Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/323830343a373464633a3a2f33322d3332203d3e20323731303038.roa
File:                     323830343a373464633a3a2f33322d3332203d3e20323731303038.roa (raw, json)
Hash identifier:          mbgL9czFyCvI1yE9FcyXa0Ebn7AfRwIU42AakH0ZYYc=
Subject key identifier:   FF:8B:D7:61:10:FE:0B:CB:76:A5:12:E5:23:AB:51:74:59:38:2F:0E
Certificate issuer:       /CN=D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27
Certificate serial:       2F7F56CD9CC5F74F5DCFB9DB86C08AEB2267289D
Authority key identifier: D4:AD:C2:24:86:EF:8E:2F:FB:5A:CA:85:2B:B0:18:F4:A6:D5:8D:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/323830343a373464633a3a2f33322d3332203d3e20323731303038.roa
Signing time:             Fri 05 Apr 2024 00:38:57 +0000
ROA not before:           Fri 05 Apr 2024 00:33:57 +0000
ROA not after:            Fri 04 Apr 2025 00:38:57 +0000
asID:                     271008
IP address blocks:        2804:74dc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.crl
                          rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7f:56:cd:9c:c5:f7:4f:5d:cf:b9:db:86:c0:8a:eb:22:67:28:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27
        Validity
            Not Before: Apr  5 00:33:57 2024 GMT
            Not After : Apr  4 00:38:57 2025 GMT
        Subject: CN=FF8BD76110FE0BCB76A512E523AB517459382F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:74:61:45:a3:15:ed:50:3e:81:9e:11:c5:96:
                    8f:f5:11:9d:10:e9:b1:d1:3c:93:e2:e7:9a:5f:6c:
                    7c:36:15:0e:5d:a9:f6:15:2b:5a:73:64:6f:25:44:
                    56:98:71:f9:f6:a5:99:11:75:9d:a4:8a:67:ca:9b:
                    3b:68:a1:d3:2a:3d:9c:0c:10:1b:ad:e9:c2:14:8e:
                    c6:c6:3e:53:b7:79:e8:31:c0:e1:d4:5e:fa:af:19:
                    0f:d0:89:96:c2:ef:70:b4:8d:cb:9c:15:f2:a3:c9:
                    80:d4:ec:2b:e7:64:ef:b4:c1:33:a2:f8:0e:48:fa:
                    32:48:f5:2b:9e:a8:37:0e:19:a1:b7:de:77:46:35:
                    7c:23:d2:b0:6a:be:b4:39:21:b2:d5:7e:78:10:36:
                    58:b7:1a:e4:72:b2:ac:29:2a:73:21:84:d3:09:77:
                    f3:04:09:4e:de:6d:c4:27:39:73:67:8a:f0:7f:eb:
                    96:92:9a:20:98:21:15:4d:ca:8c:ab:e1:10:17:36:
                    64:dd:57:1e:c3:87:54:32:02:49:52:3f:60:d5:6e:
                    15:e2:7d:82:6e:71:13:a5:e2:40:25:30:c4:ec:d1:
                    bf:37:58:8d:6a:cb:f2:08:ff:3c:05:58:c7:a7:e1:
                    0e:cf:af:8e:a1:03:c8:19:0e:ea:f8:5b:dc:a4:eb:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8B:D7:61:10:FE:0B:CB:76:A5:12:E5:23:AB:51:74:59:38:2F:0E
            X509v3 Authority Key Identifier:
                keyid:D4:AD:C2:24:86:EF:8E:2F:FB:5A:CA:85:2B:B0:18:F4:A6:D5:8D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/323830343a373464633a3a2f33322d3332203d3e20323731303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:c0:1b:7c:bb:c1:27:37:ee:87:cc:44:fe:3c:1d:bc:15:00:
         f2:8c:f0:4e:f8:e7:4f:ed:eb:e9:47:b9:45:6f:3e:e2:67:d8:
         d6:21:9c:2d:a7:8f:94:66:49:84:be:7d:ba:7c:2d:d7:e2:ee:
         9a:52:5d:d5:fe:ba:e0:ea:bd:17:2b:84:8a:df:0a:79:5c:f5:
         dc:56:ce:03:c9:1d:5b:83:28:1c:a1:91:ab:51:f2:9d:e9:27:
         b9:39:38:c7:b6:f6:d5:7e:99:60:13:35:0c:f4:4f:ce:aa:df:
         fe:b7:22:e7:8a:44:28:d1:14:f3:e3:59:d7:5a:c5:7e:0f:a6:
         b0:d0:44:4b:eb:45:64:fe:23:b3:cd:a0:4d:83:3a:01:56:4d:
         cd:7e:c9:67:99:80:0d:9f:d2:8a:5b:c9:fa:35:ff:30:c3:18:
         0d:00:b9:18:9e:85:aa:dd:61:1e:8f:4a:12:d8:8e:8f:87:a0:
         15:6f:ac:56:4b:72:c1:22:1b:f7:d3:05:f9:c7:66:f0:1a:f3:
         88:66:b3:d6:c4:f0:36:fb:2f:38:fc:cb:eb:a3:aa:71:8b:4b:
         dd:00:c5:33:15:ef:f6:a9:36:5d:9e:bd:ff:72:bf:f1:5d:65:
         39:7c:a8:d5:17:6f:b2:69:7f:54:78:86:2b:91:d0:00:37:00:
         f0:ca:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org