Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa
File:                     323830343a366438633a3a2f33322d3334203d3e20323730353430.roa (raw, json)
Hash identifier:          6yhn1kM8DPyD4bKjtBC9pxFrm+BkXy4+J1P7E7IClhA=
Subject key identifier:   B6:85:C4:CD:07:AB:8A:14:55:C2:11:14:40:3D:81:3B:CC:5A:88:7E
Certificate issuer:       /CN=73E65EE174B429E845F371CDDD00B81BC489A017
Certificate serial:       3C1DB26ADD22FEC2E929334047A5C1D49E0A4ACC
Authority key identifier: 73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa
Signing time:             Wed 03 Apr 2024 18:32:23 +0000
ROA not before:           Wed 03 Apr 2024 18:27:23 +0000
ROA not after:            Wed 02 Apr 2025 18:32:23 +0000
asID:                     270540
IP address blocks:        2804:6d8c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl
                          rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1d:b2:6a:dd:22:fe:c2:e9:29:33:40:47:a5:c1:d4:9e:0a:4a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E65EE174B429E845F371CDDD00B81BC489A017
        Validity
            Not Before: Apr  3 18:27:23 2024 GMT
            Not After : Apr  2 18:32:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:ac:4b:34:5a:43:fe:1a:13:d2:12:7b:88:
                    70:f7:24:71:88:cf:1f:cc:37:68:78:12:13:d9:22:
                    59:69:f8:6a:f5:c2:3a:8f:5d:dc:8b:39:b6:e7:85:
                    40:36:63:d0:e2:29:17:43:f9:53:50:e9:94:e1:3f:
                    1b:b9:ff:1c:07:c4:78:5c:64:14:37:21:7b:04:ff:
                    41:70:cd:23:e4:ef:ae:fe:76:ff:36:19:30:2c:97:
                    39:89:31:9e:e5:28:68:22:87:03:02:29:c5:ca:64:
                    64:1c:59:08:18:e2:48:c3:14:7b:d7:89:c6:b2:4a:
                    a3:5a:e8:0e:23:c9:db:a9:3a:c2:66:e2:ba:d1:f2:
                    a2:b0:85:34:98:ce:5f:92:5d:8a:d6:2f:ec:9e:97:
                    dc:b7:84:69:a8:c3:5a:98:d3:f2:83:ab:fa:b4:3c:
                    6f:61:e8:bc:a5:b6:c0:12:9c:d3:69:40:de:03:8a:
                    e9:16:73:93:f5:53:7b:f1:e7:f8:6c:77:4b:10:90:
                    11:41:ab:1a:62:a4:1e:3b:65:d2:f5:66:ed:d5:16:
                    6a:ad:40:56:bd:95:46:a3:2f:2f:9d:dc:a5:6c:a0:
                    ec:0f:f7:47:83:5c:c9:c7:eb:bc:52:e9:dc:16:4d:
                    f4:01:d6:dd:2a:d6:af:41:2e:6b:7a:37:0c:cf:49:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:85:C4:CD:07:AB:8A:14:55:C2:11:14:40:3D:81:3B:CC:5A:88:7E
            X509v3 Authority Key Identifier:
                keyid:73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:bc:69:76:d4:fc:f5:7c:2d:43:fd:b1:64:ca:91:ad:b0:fb:
         04:3c:51:cd:0d:6f:b6:65:09:14:be:d9:27:10:14:b3:90:69:
         53:ff:6e:b1:e3:58:f4:30:a8:93:63:31:a5:af:19:d0:60:ba:
         a7:9d:ad:24:a7:c4:85:ac:47:ae:75:cb:d2:ab:f4:c2:72:7c:
         7d:8b:f0:ec:5d:5b:c9:4a:6b:50:9c:6f:a8:6e:24:fa:15:7c:
         6b:99:9b:03:58:3b:16:cf:a6:ad:4d:0a:45:56:50:4b:c6:e7:
         a0:7c:c4:46:f8:f6:f0:f8:d1:97:d2:4b:6a:e7:d4:ca:fe:de:
         a8:06:3b:b6:b0:8a:70:f7:14:36:df:bc:56:81:b2:f4:13:c0:
         fc:78:26:6a:97:13:90:db:1e:6a:ce:a3:bf:cd:a1:ff:4e:2f:
         f0:b3:33:a7:d3:b9:89:7b:bf:ad:4d:c4:46:2e:9a:a3:a3:2b:
         52:49:8b:35:65:64:a7:df:06:83:ee:e1:c1:18:8b:7d:08:d1:
         3d:c2:d7:64:29:33:59:f3:13:0f:ba:66:7b:d4:c6:bc:aa:35:
         33:14:64:ae:10:06:55:2f:01:84:81:1e:ec:c1:55:30:23:4e:
         ae:57:3b:9f:57:38:b3:fd:11:d9:60:50:62:67:40:7e:44:60:
         63:0a:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:15:54 2024 by rpki-client on console-fra.rpki-client.org