ee:f3:c7:34:
         a9:ae:ba:cc:45:3e:60:a8:62:96:58:bd:38:47:82:d8:9b:d8:
         56:6a:35:ca:99:18:7c:fc:e4:e8:16:7e:fc:ff:d1:2e:05:66:
         6f:af:3a:57:77:55:05:01:5b:cf:cc:8a:2f:aa:25:36:e0:d2:
         f9:d0:c1:24:83:15:e6:67:e8:2e:35:3e:d3:76:f6:72:33:72:
         d9:c4:a5:5e:d9:b1:f3:4e:5d:95:59:c0:51:73:58:22:d5:83:
         e6:24:13:bb:5b:e0:d3:20:d8:69:91:92:ef:3c:f2:0b:f5:e8:
         0b:a1:25:b2:1e:49:e3:60:a4:25:19:ed:f4:e3:3b:ae:af:50:
         45:c6:96:9e:a5:f8:11:5e:81:52:94:f1:3d:83:52:c0:e9:36:
         06:25:e6:62:6a:d4:7d:ba:2b:5b:f9:22:55:f7:ac:33:96:5c:
         33:28:19:7e:29:b8:18:bc:a7:40:35:c8:2e:87:39:2f:96:83:
         41:ce:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org