Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa
File:                     323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa (raw, json)
Hash identifier:          GUP8s6jrKoMG33qxwl3SAZkrmx4kZBUz/Hdl6vlq1Ys=
Subject key identifier:   26:F0:CA:63:72:C9:E5:42:8A:B6:A2:AC:55:5E:8A:66:B9:5C:ED:78
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       660F5D52A4C178FC6E373E4144AE58ECACA576C7
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     266248
IP address blocks:        2804:3d04:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0f:5d:52:a4:c1:78:fc:6e:37:3e:41:44:ae:58:ec:ac:a5:76:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:94:1c:95:bd:7c:00:38:ee:0d:05:9f:c5:
                    59:28:79:34:d9:0b:b1:8f:4a:21:7b:c1:31:46:ef:
                    c9:80:2d:65:ce:eb:86:c8:89:e9:3d:c6:50:80:b2:
                    c5:4a:8e:1b:52:99:ba:76:62:45:d2:d7:17:b4:34:
                    c7:58:ac:f5:78:73:83:7a:ca:41:d5:3d:31:54:2b:
                    13:81:8d:0c:90:41:31:77:9d:6f:ae:4d:55:13:b0:
                    aa:c7:28:34:c8:48:75:66:d5:9a:9f:1f:62:e4:94:
                    39:f4:00:40:30:8d:c3:77:5f:71:c8:e9:7d:70:92:
                    20:70:9a:a7:7a:70:e7:61:68:97:21:39:2b:92:58:
                    2d:95:ac:88:93:04:0d:f9:f7:1f:d6:66:e0:de:09:
                    c6:c4:94:a0:7b:c2:8f:ac:99:bc:65:82:2c:68:2f:
                    45:93:50:f6:8b:2f:29:2b:24:e1:af:38:56:a3:2e:
                    76:2a:ea:fd:1f:17:15:e9:76:ca:01:40:84:0b:e1:
                    b5:22:ef:a9:5a:bc:9f:89:20:85:ab:54:94:73:d3:
                    44:64:b2:45:a0:62:53:d2:d7:8b:f0:f3:c3:7a:cc:
                    bd:bd:b3:69:f6:36:95:99:19:2a:a5:1c:5d:cf:51:
                    08:53:6e:8f:46:05:6a:48:98:1b:51:95:ff:ee:01:
                    07:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F0:CA:63:72:C9:E5:42:8A:B6:A2:AC:55:5E:8A:66:B9:5C:ED:78
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         02:80:c3:a8:9f:7b:d0:2b:b7:bd:2a:4b:bd:f9:6b:26:f5:37:
         72:c2:cb:03:e8:37:96:3c:af:db:8e:d5:10:2d:58:b1:f2:de:
         b0:79:eb:6b:7d:82:33:fa:74:72:86:c0:e5:f3:93:c0:d0:76:
         2a:cf:5b:a2:28:fb:bf:0d:05:b2:30:cd:ff:c7:74:ce:03:85:
         c4:95:f2:fe:77:a2:68:cf:33:42:e4:55:03:fb:c9:44:6b:70:
         89:55:3b:ca:d4:3b:6b:1b:c7:0b:3e:7d:c2:f1:2c:8e:d3:bb:
         02:0d:cc:8d:88:03:39:ee:65:ce:e7:37:de:46:7c:9a:97:ea:
         fe:88:36:00:22:82:b0:97:f3:ac:1b:e2:c5:b4:36:84:9e:1e:
         46:f1:57:56:1d:11:76:2f:30:9e:ab:c9:8d:94:54:1c:3e:ef:
         b3:3b:26:5d:97:05:8f:4f:07:de:23:08:e3:11:3c:26:9e:e7:
         b4:67:b1:dd:b0:e8:ad:48:7b:aa:3d:69:f5:a6:a3:d5:c5:9d:
         e3:49:0f:d1:0a:4a:28:f7:cb:51:1b:7c:66:51:5b:dd:17:b5:
         12:7e:b7:db:2c:79:4f:f8:8e:5b:d8:bd:97:f7:8b:97:a6:09:
         77:a7:71:76:f6:aa:67:a2:62:81:1f:3d:20:b4:f0:2d:28:af:
         bf:3b:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org