Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          vxzuaLS04vxxDcjVuPe5kRfe7SAvtZjZ6C7ldWEPOnY=
Subject key identifier:   8E:96:04:B5:B0:34:DC:6A:65:C8:08:FC:A3:4D:4B:B8:C9:94:6C:19
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       68E9538C56443641A3F53595FB9E4F2DB13F721C
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     266248
IP address blocks:        2804:3d04:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e9:53:8c:56:44:36:41:a3:f5:35:95:fb:9e:4f:2d:b1:3f:72:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:a9:ff:87:52:0e:1d:d8:8d:46:21:b4:54:
                    6d:6e:d4:cc:c9:37:cb:da:15:ce:9c:ec:8a:d6:f1:
                    32:aa:d7:50:2c:a8:69:2a:8e:75:fb:43:29:3d:de:
                    ab:82:f0:a2:75:6b:91:f3:06:59:91:34:a9:b0:83:
                    70:c4:7b:d5:bd:f9:05:03:36:04:74:4c:74:59:4a:
                    d3:8e:b8:17:5d:ac:35:46:a0:0f:0c:49:4c:09:e6:
                    ac:51:f0:25:2e:fb:f6:29:40:0d:c3:d7:f0:c5:4c:
                    5f:87:0a:c6:af:16:e4:6e:1a:9c:0e:7d:ca:48:41:
                    52:c0:f2:66:51:e9:da:a0:34:16:58:7e:1a:ba:89:
                    9e:4a:d8:ac:d8:f7:de:7b:f3:03:e5:44:89:f7:63:
                    1e:ad:4f:29:d8:88:e4:a3:1d:3e:0a:1c:ef:ce:65:
                    33:73:ef:6f:26:a3:69:bd:d6:ad:d0:3f:8a:8b:47:
                    bc:d0:de:c8:00:06:c4:c9:91:e6:5e:cd:54:f4:45:
                    59:bb:8e:10:5f:f4:aa:11:ee:58:4f:44:87:f8:5f:
                    3b:1d:dc:bd:00:30:99:8c:8d:c8:48:4a:39:67:06:
                    d7:96:a5:63:ab:95:7b:09:53:24:a4:3b:97:ce:6b:
                    a2:77:64:e0:6c:32:23:23:c3:a5:57:6f:f9:47:6e:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:04:B5:B0:34:DC:6A:65:C8:08:FC:A3:4D:4B:B8:C9:94:6C:19
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b0:cc:54:64:ea:7a:59:43:e5:ff:9b:b0:28:88:19:20:76:39:
         2e:6e:e8:33:18:19:1a:a4:6e:1d:f1:08:bc:66:6d:5a:c6:91:
         5f:ea:45:83:23:5a:8f:e2:be:17:a0:77:2f:f0:db:52:55:77:
         4a:6c:73:43:48:b1:7b:fb:e5:86:e5:1c:fb:8c:95:b7:47:6c:
         b4:30:38:b8:7a:8c:f5:3e:b8:42:1c:c1:8e:5b:3c:be:07:84:
         60:0b:91:6f:a7:6c:de:ca:27:40:47:e7:ad:72:a2:26:c5:b3:
         78:a3:e7:dd:7e:02:7b:12:3e:85:49:0b:ed:68:e6:ce:1c:0d:
         db:3d:9d:e8:a4:af:87:78:06:88:3a:ba:14:73:3d:38:f3:05:
         60:a6:fe:f1:62:30:81:b1:d2:3f:3d:3e:56:7e:cc:6a:c0:11:
         64:8e:13:55:d4:68:9a:2b:fb:8c:f2:cd:76:aa:1e:ed:b3:f4:
         52:e2:4c:dc:92:55:55:a5:e6:41:53:46:e3:eb:94:f7:90:64:
         10:ee:4b:52:4d:75:00:37:c2:e0:f5:41:db:e7:87:27:64:d0:
         cd:ff:52:5b:e6:ed:54:f0:5d:24:b2:47:51:90:21:d4:78:da:
         5d:ce:14:98:b8:00:d5:5d:ce:98:8b:fa:ec:18:ab:21:96:18:
         95:d8:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org