Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d3333203d3e203238313430.roa
File:                     323830343a3161343a3a2f33322d3333203d3e203238313430.roa (raw, json)
Hash identifier:          4etB1iRPUWdnBEktGWGIuwwZPYhuMyHZRQAtLXij7wY=
Subject key identifier:   B2:BA:FB:4A:BD:AF:14:7E:53:6C:4D:6F:0C:32:AC:7E:42:08:5C:40
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       349AD2C8A5A698E2DAD29471F7A96299273AFA89
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d3333203d3e203238313430.roa
Signing time:             Wed 03 Apr 2024 20:51:00 +0000
ROA not before:           Wed 03 Apr 2024 20:46:00 +0000
ROA not after:            Wed 02 Apr 2025 20:51:00 +0000
asID:                     28140
IP address blocks:        2804:1a4::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9a:d2:c8:a5:a6:98:e2:da:d2:94:71:f7:a9:62:99:27:3a:fa:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Apr  3 20:46:00 2024 GMT
            Not After : Apr  2 20:51:00 2025 GMT
        Subject: CN=B2BAFB4ABDAF147E536C4D6F0C32AC7E42085C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:b7:8f:81:0a:19:20:23:d1:78:fb:b3:fd:
                    66:14:b5:62:cb:b8:a1:46:3f:40:91:6b:01:e0:3b:
                    60:72:28:32:44:46:98:ab:51:76:75:ca:0f:2e:5d:
                    69:8c:04:f0:8f:54:0c:ac:a9:7e:96:5f:4f:89:4c:
                    b2:d6:15:99:89:4c:e6:04:64:98:2c:24:5f:5b:36:
                    05:6d:7b:a3:b4:bb:79:38:f5:6a:4a:dc:e2:de:45:
                    df:19:bf:3f:e8:36:01:84:8e:2c:78:02:86:cb:bb:
                    3e:f5:52:cd:6b:7d:29:ad:2d:6b:57:91:0d:6a:d5:
                    00:d7:f8:00:a1:65:20:16:5a:b8:29:d5:bc:9e:57:
                    5a:51:8d:6c:36:83:bb:0c:b0:e5:4c:71:ab:35:d8:
                    2d:d8:b7:4a:9c:13:34:80:50:58:5e:ae:36:e3:cd:
                    b1:29:7b:68:dc:c1:3d:9f:c8:6c:69:c1:69:41:94:
                    55:65:fd:11:c6:b8:27:84:59:46:a6:f9:39:cd:54:
                    0b:83:e4:db:50:4e:84:97:a3:12:ce:91:23:49:1e:
                    56:5e:e0:16:5b:3a:df:fa:a5:6c:97:68:ca:ed:14:
                    2f:0f:d6:11:3f:c0:84:ef:57:1e:ac:a2:d8:42:a5:
                    af:01:12:cd:26:c8:81:07:73:7f:d4:cb:3f:e9:b4:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BA:FB:4A:BD:AF:14:7E:53:6C:4D:6F:0C:32:AC:7E:42:08:5C:40
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d3333203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:f4:c9:cf:45:de:7b:79:dc:f2:07:06:71:30:2a:14:03:
         a2:0e:a4:c8:3f:76:65:c2:18:58:e0:97:68:04:30:a4:b8:3a:
         14:24:22:e1:11:67:f4:a3:7d:3a:b6:6c:7c:99:d7:7e:78:4a:
         04:e1:dd:25:a2:77:9b:10:a6:07:aa:e3:0f:9b:80:e4:36:78:
         b2:22:68:36:b6:2f:53:b1:0c:87:7e:c6:1c:ea:68:3f:f9:f3:
         4d:d4:a1:a6:17:f5:d9:c0:7b:9d:18:50:bc:9d:d9:d9:e7:c3:
         b9:b1:16:1a:b2:31:6e:e9:cb:b2:e2:73:55:ee:45:c7:93:b4:
         5e:14:d7:53:9e:3f:fd:1c:dc:cb:d8:ad:65:f7:ef:4b:c4:ba:
         ba:88:1f:98:35:0d:9b:fa:3b:3c:10:9c:30:85:db:94:42:77:
         b0:8b:d9:b6:67:04:c3:e2:a0:fe:72:1a:bf:ab:1b:19:f6:d6:
         d1:08:0a:ef:db:87:c1:07:60:af:b1:e7:e9:3a:65:ed:a8:3a:
         ee:e1:67:4b:2d:1e:1f:df:95:c9:a5:8a:cf:4d:d9:d5:6f:b1:
         92:1d:15:2f:d5:6f:6d:85:81:e1:72:68:e3:d0:84:63:74:41:
         54:b8:e6:50:c6:1c:85:08:6c:21:dc:a9:68:d4:9b:91:3c:4c:
         6f:3f:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:30 2024 by rpki-client on console-fra.rpki-client.org