Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa
File:                     323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa (raw, json)
Hash identifier:          PERjhygqIYVGfnfnhiP1a0sDrgAD9wm7nHb4j3uAJy0=
Subject key identifier:   24:00:A0:E9:10:05:F2:E1:00:BA:70:DC:E2:3B:77:F6:54:0B:4C:03
Certificate issuer:       /CN=73B656B5831532E23BC621E748382CCCE6CA40E8
Certificate serial:       2EAEF63351AB7F74BF1CDABCB4000B74D49EA6B9
Authority key identifier: 73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa
Signing time:             Thu 08 Aug 2024 19:22:49 +0000
ROA not before:           Thu 08 Aug 2024 19:17:49 +0000
ROA not after:            Thu 07 Aug 2025 19:22:49 +0000
asID:                     271363
IP address blocks:        2804:7a4c:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ae:f6:33:51:ab:7f:74:bf:1c:da:bc:b4:00:0b:74:d4:9e:a6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73B656B5831532E23BC621E748382CCCE6CA40E8
        Validity
            Not Before: Aug  8 19:17:49 2024 GMT
            Not After : Aug  7 19:22:49 2025 GMT
        Subject: CN=2400A0E91005F2E100BA70DCE23B77F6540B4C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:35:29:32:67:6e:66:57:78:75:de:c1:10:
                    ba:9e:c3:ff:86:d7:f6:78:93:a9:79:4d:a5:c3:45:
                    8b:47:64:a4:9d:68:dd:ea:0e:89:e2:12:bf:f1:eb:
                    6e:5a:ae:b4:6d:90:4d:c4:f4:cf:33:ea:44:75:a3:
                    aa:eb:fc:3f:a5:ad:e2:85:53:92:a0:13:15:19:1d:
                    2a:db:cc:5f:06:b8:9f:cb:56:36:ca:32:9a:82:d7:
                    b2:a6:e5:e2:7b:dd:37:39:1b:68:66:b8:71:40:68:
                    7d:49:38:01:3f:6d:54:11:14:2f:33:f7:c2:14:e4:
                    95:04:43:85:28:e7:6f:1f:1c:62:40:94:ff:73:36:
                    53:45:a8:b0:49:1d:b2:49:d6:f3:83:5d:37:71:45:
                    d4:be:9f:e4:e4:41:1f:82:5a:94:24:82:ef:38:e6:
                    f8:7a:3b:7b:50:68:2d:72:32:72:67:6a:aa:cf:ae:
                    98:1c:84:02:de:b6:cd:ad:7c:60:df:7a:59:24:9d:
                    07:3c:3b:ce:80:6e:a3:54:12:e4:50:f2:d8:e0:fe:
                    96:d1:02:86:2a:b7:ae:c9:14:6e:09:3a:6e:80:b4:
                    94:71:ee:46:39:ed:51:13:ed:4e:2c:18:41:aa:25:
                    cc:b7:9d:67:35:20:23:fc:45:96:07:32:45:27:59:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:A0:E9:10:05:F2:E1:00:BA:70:DC:E2:3B:77:F6:54:0B:4C:03
            X509v3 Authority Key Identifier:
                keyid:73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a4c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b8:1f:64:25:12:66:73:6e:07:4c:1a:de:ab:0e:d4:76:66:5d:
         d5:af:1c:96:1c:60:04:fb:49:fe:3c:d2:7d:84:c9:0c:4a:ba:
         76:4b:98:0e:f8:81:08:b3:7c:70:96:b4:eb:27:71:ef:fa:00:
         2c:0a:c9:dc:59:a4:2d:2a:79:7e:1a:53:60:bf:85:5f:ac:54:
         b8:8c:a9:1b:6a:b7:94:9c:24:62:2f:d1:86:2d:ff:f1:55:4b:
         5c:a8:df:a5:68:f6:b5:0e:55:22:c4:c6:70:69:07:39:97:61:
         9c:ca:64:36:87:5d:26:fb:59:71:f9:75:c9:89:88:8e:0e:f6:
         87:85:8c:4d:e6:a1:ed:aa:05:4e:55:4a:c9:29:2d:a3:73:ac:
         bf:ee:7b:61:c7:1d:1a:07:60:1e:c8:5a:70:06:74:9b:14:49:
         b8:fe:68:08:d1:e0:a2:ab:4c:fd:93:f9:ec:39:e6:18:f5:33:
         5d:a9:b3:84:ed:dd:16:28:9a:15:ac:e4:0f:7d:5b:33:a6:62:
         a5:48:4a:75:ab:27:5e:b4:38:39:66:ba:46:dc:8d:fe:94:e5:
         16:35:41:01:3a:f7:ea:8b:7a:6c:14:89:f5:66:e5:d6:3b:11:
         88:35:3a:56:1b:f8:09:cb:03:45:9c:20:b0:7c:3b:e7:37:05:
         87:28:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org