Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/323830343a373530303a3a2f33322d3332203d3e20323731303137.roa
File:                     323830343a373530303a3a2f33322d3332203d3e20323731303137.roa (raw, json)
Hash identifier:          J3g8/MJTXSwZtwqoMM8vQhC98EKvJnYb5cbV0XVd4K8=
Subject key identifier:   10:DB:C4:FC:21:A0:AB:31:A1:7D:12:0C:24:98:91:BA:50:7E:67:2F
Certificate issuer:       /CN=4A7B1D273A29E52A919C6B66992B0B94316D67EE
Certificate serial:       3444D8041E6631E79EE8760E0B64C9827233586E
Authority key identifier: 4A:7B:1D:27:3A:29:E5:2A:91:9C:6B:66:99:2B:0B:94:31:6D:67:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/323830343a373530303a3a2f33322d3332203d3e20323731303137.roa
Signing time:             Mon 21 Aug 2023 12:55:46 +0000
ROA not before:           Mon 21 Aug 2023 12:50:46 +0000
ROA not after:            Mon 19 Aug 2024 12:55:46 +0000
asID:                     271017
IP address blocks:        2804:7500::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.crl
                          rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:44:d8:04:1e:66:31:e7:9e:e8:76:0e:0b:64:c9:82:72:33:58:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A7B1D273A29E52A919C6B66992B0B94316D67EE
        Validity
            Not Before: Aug 21 12:50:46 2023 GMT
            Not After : Aug 19 12:55:46 2024 GMT
        Subject: CN=10DBC4FC21A0AB31A17D120C249891BA507E672F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:71:9e:ad:04:e4:2d:a1:5c:db:56:c5:9c:
                    97:e5:5d:57:44:bf:14:66:9a:f8:db:48:d0:61:21:
                    23:00:ff:31:36:0b:db:ca:ed:8e:cd:5f:86:4f:d4:
                    e1:ce:49:33:1e:39:45:17:3f:79:af:94:ac:cd:57:
                    e4:4f:fd:1a:16:fa:e6:0d:22:57:c3:4c:0a:b3:b5:
                    74:21:0e:1c:d2:00:cd:d4:d0:ba:f5:30:39:f4:be:
                    fd:63:3c:b3:a7:de:59:e6:0f:09:e3:83:e9:bc:2c:
                    59:d8:5e:13:8a:97:89:7e:83:1a:f2:4f:4f:ca:35:
                    16:26:2e:3f:4a:6d:f7:71:1f:4e:fa:49:d2:20:b5:
                    25:b9:a1:e8:89:bd:2c:58:61:ff:e7:04:e0:8a:25:
                    b5:aa:f4:60:5b:d0:9b:5c:bd:5b:20:cc:88:ab:b5:
                    e7:94:c5:67:25:a5:2e:5a:c5:bb:83:86:09:68:ca:
                    d5:8d:ae:2f:fe:ad:fc:7f:d8:a8:9f:9b:d5:a8:52:
                    62:6c:67:74:94:14:77:65:cd:46:32:c5:b0:2b:1c:
                    1d:8a:87:b7:22:2e:30:39:d3:ed:dd:fe:f0:17:bb:
                    b6:1c:41:5b:fc:35:3a:3f:c9:4f:09:53:62:91:ca:
                    54:d8:35:71:41:1d:8f:92:7b:16:ef:e3:9a:4f:b6:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DB:C4:FC:21:A0:AB:31:A1:7D:12:0C:24:98:91:BA:50:7E:67:2F
            X509v3 Authority Key Identifier:
                keyid:4A:7B:1D:27:3A:29:E5:2A:91:9C:6B:66:99:2B:0B:94:31:6D:67:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/323830343a373530303a3a2f33322d3332203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7500::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:11:77:0f:7e:de:c1:92:ea:37:0d:63:92:25:3b:fe:8a:
         07:d8:98:ae:c6:9f:04:e3:37:6b:1b:33:60:c0:7e:3a:1e:aa:
         18:11:52:1f:69:3b:9e:fd:52:10:bc:4c:53:d9:80:4d:96:43:
         8a:fd:a7:0b:74:92:e4:58:f0:63:c0:65:f9:7e:95:c0:cc:51:
         39:8d:88:b3:38:42:b6:99:5c:04:9a:ba:7f:a1:92:f3:b7:36:
         18:ad:7f:48:1b:58:46:6c:39:67:f4:d8:6d:35:0b:f5:64:7d:
         73:a3:84:c8:90:30:e4:90:2d:85:94:47:ac:62:2e:18:40:f8:
         d4:d5:09:f2:97:c5:6e:3c:68:51:de:9d:bc:9d:2f:2a:73:ff:
         79:d0:fa:07:c7:e5:12:f2:4f:d0:93:0a:e8:eb:80:f4:86:d5:
         0b:1b:1e:2a:08:cb:d3:86:95:e9:79:f0:8b:f4:cf:4f:14:9e:
         a1:ed:f6:fd:1e:09:5b:8a:45:f1:63:a0:be:38:65:a6:6d:14:
         b0:0e:c7:4f:8a:4d:6a:af:48:00:36:35:c8:31:d4:b0:1a:81:
         bf:2c:77:9f:3d:c0:79:e4:a5:0c:56:a2:1d:21:80:85:6c:4f:
         6f:5a:2e:a6:b3:6f:9a:35:e8:b7:86:f2:83:66:aa:bf:98:66:
         49:7f:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:54 2024 by rpki-client on console.sobornost.net