Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a633030303a3a2f33342d3334203d3e20323638373332.roa
File:                     323830343a353965343a633030303a3a2f33342d3334203d3e20323638373332.roa (raw, json)
Hash identifier:          qHDzb/TbgEOxCU54RExtZIux+2KHY3oJCi8C/jasDg0=
Subject key identifier:   7B:30:F0:2F:9C:93:F7:F0:92:3B:D0:73:D2:80:97:AF:02:20:D9:F6
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       1441D65B9397138021F857874BEF37CCF5E8E30B
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a633030303a3a2f33342d3334203d3e20323638373332.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     268732
IP address blocks:        2804:59e4:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:41:d6:5b:93:97:13:80:21:f8:57:87:4b:ef:37:cc:f5:e8:e3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject: CN=7B30F02F9C93F7F0923BD073D28097AF0220D9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:08:47:a6:e2:63:0f:eb:d7:c8:5e:83:db:
                    61:4f:c2:db:a0:23:69:db:91:e3:79:dc:27:3b:5e:
                    e1:83:1d:10:f6:b5:d4:f4:d4:1e:22:a6:0e:e0:55:
                    3f:7f:73:0f:3e:f0:9e:ad:b7:42:9b:e7:d0:9c:9b:
                    04:d8:75:d6:9a:63:f8:ec:10:4b:c8:81:22:1f:62:
                    f2:64:df:2b:ec:83:b4:33:88:bf:9f:b6:e2:14:e7:
                    53:92:cb:ed:30:4c:97:42:0e:26:1e:82:59:a7:33:
                    29:a2:34:9b:76:a2:e0:39:09:d5:84:11:d9:bc:1d:
                    91:28:57:f0:2a:16:be:f8:8a:a7:b2:0a:8a:e5:5a:
                    51:21:ca:ee:5d:57:f9:8f:42:0a:68:71:7b:7d:6d:
                    c7:1b:aa:24:e7:12:cd:8a:04:a8:2d:24:20:40:38:
                    a1:d8:a9:7a:71:4f:11:8c:40:11:24:e5:34:50:de:
                    3e:18:e3:a6:ba:c8:24:9b:7b:7c:87:52:99:4d:42:
                    b9:ca:be:fd:d6:15:35:0c:d6:df:6b:58:20:51:fd:
                    7e:86:40:58:56:09:df:81:68:70:c5:8f:03:97:72:
                    dd:d0:2a:14:9c:6e:6d:7d:19:12:a2:e9:0f:31:75:
                    29:01:a5:02:bc:10:5e:66:06:cb:b0:fd:07:df:35:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:F0:2F:9C:93:F7:F0:92:3B:D0:73:D2:80:97:AF:02:20:D9:F6
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a633030303a3a2f33342d3334203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:29:ef:b4:51:fd:6e:fd:5b:5c:fc:50:e5:1b:c5:b9:a1:
         7f:22:00:56:ed:15:9a:15:3c:31:cc:67:8f:2e:25:ea:69:61:
         9c:66:dc:09:cf:3a:1a:6d:2c:93:52:9f:04:59:74:ea:1a:b1:
         93:8d:f9:88:a3:7d:9a:e3:bc:16:85:c5:79:a4:26:aa:c9:d6:
         20:2f:9d:16:14:c7:fe:11:1d:6b:56:7d:56:12:50:ae:51:c4:
         0a:cc:69:23:54:d6:bb:cd:e9:d6:b5:20:17:8d:f2:a4:57:69:
         a1:50:f0:a8:41:0c:31:89:b2:41:40:ca:fb:56:e3:8f:54:55:
         9c:ee:6d:40:bd:73:25:cf:ed:e1:bb:91:8c:88:e1:77:ac:96:
         d8:47:d1:d1:52:d9:1b:bb:58:0e:5a:24:b7:e6:1f:d7:a7:b9:
         18:d4:b9:82:80:34:51:20:9b:31:42:ac:f4:8e:c8:75:b7:c1:
         5a:50:66:ac:f5:e8:50:2e:a3:4c:2e:e4:55:76:7f:55:54:7a:
         1c:68:8a:1c:6e:d5:64:ac:f4:08:21:c5:f8:11:d6:42:e5:54:
         73:39:4f:51:9e:18:c4:3d:0c:ce:4b:94:ce:9d:73:8e:9f:66:
         cc:20:f0:68:d8:5b:d2:b6:da:e8:ab:1a:ba:33:47:21:29:fc:
         fb:30:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:10 2024 by rpki-client on console-fra.rpki-client.org