Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313065303a3a2f34332d3433203d3e20323731333633.roa
File:                     323830343a376134633a313065303a3a2f34332d3433203d3e20323731333633.roa (raw, json)
Hash identifier:          f+u6yu5ruKJW8LI59uBs+oJi/KEJUkCy6VVsqdxMaOw=
Subject key identifier:   CA:8B:B2:2A:11:88:3D:F1:BD:CB:53:A2:EB:B1:7F:72:1A:4C:EF:22
Certificate issuer:       /CN=73B656B5831532E23BC621E748382CCCE6CA40E8
Certificate serial:       6A16D023704A647B9FA0F7227B7A25345442582D
Authority key identifier: 73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313065303a3a2f34332d3433203d3e20323731333633.roa
Signing time:             Thu 08 Aug 2024 19:22:49 +0000
ROA not before:           Thu 08 Aug 2024 19:17:49 +0000
ROA not after:            Thu 07 Aug 2025 19:22:49 +0000
asID:                     271363
IP address blocks:        2804:7a4c:10e0::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:16:d0:23:70:4a:64:7b:9f:a0:f7:22:7b:7a:25:34:54:42:58:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73B656B5831532E23BC621E748382CCCE6CA40E8
        Validity
            Not Before: Aug  8 19:17:49 2024 GMT
            Not After : Aug  7 19:22:49 2025 GMT
        Subject: CN=CA8BB22A11883DF1BDCB53A2EBB17F721A4CEF22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:58:bc:e8:6f:f1:ef:09:b1:93:5d:c2:01:04:
                    c5:1a:c5:43:c6:57:c2:96:b9:bf:a2:51:d7:6f:f5:
                    43:c6:83:1c:51:d0:93:5d:24:c7:75:bf:8d:45:f5:
                    ed:3e:06:a9:fe:01:4e:57:fa:6b:40:a4:83:9a:68:
                    98:b1:5a:f8:1d:da:cd:9e:c5:c4:ba:b7:1e:d1:2c:
                    05:66:9b:20:05:28:19:4c:2e:41:39:23:22:0a:b7:
                    85:c3:1d:38:45:59:a3:75:bf:6a:ba:16:fc:bf:c9:
                    d7:53:e5:44:85:b5:77:2e:35:f0:f4:b7:e8:4a:69:
                    1a:cd:76:4f:8d:11:ea:38:dd:89:31:04:8a:0b:bf:
                    42:8d:bf:48:4e:c3:e5:b5:f8:75:1a:60:00:58:85:
                    ef:3c:a3:ff:4e:39:20:90:a8:16:1d:f2:52:6b:1f:
                    35:a9:c1:5e:66:4a:72:aa:88:24:58:dd:6c:ac:8e:
                    62:11:67:83:e6:86:cd:ab:18:6e:0b:8d:e7:59:75:
                    6c:77:fb:3a:01:bf:c5:fe:1a:fe:5b:ba:f3:60:59:
                    5c:0a:2e:25:1e:94:a3:86:39:0a:65:b6:26:00:23:
                    5e:c3:ca:f6:1d:e7:c2:27:ff:80:db:9a:58:e4:24:
                    51:ca:95:62:7a:0b:d4:b8:26:5f:ce:75:04:63:1b:
                    cc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8B:B2:2A:11:88:3D:F1:BD:CB:53:A2:EB:B1:7F:72:1A:4C:EF:22
            X509v3 Authority Key Identifier:
                keyid:73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313065303a3a2f34332d3433203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a4c:10e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         37:e6:95:c8:1b:06:32:82:7b:3e:c6:88:e1:35:65:b8:0d:59:
         18:4d:b5:39:88:23:86:bc:80:21:57:59:67:7e:b6:60:3f:ce:
         3f:84:70:97:5e:a0:0c:b3:f9:cb:8a:93:ca:28:6d:9a:c5:66:
         c8:92:83:a0:d5:dc:e0:a9:01:59:df:fe:c5:53:fa:da:9a:ca:
         d6:b9:aa:dd:a6:f8:c9:27:f5:76:bb:16:c3:d0:b3:27:d9:b3:
         36:2f:28:66:15:ad:74:a1:ac:0d:bf:8f:9d:6c:15:59:4f:aa:
         7d:02:dc:05:e0:fa:38:de:e9:7f:92:ab:4a:df:39:af:90:84:
         33:25:6c:ce:c1:85:d5:0e:ac:ae:b5:dc:67:9e:78:4d:06:0c:
         50:4c:a9:ba:91:d4:97:c1:d2:a9:da:2b:b6:d8:a8:bd:8a:06:
         69:4f:59:90:d3:92:b1:31:1b:81:7b:d1:4e:0c:e2:a7:33:5d:
         f7:a7:47:96:8f:e9:aa:98:73:f8:b3:3f:3d:57:79:21:55:95:
         5d:dd:49:07:be:f1:e9:4b:13:46:39:94:89:90:45:9c:c0:6e:
         18:ca:60:13:de:e0:04:e5:48:b7:50:45:91:be:5a:11:34:75:
         d4:15:d7:bf:4b:d5:fe:93:f1:32:b7:3b:52:b6:e7:e7:6d:94:
         ef:2a:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org