Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          f2liMO5SRjPH13LZEKmNbYZHGFwMnXtpShj/LJ9xrUQ=
Subject key identifier:   4D:D8:75:DB:63:8B:39:29:1C:EE:FA:B1:51:D6:10:FE:16:80:0D:F8
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       7E78381477232DC90FAB1F4DCAC3BCC243EBF906
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     266248
IP address blocks:        2804:3d04:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:78:38:14:77:23:2d:c9:0f:ab:1f:4d:ca:c3:bc:c2:43:eb:f9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:c7:0c:62:9a:44:30:8e:18:53:1e:00:47:
                    75:c9:32:97:f3:85:8d:41:d7:e7:15:ac:c0:5a:8a:
                    98:a8:6f:d2:e0:9b:18:53:c7:39:ed:ad:a4:0c:94:
                    a2:50:df:1f:ff:33:b6:49:22:77:d9:29:94:34:6e:
                    60:94:6b:88:f2:da:26:b2:c2:e0:9f:1e:27:05:59:
                    4c:52:e3:68:b3:53:dc:89:f7:3e:4f:44:5c:a0:c3:
                    0a:10:68:0d:35:f3:ca:20:e3:a8:2d:f1:3c:43:35:
                    ae:7a:9b:8c:e6:cb:0e:cc:e0:e6:c9:e6:02:1f:3e:
                    ee:c5:54:c4:9f:14:d4:b8:24:29:ba:ab:a5:13:ad:
                    46:66:b5:e9:08:46:22:82:d5:3c:c6:32:a3:35:7f:
                    2e:30:61:89:9c:d8:8a:92:7d:38:7f:98:a5:56:2b:
                    6a:5d:a4:26:1f:1e:98:01:f6:5e:3e:8d:b0:d4:3e:
                    08:86:3b:ed:63:41:0f:02:6a:c4:25:47:87:e1:10:
                    93:9a:2b:fb:c5:88:d5:07:2a:68:13:a2:49:11:3e:
                    88:70:1b:f7:23:08:3c:ad:f1:5c:59:83:13:58:c8:
                    bd:9d:60:6b:c5:e1:f0:f9:90:4b:23:43:db:ed:d6:
                    e3:19:d6:50:5b:c2:4b:1f:91:24:d5:a6:c7:e2:59:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D8:75:DB:63:8B:39:29:1C:EE:FA:B1:51:D6:10:FE:16:80:0D:F8
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:2a:ff:8d:b8:ab:8d:f7:b4:fd:16:c6:8d:62:e8:0b:b3:
         29:ab:f2:16:76:b6:f8:5b:b7:d6:d5:69:b1:43:8f:6c:c9:4c:
         90:65:ec:b0:4f:02:28:41:d7:05:e1:cd:57:61:cd:02:cc:b9:
         18:a7:27:54:12:9b:21:31:81:97:8b:ec:dc:86:78:b3:b1:7f:
         9d:76:81:4e:6d:08:e2:9d:81:a1:7a:72:52:1a:71:5c:ee:1d:
         0b:56:2a:fb:53:04:c2:b9:f3:fd:06:95:b6:2a:82:1c:91:08:
         ca:c7:01:ae:87:9f:d9:4f:83:db:cd:a7:4b:13:66:19:29:08:
         8f:cf:7c:fb:3e:90:61:3b:e8:f7:c5:fd:e1:11:9a:c5:eb:54:
         99:57:ee:41:2e:bd:c3:82:de:0d:65:83:55:0b:7b:63:36:ce:
         d9:c1:2d:c4:d4:21:da:41:41:4c:fd:66:cd:a2:37:7f:5b:f1:
         cc:b9:f0:17:de:d8:2f:d0:90:86:68:48:ee:9f:06:ad:28:c4:
         01:cc:1e:77:2b:cf:36:2c:06:84:23:0b:88:84:f3:7e:3e:29:
         b9:6b:10:58:c5:c0:f2:cd:1e:ff:26:f0:cb:af:ae:db:4a:58:
         41:66:0a:cb:56:da:0d:9b:25:df:67:0c:37:e4:2c:cf:fb:dc:
         29:14:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org