Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33342d3334203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33342d3334203d3e20323636323438.roa (raw, json)
Hash identifier:          yLWhRBlNM89yQs1yeFd/DVM2/qx87ITyc2hfI5P07v0=
Subject key identifier:   46:32:BD:58:44:1A:83:15:63:87:54:96:1A:67:67:76:28:F8:10:4B
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       2E4481A9E5FAA39527916CC3B9BCE6AD003BF2E5
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33342d3334203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:12 +0000
ROA not before:           Wed 03 Apr 2024 18:26:12 +0000
ROA not after:            Wed 02 Apr 2025 18:31:12 +0000
asID:                     266248
IP address blocks:        2804:3d04::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:44:81:a9:e5:fa:a3:95:27:91:6c:c3:b9:bc:e6:ad:00:3b:f2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject: CN=3082010A0282010100CDC55F0FF05EC4C1DEB08281F088A76DF3DB4766439DF66A6903F3C84E5638F1101F7D63949A72738612B4DE7897FCE72A18828B688DEBFC4071FEFD5C28C8D0C3E0B1BEF1AA301E3F7E80CB3F08FF5A153AA5DDE344BD96189CEA0B33CC4FF9045F3682121AE409F8A0F1319464EE818B9F33564E4D0002C7A3C87A758C07527061585771486CA51BC0043CBE05C93019FB043C60DFF442F96D6F1809DBB6216ECEEAA74F0AAF9B7A15F7A46D0C76FCE885D28EAB665EFB7B13CFAA993C6F0883F4DDE52857A9DDC53A99C4A6A1648241FFFCA51D90ADD52C5A5EFCE07356FC02AB187D57CF75C69547AAED0552952B63781DF13005488CF82D18DC4605DF270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:5f:0f:f0:5e:c4:c1:de:b0:82:81:f0:88:
                    a7:6d:f3:db:47:66:43:9d:f6:6a:69:03:f3:c8:4e:
                    56:38:f1:10:1f:7d:63:94:9a:72:73:86:12:b4:de:
                    78:97:fc:e7:2a:18:82:8b:68:8d:eb:fc:40:71:fe:
                    fd:5c:28:c8:d0:c3:e0:b1:be:f1:aa:30:1e:3f:7e:
                    80:cb:3f:08:ff:5a:15:3a:a5:dd:e3:44:bd:96:18:
                    9c:ea:0b:33:cc:4f:f9:04:5f:36:82:12:1a:e4:09:
                    f8:a0:f1:31:94:64:ee:81:8b:9f:33:56:4e:4d:00:
                    02:c7:a3:c8:7a:75:8c:07:52:70:61:58:57:71:48:
                    6c:a5:1b:c0:04:3c:be:05:c9:30:19:fb:04:3c:60:
                    df:f4:42:f9:6d:6f:18:09:db:b6:21:6e:ce:ea:a7:
                    4f:0a:af:9b:7a:15:f7:a4:6d:0c:76:fc:e8:85:d2:
                    8e:ab:66:5e:fb:7b:13:cf:aa:99:3c:6f:08:83:f4:
                    dd:e5:28:57:a9:dd:c5:3a:99:c4:a6:a1:64:82:41:
                    ff:fc:a5:1d:90:ad:d5:2c:5a:5e:fc:e0:73:56:fc:
                    02:ab:18:7d:57:cf:75:c6:95:47:aa:ed:05:52:95:
                    2b:63:78:1d:f1:30:05:48:8c:f8:2d:18:dc:46:05:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:32:BD:58:44:1A:83:15:63:87:54:96:1A:67:67:76:28:F8:10:4B
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33342d3334203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:36:7f:1e:3a:2c:c5:57:9d:06:7a:06:a4:a0:7a:2f:02:
         ab:eb:6b:5e:eb:8e:17:8c:4c:b9:4c:54:b5:8e:74:01:4e:45:
         65:25:ac:c3:8b:8c:93:48:8f:5b:33:06:87:ca:0f:49:d1:23:
         4f:c8:30:a0:4b:7e:4d:79:f7:90:3d:6a:3d:2e:f6:8d:56:8c:
         13:10:e4:6b:d4:35:e3:5f:24:7a:ce:ea:5a:c4:c3:ec:87:a0:
         d7:96:f4:65:b4:4c:38:4c:7a:ce:3e:df:61:82:c9:80:bc:3e:
         48:84:aa:87:ef:11:50:74:a0:3d:fb:b3:ee:7e:2b:69:01:db:
         10:b9:3a:75:ba:1e:70:4d:91:83:cf:7c:3f:5f:3f:d0:e9:67:
         35:87:b5:07:97:9e:21:75:dd:80:81:16:b1:96:a5:1e:fa:7d:
         db:40:61:8e:86:36:62:1d:66:7f:9a:03:d6:c2:84:75:15:cc:
         cf:1f:2f:6d:80:de:c3:77:f0:a4:bc:8d:c9:cd:22:36:02:e0:
         88:06:a7:9c:2e:25:d9:f7:e2:85:5d:ed:22:55:bd:c9:16:93:
         e9:99:17:c0:d3:92:e3:fc:01:e9:f9:74:a6:ad:74:d7:5a:bb:
         19:78:9b:27:d0:10:9e:b7:7f:f6:0b:4f:8f:d7:02:ce:e6:c2:
         d8:b9:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org