Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          9L5cxoi4gEPEKIVPiQdyTpaDEVg6ICCNiZo9+fz5YkQ=
Subject key identifier:   3E:AB:FF:54:7B:F6:1E:03:A3:6C:C7:08:50:57:65:06:46:B2:FF:EE
Certificate issuer:       /CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Certificate serial:       279965B5005D9F02B5DDFD1A818C9234CD12943E
Authority key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Thu 04 Apr 2024 00:02:21 +0000
ROA not before:           Wed 03 Apr 2024 23:57:21 +0000
ROA not after:            Thu 03 Apr 2025 00:02:21 +0000
asID:                     268746
IP address blocks:        2804:5a10::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:99:65:b5:00:5d:9f:02:b5:dd:fd:1a:81:8c:92:34:cd:12:94:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
        Validity
            Not Before: Apr  3 23:57:21 2024 GMT
            Not After : Apr  3 00:02:21 2025 GMT
        Subject: CN=3EABFF547BF61E03A36CC7085057650646B2FFEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:8a:00:8f:c5:10:bb:cf:2e:20:b0:60:15:
                    e6:69:96:d6:25:bc:73:23:23:7c:50:88:3c:ba:9f:
                    28:2d:09:ba:61:b0:fa:87:f0:b0:6d:99:6d:29:90:
                    d6:b5:57:a5:a0:bf:b0:2c:76:fd:ea:54:86:0d:4b:
                    0c:77:6f:3d:26:cd:02:27:b3:df:64:96:6d:af:57:
                    9e:c1:98:a2:9e:fd:31:c1:ab:f3:7d:8d:48:5a:c8:
                    cb:34:f2:ea:54:cd:f7:6a:e4:54:d9:4b:ea:76:0d:
                    b4:8f:1b:c0:81:5f:ab:46:ff:8b:66:5d:a7:56:ca:
                    0f:7b:74:e6:f7:b5:49:2f:cb:99:69:dc:2f:3c:6f:
                    26:24:d1:e8:1e:22:f7:cb:ec:39:78:18:32:4c:59:
                    cd:ea:5f:d6:66:45:6a:1c:4a:b3:af:76:b0:23:b8:
                    87:fb:b3:ab:71:e0:c8:76:e9:78:f2:0a:94:ee:31:
                    a3:cd:84:f5:1d:8c:ae:73:b4:96:fa:38:0b:cb:e9:
                    ca:a6:48:85:88:50:fd:86:94:f0:da:e4:78:5d:87:
                    31:1f:bb:ec:46:ea:1c:b0:e1:c0:03:c5:28:f7:59:
                    36:ed:8a:87:55:29:98:11:ad:28:1d:4a:ab:1d:d9:
                    a0:4c:a8:32:de:92:ee:f8:53:38:ec:41:f2:f8:de:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AB:FF:54:7B:F6:1E:03:A3:6C:C7:08:50:57:65:06:46:B2:FF:EE
            X509v3 Authority Key Identifier:
                keyid:D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:d3:6d:81:25:47:4e:7c:43:5b:00:b8:39:83:f6:1a:d0:c7:
         9c:00:f2:7b:c2:82:38:a2:dd:e2:30:7f:33:30:6e:a3:6d:23:
         ec:63:f4:67:37:5a:31:90:be:d1:c6:ac:54:12:2e:35:8b:39:
         4a:c3:14:1b:a3:03:41:aa:e8:9c:87:ee:5d:3a:df:47:12:f0:
         7e:63:62:1e:64:aa:4d:09:08:59:d1:45:04:76:4a:11:a8:5b:
         7b:29:e1:29:2e:5b:d5:74:b3:02:e9:22:2e:1e:8f:cb:f8:39:
         d1:c2:75:42:50:cc:5c:c0:0d:77:90:fe:28:8f:f5:05:fb:ef:
         49:6b:35:6f:0d:b4:b6:4f:bb:47:e0:6d:85:9f:1c:c8:9d:6e:
         08:30:89:fa:39:f8:f9:89:c6:a5:27:4d:41:8e:af:c5:82:a9:
         c6:e1:55:80:b4:a7:2d:38:bc:02:81:e8:d4:71:a3:01:19:b8:
         14:ab:74:73:96:f1:9f:c1:59:2c:94:65:0e:96:8e:3c:03:1f:
         b4:fd:36:9c:e6:74:ea:f1:ba:d7:04:95:86:c6:e6:68:4b:d0:
         85:44:65:53:f0:85:3b:93:6e:8c:8e:03:57:9c:c5:47:c4:9d:
         33:f8:36:f7:22:c2:70:0e:19:fd:dd:a9:80:36:08:98:23:78:
         ea:4d:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:45 2024 by rpki-client on console-fra.rpki-client.org