Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33342d3334203d3e20323730343430.roa
File:                     323830343a366330343a3a2f33342d3334203d3e20323730343430.roa (raw, json)
Hash identifier:          8iTXOnAXdaevz3LV6FXwpa+XFpDNZoupNqatzbApxJo=
Subject key identifier:   CC:39:87:D6:62:3E:80:5C:DB:66:27:73:50:1B:00:B8:36:9C:15:BA
Certificate issuer:       /CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
Certificate serial:       2DE46A823394479EB3B503D927A8BC6D15B7A9F3
Authority key identifier: 43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33342d3334203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 21:08:50 +0000
ROA not before:           Tue 23 Apr 2024 21:03:50 +0000
ROA not after:            Tue 22 Apr 2025 21:08:50 +0000
asID:                     270440
IP address blocks:        2804:6c04::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e4:6a:82:33:94:47:9e:b3:b5:03:d9:27:a8:bc:6d:15:b7:a9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
        Validity
            Not Before: Apr 23 21:03:50 2024 GMT
            Not After : Apr 22 21:08:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:f2:39:5b:e2:a5:e7:84:00:65:cd:c5:e3:
                    ba:2d:21:2e:51:9f:59:97:a3:fe:20:68:f7:73:4a:
                    e2:12:24:d2:f0:ba:88:5f:7b:fa:d0:78:f3:00:a4:
                    38:07:6a:37:d0:8d:1b:5b:22:2a:d3:d6:18:1c:76:
                    5c:08:e4:5b:fa:80:dc:77:3b:0d:87:cf:d3:91:0e:
                    9b:0c:42:72:ca:24:3a:d3:0e:bc:84:a0:93:21:10:
                    84:43:9f:74:37:0c:75:6b:a5:0c:cf:98:33:29:5b:
                    89:a5:bd:2a:9f:ab:ed:76:e8:43:3b:e7:e9:c2:0e:
                    21:8b:8a:73:b3:13:89:ba:47:b9:a4:f0:3f:e0:50:
                    08:da:0f:62:06:db:8b:9c:75:66:11:d7:7a:aa:4d:
                    c8:88:08:b2:83:c7:92:08:3c:c1:d9:cd:6c:56:f1:
                    6d:48:a0:bb:bf:28:d5:16:eb:db:6b:eb:70:55:1e:
                    2e:54:d2:d9:91:66:c8:cc:ba:54:58:e2:90:60:5b:
                    e1:2a:33:73:1e:e3:f8:55:45:a2:52:92:89:51:01:
                    bf:21:51:fb:7f:7d:73:ec:9c:a6:05:4f:31:77:07:
                    4f:23:64:1f:de:94:86:fe:db:5b:24:a9:10:74:f1:
                    f7:2d:41:85:85:74:e0:0f:99:5d:41:48:f4:35:9e:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:39:87:D6:62:3E:80:5C:DB:66:27:73:50:1B:00:B8:36:9C:15:BA
            X509v3 Authority Key Identifier:
                keyid:43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33342d3334203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:bd:4e:5d:f5:5b:23:72:ee:d6:cb:74:6c:73:c4:5a:35:25:
         b8:4e:50:d2:e3:80:60:38:df:c3:c0:91:e4:f7:f5:b1:06:0d:
         ea:6f:22:58:bf:79:70:1c:25:67:03:e2:5b:86:48:c6:3a:e7:
         cf:b9:74:32:bd:24:48:71:f4:23:b6:5c:68:1a:1f:08:2a:2a:
         12:c9:56:dc:fe:ef:9a:91:bb:82:8c:6e:b7:9e:a2:a3:3f:b5:
         53:0c:5e:a2:1e:31:83:cf:6b:90:10:f4:21:28:20:2f:27:89:
         5c:3c:dd:3b:f8:78:68:bf:c6:07:4c:3f:39:cb:5c:d5:66:9a:
         82:88:17:f5:13:e3:a6:0f:a5:cd:a8:ba:9e:cf:1e:fd:8a:37:
         67:10:6a:d2:4d:01:65:ad:b0:83:03:c5:50:a1:a3:e8:74:80:
         f1:d2:b7:45:fd:0d:31:5e:c8:f1:63:a3:aa:bf:ea:39:2e:e6:
         5d:72:be:c4:0e:48:4e:d1:2f:fb:1c:c9:14:23:14:dd:5a:bf:
         b3:97:59:6a:92:85:b1:60:4c:97:46:15:81:90:26:00:37:9b:
         96:d7:85:2c:1a:1f:c4:05:02:a1:b1:7b:b8:3a:f3:ba:2f:2d:
         54:87:05:9a:31:60:7a:d8:99:8c:70:fd:18:f9:38:f3:d1:fd:
         1c:a1:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:12:48 2024 by rpki-client on console-ams.rpki-client.org