Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a31303a3a2f34342d3434203d3e20323636323630.roa
File:                     323830343a336433343a31303a3a2f34342d3434203d3e20323636323630.roa (raw, json)
Hash identifier:          OJkOtaaFH0ZaB8cnjooH/cYJGyx6aYvIyDzm4FKlRME=
Subject key identifier:   96:E0:9B:5D:1F:6E:3F:7A:12:A4:7B:37:F3:5F:67:B8:20:8C:A1:E2
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       5E30F1BFA030C4504E45C0D8DD2A35E75DC80BC8
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a31303a3a2f34342d3434203d3e20323636323630.roa
Signing time:             Tue 09 Jan 2024 14:19:02 +0000
ROA not before:           Tue 09 Jan 2024 14:14:02 +0000
ROA not after:            Tue 07 Jan 2025 14:19:02 +0000
asID:                     266260
IP address blocks:        2804:3d34:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl
                          rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:30:f1:bf:a0:30:c4:50:4e:45:c0:d8:dd:2a:35:e7:5d:c8:0b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Jan  9 14:14:02 2024 GMT
            Not After : Jan  7 14:19:02 2025 GMT
        Subject: CN=96E09B5D1F6E3F7A12A47B37F35F67B8208CA1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:ce:51:dd:b7:d3:9f:71:59:d5:3c:62:90:
                    f1:2f:90:1d:2a:54:6a:81:fb:d3:31:ce:62:bc:5a:
                    10:19:a5:dd:7f:c7:7b:2f:7b:86:24:58:d4:f4:b2:
                    71:94:4e:8d:ef:5b:11:fa:70:71:b3:88:76:49:d7:
                    ae:c7:38:a6:76:38:c7:05:92:df:03:54:53:11:a6:
                    e0:db:ad:04:3d:75:6f:89:6b:15:fb:4e:4d:17:c8:
                    45:c8:a5:42:3c:05:8d:bb:5a:ee:d7:1c:f8:3e:8b:
                    44:6b:a5:b5:4e:08:10:75:03:83:92:df:0e:32:61:
                    de:81:db:dc:19:42:5e:bf:d5:d1:b2:ec:d5:2e:25:
                    70:4f:1e:ea:51:9b:3d:42:e3:c6:fe:a5:04:af:4e:
                    13:01:80:3d:41:f4:a1:45:68:e8:53:31:4f:05:ed:
                    c5:e3:c0:75:3c:85:dd:d1:c5:17:23:a9:01:47:f6:
                    4f:3e:5a:38:1a:66:af:6c:f9:f2:ac:23:f8:1e:23:
                    1d:4b:3b:41:ca:61:3f:e8:98:d8:c5:fd:63:f7:a2:
                    02:0a:70:41:c1:06:b4:cb:97:8f:4d:03:f5:af:15:
                    e5:4c:40:f0:e7:8e:5e:27:69:9c:ac:a7:af:f8:3e:
                    f0:e4:d9:ec:3b:67:f3:4b:80:3c:a9:f6:00:e2:e5:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E0:9B:5D:1F:6E:3F:7A:12:A4:7B:37:F3:5F:67:B8:20:8C:A1:E2
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/323830343a336433343a31303a3a2f34342d3434203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d34:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:dd:66:67:fc:15:a3:e1:66:a8:cf:19:1c:cb:9d:4e:db:
         bb:88:e2:40:2f:b9:ee:a5:58:53:da:5e:e1:65:3d:31:2b:11:
         8e:78:56:ef:e3:91:1c:c9:76:09:ef:08:e1:b3:cd:7f:e9:3a:
         dd:c3:c1:7f:ff:06:3a:e7:36:1d:4b:80:8e:d7:09:6f:f8:77:
         84:bd:f6:7d:6a:61:18:ed:3f:53:69:bd:88:b2:ba:d1:c8:7c:
         27:57:6f:95:39:17:71:1c:c0:0d:e6:9c:b9:53:24:2d:54:74:
         53:62:f3:44:12:04:df:ee:d8:fb:94:e8:8a:e0:82:3c:25:a2:
         23:a5:2c:39:cf:7a:be:8b:cb:82:ca:be:33:2d:19:41:2c:5e:
         a7:ce:82:54:69:71:29:7c:ea:c7:05:91:c4:01:4d:b7:04:97:
         95:ff:7b:10:cb:d1:cf:93:45:85:06:f1:4d:75:f9:9a:ab:c9:
         ed:33:f7:22:53:2e:31:14:d7:22:b7:ae:35:79:e1:c8:5c:13:
         15:13:9c:66:48:2c:0f:20:4e:ed:6c:c2:e0:a7:f3:ae:fd:ce:
         47:b9:d0:a4:db:f0:ec:b0:8f:d1:2f:c2:30:b6:fa:08:7c:9d:
         5b:c6:4f:a1:47:3d:74:e9:6c:0d:03:ee:9d:98:1c:e1:77:b0:
         08:75:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:12 2024 by rpki-client on console.sobornost.net