Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa
File:                     323830343a366330343a3a2f33332d3333203d3e20323730343430.roa (raw, json)
Hash identifier:          YaNaqmJ2HwEmYEp2bzUiajx7S6ql220JLNhsqnc2A+4=
Subject key identifier:   A8:88:7C:4C:07:DE:B9:65:27:E5:FC:84:EB:5B:AF:C3:68:71:7A:7D
Certificate issuer:       /CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
Certificate serial:       7DFBA34FB83E40DB775DD15C1C747E3F8E5D09D7
Authority key identifier: 43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 21:08:51 +0000
ROA not before:           Tue 23 Apr 2024 21:03:51 +0000
ROA not after:            Tue 22 Apr 2025 21:08:51 +0000
asID:                     270440
IP address blocks:        2804:6c04::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fb:a3:4f:b8:3e:40:db:77:5d:d1:5c:1c:74:7e:3f:8e:5d:09:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
        Validity
            Not Before: Apr 23 21:03:51 2024 GMT
            Not After : Apr 22 21:08:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:f2:e2:af:9b:bb:48:96:66:19:14:71:b5:
                    cf:3f:48:c8:aa:46:26:44:a0:ea:0d:c7:cc:e0:5a:
                    b8:ee:86:bb:24:35:96:41:84:ff:97:a7:9e:38:cb:
                    d8:e0:05:86:d8:23:d3:40:bb:ae:3a:98:f6:fe:c4:
                    23:a0:3b:53:72:3b:f1:9d:f7:f9:3d:d7:1b:1d:8a:
                    89:3c:17:68:17:40:16:25:d1:b2:0a:13:1e:39:91:
                    61:42:59:8f:93:7a:50:03:ea:2f:7b:3c:6a:a6:90:
                    6e:cb:3d:8f:7b:06:7b:d0:3f:03:dd:40:37:02:d9:
                    73:a2:8d:58:96:15:9d:88:2e:a6:47:a8:96:73:7e:
                    a7:1a:85:8c:4d:8e:47:be:4d:c2:ab:b6:35:83:16:
                    10:b4:03:4d:cb:a7:6d:c7:7d:24:5a:78:51:d5:19:
                    d6:1e:55:19:d5:a1:42:25:03:fa:92:fa:84:1e:13:
                    31:54:5e:8d:bc:27:c3:ad:04:6a:2d:30:5f:dd:56:
                    d5:4a:0e:f8:ba:5b:a3:f2:d6:b4:30:87:45:eb:91:
                    6b:9d:3e:82:50:ed:b3:11:9d:45:f4:4b:45:7a:30:
                    40:fa:6d:f6:01:83:8e:ff:10:92:9d:b2:b9:56:81:
                    f5:44:6d:37:44:9c:12:40:c6:23:5e:ba:3a:8d:cc:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:7C:4C:07:DE:B9:65:27:E5:FC:84:EB:5B:AF:C3:68:71:7A:7D
            X509v3 Authority Key Identifier:
                keyid:43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:00:c5:e9:13:9b:13:f5:fb:7e:ef:21:e4:fe:a1:53:3d:e7:
         07:90:0d:74:8c:26:21:65:e3:ae:e7:fa:f8:0c:d4:e2:95:b2:
         54:a5:f8:2e:97:4b:71:4f:98:80:bd:d9:49:26:7f:12:14:d2:
         62:a8:a3:20:4d:3d:09:a0:02:dd:0e:bb:5d:f1:64:70:3a:73:
         df:bb:18:df:1f:50:62:3d:3a:b7:e7:87:9e:16:d5:e9:37:e6:
         70:cd:a2:30:e6:f6:e5:c8:a2:cf:18:0b:85:38:f1:ed:a8:40:
         f3:d1:53:89:39:8f:9d:10:c6:6a:88:43:8d:b4:d2:24:12:9a:
         b1:ce:23:94:33:1b:ae:64:d9:b5:b3:0e:9a:a5:4a:8f:55:49:
         f6:4b:70:8d:a8:04:f6:10:7d:28:14:06:a3:63:c5:db:8b:5f:
         0c:b7:d4:be:79:56:c2:98:92:c6:ab:e8:f1:00:4e:7c:2c:14:
         ee:80:84:9d:e6:ff:e4:db:98:b9:3a:56:b2:8c:e3:cd:74:c5:
         79:5c:b3:7a:a5:5f:5f:f5:9d:8e:c8:d1:ae:88:7b:90:6c:3f:
         de:e5:d6:e8:1d:22:43:ec:f3:36:69:7e:38:74:cd:ab:6f:3d:
         d0:d3:37:9a:57:18:ec:80:88:56:1b:9a:ab:8f:a0:a9:df:af:
         af:aa:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:12:48 2024 by rpki-client on console-ams.rpki-client.org