Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          QL83s5fAdDx1D9SNuCRm993YHBkfJZN9xFmiPtACuag=
Subject key identifier:   E8:0B:9D:55:1D:A8:A5:8C:80:8D:D2:72:6E:78:2F:1E:94:60:D2:D9
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       5DE3FDA0934C2634DF312433185D426D0D90C92D
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:12 +0000
ROA not before:           Wed 03 Apr 2024 18:26:12 +0000
ROA not after:            Wed 02 Apr 2025 18:31:12 +0000
asID:                     266248
IP address blocks:        2804:3d04:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e3:fd:a0:93:4c:26:34:df:31:24:33:18:5d:42:6d:0d:90:c9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject: CN=3082010A0282010100BD7D43832FCC96A47681322D16DFB0843C77207C5C8AA00BEF607198A0DA19F10A323F1C3578DF19641389A35873D15929A75FED546D4CC30FDB8EF549D989550BC98AD9EC52D7BD2306563B77FB07F88FAE5FBDAD8382C45309D4D0AB3970F7846AF7CD51D3B75F85A8A7C608E0867C9AF43958D35FFE802775B6048D27DBDAE89D3BC68BA8CD0B66711D8CDAE9FB6EAAEB15E0BE9A2FBDE2CCB0147592C8832F76619DEC58868B8AE2F1802C4844B25FB1A7220ED27B51516FFAF1B22CBC9D3AD886DC6ABC15A0D165D8160BEDA20B39D7F8CBD8601A5C2FFC78223227A9F94A037056CE0752DD2FB53793D0B23C8F4F1E84404889348009D52B7344A25CE70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:43:83:2f:cc:96:a4:76:81:32:2d:16:df:
                    b0:84:3c:77:20:7c:5c:8a:a0:0b:ef:60:71:98:a0:
                    da:19:f1:0a:32:3f:1c:35:78:df:19:64:13:89:a3:
                    58:73:d1:59:29:a7:5f:ed:54:6d:4c:c3:0f:db:8e:
                    f5:49:d9:89:55:0b:c9:8a:d9:ec:52:d7:bd:23:06:
                    56:3b:77:fb:07:f8:8f:ae:5f:bd:ad:83:82:c4:53:
                    09:d4:d0:ab:39:70:f7:84:6a:f7:cd:51:d3:b7:5f:
                    85:a8:a7:c6:08:e0:86:7c:9a:f4:39:58:d3:5f:fe:
                    80:27:75:b6:04:8d:27:db:da:e8:9d:3b:c6:8b:a8:
                    cd:0b:66:71:1d:8c:da:e9:fb:6e:aa:eb:15:e0:be:
                    9a:2f:bd:e2:cc:b0:14:75:92:c8:83:2f:76:61:9d:
                    ec:58:86:8b:8a:e2:f1:80:2c:48:44:b2:5f:b1:a7:
                    22:0e:d2:7b:51:51:6f:fa:f1:b2:2c:bc:9d:3a:d8:
                    86:dc:6a:bc:15:a0:d1:65:d8:16:0b:ed:a2:0b:39:
                    d7:f8:cb:d8:60:1a:5c:2f:fc:78:22:32:27:a9:f9:
                    4a:03:70:56:ce:07:52:dd:2f:b5:37:93:d0:b2:3c:
                    8f:4f:1e:84:40:48:89:34:80:09:d5:2b:73:44:a2:
                    5c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0B:9D:55:1D:A8:A5:8C:80:8D:D2:72:6E:78:2F:1E:94:60:D2:D9
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:cc:1a:e4:91:b8:62:ff:cf:8e:7f:35:d9:35:40:5c:82:cd:
         d1:2c:13:c7:90:30:fa:79:e4:5e:24:06:d9:94:05:3f:b8:9f:
         73:51:47:c2:86:e7:19:5b:b7:c4:65:ab:55:1b:80:58:82:5e:
         3d:fa:09:ca:cf:0b:f6:de:1e:c1:58:d0:bf:b9:7a:0b:45:5a:
         0b:70:1d:e9:f0:3f:ca:09:3d:2a:49:2f:a4:57:19:f4:47:6c:
         ae:5e:48:15:82:ca:59:f9:fb:cd:36:7c:a3:bf:dc:ac:87:0e:
         2b:38:29:32:a7:00:be:9d:7a:29:3d:18:ad:7a:a5:3e:41:90:
         06:54:da:e5:15:7a:f2:1c:13:f5:6a:18:2f:18:e4:ab:29:58:
         12:5f:bf:3c:8d:75:77:a9:67:63:0a:b8:b3:73:89:6f:6e:ef:
         6a:0f:4e:44:32:86:82:ef:6e:be:80:03:86:ab:1e:d8:d7:ef:
         d9:a6:0f:8f:42:a0:13:88:95:ba:eb:6c:c5:45:d7:58:b1:b1:
         4c:fb:d3:5e:61:d1:66:33:cf:37:f6:b5:10:d2:40:4c:0c:12:
         17:2e:0d:b0:1d:8e:b7:ab:ae:6a:bc:65:4f:f6:c2:72:29:ae:
         23:f3:4d:f5:0d:e4:f8:fc:ce:dd:18:a0:6e:c0:d6:82:7e:a2:
         34:fe:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org