Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a3a2f33322d3332203d3e20323730373339.roa
File:                     323830343a373061343a3a2f33322d3332203d3e20323730373339.roa (raw, json)
Hash identifier:          6NszNZztsknKuzMbqEIAITcRBY4fcUtU8vm5t3A3GN0=
Subject key identifier:   0B:EC:09:5F:47:53:AA:1D:6D:41:4F:B0:0F:5B:42:74:45:42:DD:B4
Certificate issuer:       /CN=FD7602BF76AA1AACD393FB899DDC6086459522CE
Certificate serial:       0D9A6FD115A5A89305CD01F1CCB560F8F658153D
Authority key identifier: FD:76:02:BF:76:AA:1A:AC:D3:93:FB:89:9D:DC:60:86:45:95:22:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a3a2f33322d3332203d3e20323730373339.roa
Signing time:             Tue 02 Jan 2024 13:55:41 +0000
ROA not before:           Tue 02 Jan 2024 13:50:41 +0000
ROA not after:            Tue 31 Dec 2024 13:55:41 +0000
asID:                     270739
IP address blocks:        2804:70a4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.crl
                          rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9a:6f:d1:15:a5:a8:93:05:cd:01:f1:cc:b5:60:f8:f6:58:15:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7602BF76AA1AACD393FB899DDC6086459522CE
        Validity
            Not Before: Jan  2 13:50:41 2024 GMT
            Not After : Dec 31 13:55:41 2024 GMT
        Subject: CN=0BEC095F4753AA1D6D414FB00F5B42744542DDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:43:c1:eb:a9:ec:12:80:32:e9:ff:59:37:
                    10:cc:f6:32:81:c8:ff:58:39:29:05:75:7d:cf:ad:
                    c2:44:9e:f4:4f:bd:1d:f5:01:8a:88:d2:1e:99:2c:
                    08:39:34:e2:d9:7a:6c:d6:49:05:ae:33:ee:cc:fb:
                    35:33:69:00:17:eb:98:62:bd:63:01:c0:7e:89:89:
                    86:8a:05:df:d6:45:44:0c:a9:f3:71:9e:a0:49:69:
                    e8:ab:e0:af:07:ac:d3:3d:d5:0b:48:fa:9b:c5:e6:
                    7a:7a:75:50:1c:22:30:f7:ea:ad:53:b8:8c:1c:fa:
                    2a:6f:51:7a:74:18:49:8b:b1:1b:4b:f0:99:96:fc:
                    f1:92:80:0a:d9:d1:69:0f:e3:a6:14:3f:2d:60:ff:
                    1c:90:6f:45:d4:3f:fb:01:0f:0d:7d:50:fa:5a:5f:
                    92:d9:fe:b2:6b:15:97:cd:80:b7:9d:88:c0:28:36:
                    6d:41:bf:47:0a:c4:4d:b4:8d:7c:5f:7c:b8:58:9a:
                    4c:f5:63:c1:c9:bf:20:08:c2:58:00:a1:c7:fc:8f:
                    e5:f6:89:b6:0d:c6:a0:f5:c5:ab:d2:d7:1c:2b:99:
                    48:1f:da:53:21:c5:22:e0:53:e5:36:98:8f:9c:ee:
                    01:99:c8:e9:52:df:d2:49:c8:04:f7:52:cd:67:26:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:09:5F:47:53:AA:1D:6D:41:4F:B0:0F:5B:42:74:45:42:DD:B4
            X509v3 Authority Key Identifier:
                keyid:FD:76:02:BF:76:AA:1A:AC:D3:93:FB:89:9D:DC:60:86:45:95:22:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a3a2f33322d3332203d3e20323730373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:d7:13:31:3f:71:36:f3:da:15:a0:de:d6:4e:34:28:7f:51:
         cb:e0:75:b7:b5:1f:86:da:9d:6a:8d:59:46:c7:e7:81:6c:9d:
         bf:69:e3:22:37:53:bf:02:97:e5:da:37:c6:c4:23:62:86:97:
         81:7b:d2:68:27:03:53:fc:87:01:8e:9a:07:c0:b7:55:1f:79:
         d9:ba:c3:ac:4b:a2:f4:a4:47:b9:67:2b:7f:7a:55:78:8e:f0:
         aa:6a:e0:7d:84:7d:68:bc:6e:4e:43:d2:f6:4e:9a:f8:00:4c:
         85:0f:62:a1:4b:70:55:5a:fb:e0:37:d7:c0:98:b3:f3:ce:f8:
         8f:19:49:30:f4:e2:8c:47:54:1f:2b:de:3c:ca:7a:58:1d:d9:
         31:10:8d:54:b9:82:66:07:01:aa:bb:6f:c8:8a:54:2f:00:ea:
         e1:da:89:08:6c:a3:6d:ab:cb:07:98:40:c6:fa:ac:7f:bb:a6:
         83:72:83:42:42:0e:9a:b1:15:e1:52:69:9a:e6:64:d6:d7:13:
         94:fa:fc:b7:ab:38:66:b9:7b:ec:79:bf:5c:42:1d:be:74:2b:
         4b:48:d0:e3:35:9f:dd:46:c1:49:2c:4f:00:5b:7e:34:d3:e5:
         dc:b0:b9:b6:6e:6b:07:1a:1c:9f:f5:91:94:df:40:ff:b7:af:
         7e:80:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:27 2024 by rpki-client on console.sobornost.net