Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a383030303a3a2f33342d3334203d3e20323639353234.roa
File:                     323830343a363566303a383030303a3a2f33342d3334203d3e20323639353234.roa (raw, json)
Hash identifier:          1x7VHjeTPd1k4ZH952N+SrsNbC8lCI1UNyQDful6Xuc=
Subject key identifier:   B8:57:62:59:71:F2:11:55:FD:B9:6A:E7:A6:85:76:D7:18:CB:DE:9E
Certificate issuer:       /CN=E17F5363541897DEABD020106BBE90669B62ACA3
Certificate serial:       7DF4C959CBC69253836F749E2572CE7B034D86B5
Authority key identifier: E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a383030303a3a2f33342d3334203d3e20323639353234.roa
Signing time:             Fri 26 Apr 2024 17:13:05 +0000
ROA not before:           Fri 26 Apr 2024 17:08:05 +0000
ROA not after:            Fri 25 Apr 2025 17:13:05 +0000
asID:                     269524
IP address blocks:        2804:65f0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/E17F5363541897DEABD020106BBE90669B62ACA3.crl
                          rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/E17F5363541897DEABD020106BBE90669B62ACA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Apr 2024 18:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f4:c9:59:cb:c6:92:53:83:6f:74:9e:25:72:ce:7b:03:4d:86:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17F5363541897DEABD020106BBE90669B62ACA3
        Validity
            Not Before: Apr 26 17:08:05 2024 GMT
            Not After : Apr 25 17:13:05 2025 GMT
        Subject: CN=B857625971F21155FDB96AE7A68576D718CBDE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:6b:4a:3d:c9:85:dc:c8:4d:04:4d:7e:e9:
                    33:e3:04:ff:8d:cb:d2:ce:5b:10:1d:c8:f5:6c:c7:
                    cf:cf:08:b3:7c:e6:50:96:21:28:70:3a:1e:22:53:
                    93:6a:b3:d3:ec:d8:b1:41:02:26:cf:9c:cc:85:f6:
                    b0:d7:9d:5a:dc:ee:ea:39:f1:53:5e:94:59:76:61:
                    7d:1a:9b:8c:02:71:f4:bd:47:b9:0d:c3:2c:f7:ce:
                    0e:e1:0a:64:c3:78:27:5a:dd:63:9c:a0:e7:38:e0:
                    58:0c:42:38:04:ab:66:20:99:b8:e8:48:53:de:46:
                    42:7f:43:d9:39:01:8a:6f:af:09:cf:45:91:86:4a:
                    d6:ea:76:66:61:48:4a:3d:09:a7:b1:9f:8f:38:01:
                    11:98:dd:3d:54:dc:6c:15:8e:21:8f:68:2d:e3:ad:
                    0a:f0:b7:08:f9:a5:cb:76:36:b4:96:8a:49:0d:4e:
                    e2:60:74:f5:f7:10:a4:3f:3f:ad:00:78:08:fb:22:
                    70:ed:a5:db:02:7d:d2:b3:ec:82:26:74:2c:09:f6:
                    c1:05:a6:15:0a:03:22:87:34:84:ff:24:a0:ed:ea:
                    d5:cc:4a:0e:6a:18:90:e5:90:40:85:32:6a:6f:f5:
                    b9:c7:e0:b1:8a:df:1c:e6:bb:0e:18:f1:7c:97:c9:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:62:59:71:F2:11:55:FD:B9:6A:E7:A6:85:76:D7:18:CB:DE:9E
            X509v3 Authority Key Identifier:
                keyid:E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/E17F5363541897DEABD020106BBE90669B62ACA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/323830343a363566303a383030303a3a2f33342d3334203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:2b:b8:e0:29:94:14:06:02:72:12:1e:28:e4:8a:14:2a:9b:
         fb:d9:50:e6:9a:ac:19:02:8c:74:ec:29:a1:30:10:8c:ba:4c:
         46:df:4b:0b:19:b7:1a:bb:02:cc:2e:64:b7:7b:13:fc:5e:7a:
         34:6a:b2:ca:e6:e5:0e:b8:14:41:58:51:f2:00:5b:bf:34:08:
         2f:35:a0:84:31:c0:f4:6c:53:de:b2:98:84:f4:40:ef:fd:21:
         91:16:fe:a7:54:51:26:5d:f1:ee:ad:34:94:20:f1:43:e7:98:
         87:90:88:a1:32:d2:54:93:42:6c:be:ec:d2:e0:09:66:52:46:
         47:4c:d7:c0:86:b7:f6:01:80:36:93:0b:5e:97:77:65:f8:0d:
         93:64:64:84:a0:d8:0c:9b:97:e3:6b:3b:42:3e:7b:70:03:37:
         da:f6:70:35:69:c9:df:1a:78:c7:05:38:14:1e:ef:4f:1e:37:
         f9:43:fc:10:e3:b8:a3:2a:d2:a4:be:02:1d:dd:ab:32:90:3f:
         55:99:a7:51:cc:c8:b4:e2:e2:a5:53:ad:78:76:cf:04:49:fd:
         99:98:8c:0b:26:79:c7:1f:ba:e4:fb:a8:3c:90:38:d6:b0:32:
         d0:a7:f2:96:ac:48:36:9a:7d:89:1e:9f:56:6f:ed:5f:cb:d0:
         66:8e:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 20:35:15 2024 by rpki-client on console.sobornost.net