Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          GYupj7zaktOsMh1CEqLIqEztz9mBMAsUDz98uLruUV8=
Subject key identifier:   88:2C:A1:EE:90:C6:C8:D4:AC:7E:92:BE:58:96:6B:27:F8:10:FA:A2
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       183D549EABC8676AE4C5761AB20EE026D76841CC
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     266248
IP address blocks:        2804:3d04:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3d:54:9e:ab:c8:67:6a:e4:c5:76:1a:b2:0e:e0:26:d7:68:41:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:ca:47:c9:af:12:81:e3:c6:1c:4e:6f:c5:
                    a0:51:0b:f0:fd:8f:93:ce:54:8b:df:19:56:37:18:
                    13:e5:55:70:55:da:17:fa:24:5d:4e:14:24:05:0e:
                    cf:b8:ab:92:43:ae:48:21:fb:1c:09:79:c6:15:f5:
                    70:48:70:de:7b:9b:0c:77:a3:36:64:8f:84:f3:80:
                    04:57:85:d2:2b:46:fe:d9:4d:19:de:43:fe:09:85:
                    01:73:9c:94:ad:ae:a0:e0:38:68:15:50:92:9c:e0:
                    d2:bc:68:db:60:9c:aa:da:f6:e9:86:b5:d5:44:c5:
                    2b:38:c1:10:c5:57:2b:a1:17:2a:22:02:bb:60:f3:
                    b5:19:ec:0e:e9:24:83:39:cd:82:4c:f8:23:0f:4b:
                    4c:05:e8:3d:ac:8e:de:ff:45:2f:6e:ef:3e:f2:70:
                    73:4c:ec:bb:36:09:e0:a1:de:1d:cf:13:92:b6:0e:
                    8d:ee:3c:3c:9e:31:66:28:b2:31:b6:3d:5d:9f:9c:
                    d7:05:32:25:75:39:84:c2:8f:15:89:d6:7c:08:d4:
                    46:78:fc:cc:e5:df:43:c3:25:a4:c9:10:ba:0a:75:
                    02:53:61:57:27:44:6c:b3:9e:d8:f1:1a:9c:96:9c:
                    52:2e:ea:50:56:6e:06:c3:e4:33:e1:7f:e1:92:82:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2C:A1:EE:90:C6:C8:D4:AC:7E:92:BE:58:96:6B:27:F8:10:FA:A2
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:f1:dd:70:c7:b1:a1:36:ce:a1:6a:aa:d5:71:de:4e:81:
         58:e9:bd:32:75:b1:76:f1:3f:96:b0:39:32:87:63:cc:e6:e7:
         3b:0c:9e:15:54:57:83:23:f7:76:39:4f:f9:3e:a6:83:08:b1:
         17:65:3e:52:05:da:4e:37:29:86:b2:41:02:09:13:e0:1f:14:
         cf:df:89:66:ba:91:18:bd:a0:8a:07:ef:fc:17:87:15:a9:af:
         a3:39:21:09:9b:78:da:13:43:fc:f3:45:ee:86:2b:84:42:33:
         09:69:b9:01:71:c2:b7:e7:3a:0b:91:aa:99:d5:b1:15:f3:35:
         82:ac:95:29:4f:5a:ee:a2:9a:9f:0d:b7:16:06:c9:4d:f4:c4:
         bb:f6:86:01:e8:a5:da:1f:d0:a5:54:c2:e2:9b:b9:4e:ae:82:
         62:56:7d:1c:d1:ed:cf:ef:d7:f1:89:e3:3d:6e:52:01:ca:6d:
         4c:88:8e:57:40:55:6c:91:1d:db:cb:81:72:6b:34:a0:dd:7c:
         13:76:ec:a4:b9:ac:58:01:36:a9:cb:be:a7:06:42:23:2c:e6:
         3a:44:84:ca:56:d8:63:b4:0c:a6:8a:6a:ef:cc:1c:52:0f:01:
         99:67:4d:a9:05:9b:e6:c9:2d:bc:37:f6:4f:92:06:9e:04:3a:
         73:72:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org