Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          g4/qwNXqXRAs/lcDlc1TwR4uhiFY1C+xNowFW0zkiyY=
Subject key identifier:   46:7C:0A:0C:A1:04:3C:3C:6C:17:AF:19:44:8C:D0:5D:E4:17:26:64
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       790E69C94778D8C1049E07745341860FE2B28189
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     266248
IP address blocks:        2804:3d04::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0e:69:c9:47:78:d8:c1:04:9e:07:74:53:41:86:0f:e2:b2:81:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:dd:50:1b:fd:1f:15:fa:2e:1f:2d:37:65:
                    0f:dd:37:4b:3f:73:c3:fe:11:04:9a:0b:f7:fe:e0:
                    f6:f1:f2:0d:2c:c5:f3:d9:aa:ae:bc:0d:96:ee:2e:
                    68:9e:57:61:fd:43:6a:92:a8:05:f0:65:86:db:d8:
                    10:17:be:65:df:cb:2a:35:35:b1:14:2d:16:b3:03:
                    55:84:a9:5e:ee:09:70:10:66:db:84:b9:a2:9b:43:
                    e7:b0:ae:83:3e:a7:d8:b0:60:5a:62:98:3d:e3:82:
                    53:66:98:08:6f:d2:42:06:fa:5f:1d:9f:0c:64:2f:
                    5c:c0:7d:48:f2:2b:81:6a:cc:96:d4:00:ed:58:9d:
                    7b:c5:1b:99:ca:22:9d:f5:71:d0:56:a7:ce:9b:46:
                    37:a4:5c:65:eb:95:3d:50:47:38:1f:af:2c:28:6c:
                    af:ce:a4:c1:5b:5c:25:1a:d9:ac:db:5a:88:74:a8:
                    82:6f:6e:34:3d:7f:f4:2a:76:4c:21:30:b4:67:27:
                    a8:5b:7c:2a:84:cd:7a:64:19:1f:11:ad:12:ad:91:
                    ad:f6:2d:be:f2:9e:2c:5b:71:9f:4f:22:95:03:fa:
                    c3:98:7e:2d:99:e0:a0:d8:c7:31:0b:a1:67:99:bb:
                    73:3d:0f:24:2e:53:8c:3b:25:44:d4:2b:7d:48:cf:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:0A:0C:A1:04:3C:3C:6C:17:AF:19:44:8C:D0:5D:E4:17:26:64
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:71:3d:ee:d1:4d:ee:99:87:1b:6d:42:03:55:30:bc:28:38:
         26:a1:fa:d7:88:71:6e:38:66:25:07:78:b4:6c:eb:10:38:0d:
         9d:2c:07:6a:80:79:3b:f4:e5:e5:85:57:cf:5c:c4:d6:77:b0:
         2a:1b:d0:00:c4:ef:dd:0e:40:fa:bd:7b:0a:31:ee:18:3e:d7:
         88:e4:0b:50:fb:b2:77:b8:19:ae:fb:1d:9d:4b:09:f0:aa:b6:
         0e:fb:ca:93:28:fb:31:59:cf:aa:40:af:55:76:89:e2:d2:11:
         9a:ca:6b:4f:e6:cb:f5:b8:52:f3:7a:86:d0:03:52:25:f0:c1:
         f4:71:22:9e:7c:c9:5d:bd:aa:9f:34:8e:f8:3d:ea:47:aa:ff:
         d3:c5:0d:3f:b6:e1:a5:7f:40:22:90:fb:1f:06:5c:ab:bd:c4:
         fc:bc:18:be:18:71:4c:85:8d:9d:91:9b:24:56:21:7c:46:84:
         f6:a1:e2:2f:2e:a7:02:e5:c7:05:93:4e:79:3c:90:a1:84:de:
         49:4c:f7:30:18:de:8f:e6:a5:16:c5:63:0d:5d:8d:20:10:48:
         da:c5:24:88:4e:e8:00:19:55:3d:64:79:49:2c:e2:8a:c3:de:
         98:8b:19:df:8d:cb:db:27:7f:cc:71:fd:c5:5d:54:91:4b:95:
         ed:76:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org