Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33332d3333203d3e20323636323438.roa (raw, json)
Hash identifier:          iU9bGfeRlD1LQ+bpA5L7FDvWdyJ59+VKn5Z3tHmNLMo=
Subject key identifier:   18:EA:62:27:D1:E0:8D:84:31:5D:01:4E:89:51:F6:4E:B1:96:CB:89
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       02A937D712662E72A5E40D649B994A05F15BCA6D
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     266248
IP address blocks:        2804:3d04::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a9:37:d7:12:66:2e:72:a5:e4:0d:64:9b:99:4a:05:f1:5b:ca:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:81:5b:e0:ca:91:79:f8:c4:6e:e8:b9:60:
                    6c:37:c3:55:00:62:63:2c:3c:c9:ec:2e:a8:64:82:
                    70:9d:0e:68:b8:14:d9:d1:b7:73:c3:c3:c1:f2:5f:
                    d6:af:ff:d0:18:4e:92:75:4d:fe:02:c0:80:cc:fd:
                    21:c0:54:59:e9:71:27:80:a6:c8:ff:e6:d2:1a:b2:
                    78:b5:1d:68:3a:7f:3d:1b:92:0a:bc:30:eb:f7:3d:
                    40:07:17:3d:69:8b:8a:02:cb:7d:b1:a5:70:56:e4:
                    c2:7e:e1:df:77:9e:53:0c:38:0a:4d:d5:50:c4:55:
                    40:e5:e2:1c:74:40:ca:2a:cc:2a:26:90:3b:61:0d:
                    ff:f5:8d:e4:65:9c:d1:dd:46:96:57:37:78:5e:2b:
                    cd:8d:30:9d:68:09:c6:bf:56:1a:d9:5d:a5:0f:ac:
                    74:5f:9d:10:e2:f3:d8:a6:3f:17:fe:5c:72:1f:ad:
                    d5:af:53:5c:86:48:ad:bb:46:a4:cd:f4:0a:3a:ea:
                    00:b6:2c:3e:c6:23:da:e9:ef:63:02:0b:98:a0:be:
                    5d:15:9d:31:e8:57:a9:3c:c3:06:34:9a:28:30:dc:
                    ce:16:d5:03:7e:4d:a5:f2:3f:e5:b2:b7:ef:34:a1:
                    2c:e0:8e:26:ac:d6:03:10:aa:61:ee:35:26:0b:03:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EA:62:27:D1:E0:8D:84:31:5D:01:4E:89:51:F6:4E:B1:96:CB:89
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:97:e1:ee:4f:a7:77:14:09:57:c9:3e:7d:f3:01:3b:85:3b:
         62:fd:25:07:65:d7:1f:db:2c:99:ab:0f:88:57:e9:0c:51:0e:
         0a:08:2a:00:78:5a:bf:91:04:9e:0a:60:c9:0f:83:b6:50:d0:
         02:87:92:96:0b:0d:52:a5:8b:70:92:e2:55:63:46:f6:38:a3:
         f5:f8:db:12:e8:8b:3f:9b:98:58:b6:b3:9a:45:79:58:1c:9e:
         61:14:98:e1:37:f6:b6:67:35:fe:78:ef:4a:15:5f:d1:dd:3c:
         71:28:f6:13:78:a8:96:22:f6:36:af:ce:15:40:0c:1d:de:56:
         46:0e:f7:ce:f4:b9:58:c7:9e:00:b9:97:d5:f1:e8:2b:43:bc:
         83:a3:b9:4f:a7:b6:23:7e:83:06:06:14:17:83:ac:17:65:4b:
         ea:0d:f9:fc:13:1c:60:ae:77:9a:71:d7:81:f5:3f:85:d6:ce:
         09:08:d4:7c:f9:c5:72:0c:b6:66:14:3e:e3:d1:b7:12:9c:aa:
         07:cd:a3:aa:68:4f:1a:de:29:e1:58:bf:e5:3d:ed:b6:af:6f:
         c9:32:59:fe:0e:87:46:da:0e:bd:45:4a:6b:b2:a6:d4:af:38:
         3a:6e:b1:fd:66:c4:e1:78:69:39:ea:dc:03:6d:1a:06:25:ee:
         05:31:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org