Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa
File:                     323830343a376561343a3a2f33332d3333203d3e20323731363337.roa (raw, json)
Hash identifier:          ENibhksHhrTI1TpR+Yc7z4TdiQJUJHtj9BVaJlyYjwE=
Subject key identifier:   43:09:59:88:E6:76:7A:BB:A2:4D:BE:75:7A:9E:B7:F5:61:C1:4B:A9
Certificate issuer:       /CN=777AF1144189B88FDF022922157DD65E18F5A179
Certificate serial:       6C7D0201A9A3DBC35D9BDC240D9D151E8D0A1C5B
Authority key identifier: 77:7A:F1:14:41:89:B8:8F:DF:02:29:22:15:7D:D6:5E:18:F5:A1:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa
Signing time:             Thu 04 Apr 2024 11:00:18 +0000
ROA not before:           Thu 04 Apr 2024 10:55:18 +0000
ROA not after:            Thu 03 Apr 2025 11:00:18 +0000
asID:                     271637
IP address blocks:        2804:7ea4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl
                          rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7d:02:01:a9:a3:db:c3:5d:9b:dc:24:0d:9d:15:1e:8d:0a:1c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777AF1144189B88FDF022922157DD65E18F5A179
        Validity
            Not Before: Apr  4 10:55:18 2024 GMT
            Not After : Apr  3 11:00:18 2025 GMT
        Subject: CN=43095988E6767ABBA24DBE757A9EB7F561C14BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:4f:1b:1f:f0:dd:e2:d3:56:fe:43:70:e5:
                    0a:5b:da:49:d3:b5:cd:d6:56:f6:93:85:35:75:d1:
                    e4:aa:ae:bb:e8:89:f3:f3:49:d7:8f:11:ed:1f:17:
                    f8:da:3b:c4:d7:a0:68:23:53:dd:9b:8c:f9:61:45:
                    b2:36:f0:fd:68:76:84:cb:f7:75:1a:48:cc:ba:b5:
                    ec:a0:2d:8f:57:a5:5c:e5:a0:79:c3:c2:f7:20:b1:
                    d3:e8:04:03:ef:c6:f2:24:07:d9:c8:45:59:c3:0f:
                    2a:b4:cd:b7:a0:9c:16:79:82:03:2d:6d:85:81:20:
                    ff:7a:f5:1f:64:00:7c:ec:48:de:c1:6a:7a:c0:e6:
                    ca:01:49:9a:09:6e:50:6b:70:b3:e0:de:c3:48:70:
                    c9:a5:fa:f2:d2:fa:19:af:a3:a4:eb:e3:3c:cf:14:
                    19:2c:3a:d5:47:5b:30:91:b3:3e:2b:e5:ae:66:2d:
                    c6:c6:63:1d:95:88:91:91:28:4c:e1:b0:c3:8d:66:
                    7f:ec:e7:8d:67:9f:08:2e:ec:ad:0e:b6:9f:3d:12:
                    6c:96:57:46:99:ea:0b:b2:e4:69:54:41:27:c6:94:
                    d8:d2:f7:71:84:7d:20:a1:64:df:ed:3e:22:71:aa:
                    56:6f:90:0b:1e:c9:dc:4d:ee:3d:dc:04:5b:07:07:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:09:59:88:E6:76:7A:BB:A2:4D:BE:75:7A:9E:B7:F5:61:C1:4B:A9
            X509v3 Authority Key Identifier:
                keyid:77:7A:F1:14:41:89:B8:8F:DF:02:29:22:15:7D:D6:5E:18:F5:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ea4::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:9c:bd:37:aa:26:38:1c:f5:79:04:f0:74:43:fe:26:bf:cc:
         99:7d:aa:48:e8:48:66:ce:94:c9:be:27:ed:c3:6e:18:59:b6:
         a6:ae:3f:b2:83:b3:b4:6a:c2:ef:1c:cc:42:74:6b:1c:da:e2:
         23:79:41:ad:42:67:55:f2:a8:4f:ce:c6:12:63:33:de:dd:ca:
         a9:bd:e9:a9:11:44:cb:f4:b5:46:a6:d2:dd:a4:2c:8b:81:a4:
         43:3b:60:27:6b:49:47:bf:a0:a8:17:fa:f4:2d:92:4b:64:9a:
         2e:7b:1f:39:62:7a:e9:65:a0:ab:6a:be:e0:90:84:d2:df:29:
         17:af:c7:0a:7e:60:94:55:9d:14:8c:06:00:24:fd:44:2c:5c:
         d0:53:4b:73:e8:5b:60:77:98:56:0f:31:6b:b7:83:5d:b0:3a:
         84:8f:16:34:7c:77:e5:04:8a:71:42:32:11:0b:89:94:54:a7:
         1f:98:71:53:d6:96:3d:a7:ee:89:cb:df:ef:59:eb:9a:29:87:
         e8:22:57:1c:32:ef:33:5c:a5:1f:90:f1:34:de:87:4f:a1:f9:
         9c:94:4c:b1:7a:5e:9d:63:da:18:d5:fb:d3:87:e9:56:1c:cd:
         a7:22:8d:f0:54:34:89:cb:61:2d:2e:2e:19:62:c6:4d:b1:26:
         cf:08:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:39 2024 by rpki-client on console-fra.rpki-client.org