Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a3a2f33322d3335203d3e20323636323937.roa
File:                     323830343a333561303a3a2f33322d3335203d3e20323636323937.roa (raw, json)
Hash identifier:          LH4c4+6agyBKJ/z8mkiHgx50Ee2lnHX2JDU7OKyaN7Q=
Subject key identifier:   6F:4A:18:BB:3E:06:23:85:F3:52:FB:3D:E5:F2:EA:C3:97:70:CC:3B
Certificate issuer:       /CN=6B05973B3F0E6046EDE1D64AD43C5E2499AA4036
Certificate serial:       1987A6F9B25A52EEA1D2B99E3620A1592B4AF654
Authority key identifier: 6B:05:97:3B:3F:0E:60:46:ED:E1:D6:4A:D4:3C:5E:24:99:AA:40:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a3a2f33322d3335203d3e20323636323937.roa
Signing time:             Thu 04 Apr 2024 09:11:31 +0000
ROA not before:           Thu 04 Apr 2024 09:06:31 +0000
ROA not after:            Thu 03 Apr 2025 09:11:31 +0000
asID:                     266297
IP address blocks:        2804:35a0::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.crl
                          rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:87:a6:f9:b2:5a:52:ee:a1:d2:b9:9e:36:20:a1:59:2b:4a:f6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B05973B3F0E6046EDE1D64AD43C5E2499AA4036
        Validity
            Not Before: Apr  4 09:06:31 2024 GMT
            Not After : Apr  3 09:11:31 2025 GMT
        Subject: CN=6F4A18BB3E062385F352FB3DE5F2EAC39770CC3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:a5:ca:6f:e6:73:69:82:dd:a6:05:ff:81:
                    29:cd:e8:96:57:e4:47:c9:cc:a7:7c:e3:ed:c6:39:
                    06:5a:4d:d3:6e:6c:54:a2:b5:6f:59:b2:a7:d1:ed:
                    b7:0c:66:89:b6:bc:3b:b1:c9:54:f8:85:1c:48:5a:
                    d4:45:7b:79:3e:8b:59:38:26:df:f6:7c:4f:7a:53:
                    dd:14:3c:cf:d7:73:76:d1:78:77:13:53:e1:a7:c4:
                    32:8f:2b:8b:9c:14:fb:bc:28:7a:85:74:4c:c1:4b:
                    08:7f:4b:a4:ec:12:cf:e5:fe:88:85:7f:c3:54:e3:
                    46:60:3e:39:d2:5c:4f:41:0e:33:ac:2a:4e:64:7c:
                    65:68:34:fd:be:eb:ad:5c:bf:18:31:b0:a6:57:dc:
                    f7:f5:e5:89:fe:31:81:f5:89:78:b0:09:40:2a:59:
                    a1:d6:63:14:8a:58:44:d9:dd:b1:01:c6:0b:02:0c:
                    59:aa:96:1b:35:98:37:33:0f:d9:52:b0:78:89:d2:
                    5d:da:c4:7f:65:00:62:13:e9:ac:a4:c8:7c:a2:85:
                    33:f1:03:be:bc:e8:0e:4e:c9:90:40:c6:7a:13:bd:
                    1d:02:a1:04:52:69:b2:46:cc:a7:7c:aa:ae:2e:ba:
                    2d:cd:09:51:d2:98:71:39:9a:d7:f6:a9:65:c0:2d:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4A:18:BB:3E:06:23:85:F3:52:FB:3D:E5:F2:EA:C3:97:70:CC:3B
            X509v3 Authority Key Identifier:
                keyid:6B:05:97:3B:3F:0E:60:46:ED:E1:D6:4A:D4:3C:5E:24:99:AA:40:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a3a2f33322d3335203d3e20323636323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:43:55:75:2d:01:82:dd:32:1b:fe:bd:2b:8d:43:7c:fa:
         a3:bd:df:e5:88:42:e5:8e:69:75:5f:41:7f:66:db:20:4c:44:
         ad:eb:1e:63:29:05:b8:81:7c:ba:dc:28:12:c3:13:16:e3:41:
         67:f0:ae:63:95:a5:09:1d:ae:64:70:3c:e8:38:e3:d8:00:c7:
         fd:07:30:26:9b:e0:b8:72:28:6f:6b:b6:ad:0a:15:a4:88:0a:
         57:f6:dc:12:1c:b4:26:e0:5c:33:16:01:8f:43:c4:44:7e:46:
         dd:30:fa:61:52:3c:a2:c7:ca:6b:df:41:42:09:bb:e6:02:17:
         36:92:34:9a:a2:be:1c:39:c0:50:6c:d0:80:a8:e8:05:03:40:
         9a:df:22:fb:02:3d:83:c5:b4:d4:42:a6:23:c7:bd:57:33:d4:
         c4:d2:c8:57:41:92:52:c8:29:f7:5e:7b:a3:db:2d:9c:b6:eb:
         cf:9d:e3:ca:35:1e:a3:4a:a3:59:fa:c0:b8:19:ea:cf:0d:e5:
         3a:19:25:32:ba:1b:6e:00:6e:51:00:8f:68:50:22:51:a8:35:
         8b:60:7b:e4:ff:0f:00:37:f1:7c:dd:10:c1:ad:64:68:a5:cb:
         c1:8a:63:a9:45:2c:bc:d3:48:07:57:fd:14:9d:84:23:b6:f1:
         3f:6f:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org