Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa
File:                     323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (raw, json)
Hash identifier:          g/+0bueo9txCIcFaahIl//AfEHPb+cnmMRv1Nvts77A=
Subject key identifier:   D7:7E:CE:0C:F7:69:56:CA:34:A2:40:24:C2:FA:1E:C4:A5:2C:92:72
Certificate issuer:       /CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
Certificate serial:       19109637FC0FE878BD66FF9D93937A5BC1E55D0B
Authority key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa
Signing time:             Wed 03 Apr 2024 19:50:21 +0000
ROA not before:           Wed 03 Apr 2024 19:45:21 +0000
ROA not after:            Wed 02 Apr 2025 19:50:21 +0000
asID:                     270240
IP address blocks:        2804:68f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl
                          rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:10:96:37:fc:0f:e8:78:bd:66:ff:9d:93:93:7a:5b:c1:e5:5d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
        Validity
            Not Before: Apr  3 19:45:21 2024 GMT
            Not After : Apr  2 19:50:21 2025 GMT
        Subject: CN=D77ECE0CF76956CA34A24024C2FA1EC4A52C9272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5c:2d:43:81:ca:95:11:73:6f:4b:2a:1c:fc:
                    a5:2c:60:91:8f:db:7d:35:dc:98:a8:5b:36:83:85:
                    86:80:4d:b5:94:fb:a9:89:9f:0f:49:05:7a:24:ae:
                    72:ea:a2:f8:2c:07:44:c3:9a:10:4a:6b:6c:83:88:
                    59:0f:0f:a6:ad:5b:f8:98:a6:84:74:5d:5f:a2:a1:
                    10:a7:25:81:17:e1:17:8d:6e:e3:76:97:2b:76:bb:
                    83:9e:78:65:94:fa:22:00:9b:ae:19:34:b3:45:4a:
                    6a:0e:4e:94:49:18:bd:0e:34:18:31:63:ce:a0:2e:
                    34:1c:fd:ea:e0:e5:7b:83:7e:5c:ff:c6:78:31:f6:
                    12:89:10:bf:03:9d:d0:ba:e4:14:67:22:31:76:b7:
                    cd:8e:75:9c:29:c2:86:ba:42:61:41:21:64:66:e3:
                    e5:66:5a:9e:70:8b:b3:c0:a4:b4:c6:be:bd:e0:33:
                    8a:d1:4b:9b:ce:3a:5d:49:98:a4:ef:30:da:d9:0a:
                    c8:52:e2:d0:13:8c:e4:f1:ad:35:1d:48:fd:35:ec:
                    53:76:0c:00:f6:66:1e:ff:21:c7:d1:74:cd:76:17:
                    10:29:bc:ab:aa:40:64:78:60:1d:24:5f:42:96:b4:
                    7c:b3:8f:62:fe:b6:29:c2:83:84:9b:8a:8f:ca:94:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7E:CE:0C:F7:69:56:CA:34:A2:40:24:C2:FA:1E:C4:A5:2C:92:72
            X509v3 Authority Key Identifier:
                keyid:3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:82:a3:45:ff:d7:d0:6d:35:3e:16:b9:b3:ea:e0:c4:e8:
         8f:24:ae:16:15:aa:4c:9d:f9:21:00:be:1a:08:38:bc:3b:db:
         e5:0c:e8:0a:f1:a7:b1:00:f4:51:04:57:0f:81:be:91:71:81:
         28:5b:21:fd:ad:14:72:81:5c:a0:f1:bb:a7:4a:72:f8:b8:6c:
         95:52:3b:a4:44:f6:dc:f4:a3:fa:1f:42:e8:60:e8:08:21:1d:
         e3:e1:7f:4e:96:72:5d:96:31:d2:4b:bb:4e:8d:10:fc:27:4a:
         2d:cf:92:bc:f6:d8:2c:20:f5:ec:b2:7c:08:fe:ee:24:95:14:
         21:7b:c7:03:45:51:71:5f:84:00:67:f2:85:0b:95:8f:99:18:
         bc:04:59:b8:0e:7f:83:35:2b:b6:74:4a:62:27:56:54:44:8d:
         f2:12:5b:14:1a:55:2a:97:66:6b:c7:dc:15:67:3a:4b:57:36:
         ce:41:54:43:19:b8:3c:f4:47:3b:72:69:40:2c:df:6b:6c:6a:
         cf:ec:ff:e5:44:e4:24:ed:a2:09:26:81:7e:26:77:5e:95:45:
         78:53:72:fd:85:31:94:c8:b9:bd:9b:3c:3e:34:0c:f0:95:8c:
         f4:64:22:b9:a9:8e:0b:66:53:a2:da:cb:83:b1:c4:63:94:94:
         4c:64:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:21 2024 by rpki-client on console-fra.rpki-client.org