Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          G8azxWR7NZQJMFG4JSVLcx5V/2Bx1XfQHd8uOFYzrmc=
Subject key identifier:   A2:C1:B1:CF:C3:6A:13:95:F5:F5:3A:E3:DA:67:AE:20:B2:49:A0:C6
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       453AE3A8B5D7F46A728002DB8FDA2697F6AB82EC
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     266248
IP address blocks:        2804:3d04:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3a:e3:a8:b5:d7:f4:6a:72:80:02:db:8f:da:26:97:f6:ab:82:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:e3:b1:ab:db:ba:57:24:3f:38:33:02:28:
                    75:ac:05:20:07:e9:4e:27:03:dc:f0:e3:25:2e:0b:
                    7e:da:f1:90:73:8d:3e:66:01:31:1a:f7:41:03:23:
                    29:68:6f:9a:3f:d6:86:cf:4e:1a:07:46:f1:e6:5f:
                    fe:08:af:3b:e5:02:95:e5:6e:f7:ab:e8:60:ba:f0:
                    a1:46:89:62:3a:50:1a:4c:b4:4f:ed:4f:03:ef:82:
                    f4:59:82:47:22:31:fd:21:5b:90:7d:61:12:13:0c:
                    a5:28:c1:1a:32:cf:29:c0:26:f8:5a:ed:be:87:0c:
                    91:3a:3b:ca:dc:df:9c:05:78:81:cd:42:fe:2b:b0:
                    6f:07:e8:d2:33:7c:d9:ff:f9:d1:c6:5b:ec:da:31:
                    07:4f:1f:fa:e9:34:2c:b4:88:05:cf:59:d3:54:28:
                    78:d0:03:3e:64:21:53:1b:59:ef:c0:4a:bf:4c:ce:
                    db:38:17:3f:ed:68:b1:96:b7:ad:c9:89:41:9a:16:
                    c3:cb:40:57:5f:30:68:8f:24:a2:50:fb:f6:ea:04:
                    7a:3b:11:ef:22:ff:87:a3:56:d8:4b:ca:77:c1:53:
                    23:86:fb:8a:d6:bf:74:62:d3:fc:19:8a:7b:d9:01:
                    94:5c:47:2e:5d:f4:dc:f7:c5:fe:60:15:77:4c:cf:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C1:B1:CF:C3:6A:13:95:F5:F5:3A:E3:DA:67:AE:20:B2:49:A0:C6
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:bb:dc:ab:30:16:31:19:03:70:e9:ba:e7:3e:0a:e3:45:76:
         c5:a2:a5:f6:aa:10:50:28:b7:c9:84:e2:af:66:c7:4a:f3:76:
         f6:c9:95:d7:f4:20:c3:b9:c3:e1:3b:2b:ae:6d:a6:94:d1:ce:
         3d:b8:1a:83:48:3d:80:37:7d:e4:fb:82:a6:51:ff:f8:31:46:
         dd:89:77:b5:24:20:10:d6:c4:5b:ae:22:25:21:d5:a8:2f:a3:
         5c:64:64:26:e3:97:66:1d:b0:49:6d:67:33:f5:7c:4a:29:d9:
         a8:fa:f0:03:91:14:19:78:36:19:48:1b:e2:49:ee:1a:96:16:
         3a:9b:0f:a3:51:0d:73:e1:d2:31:eb:99:b8:04:03:3a:5b:3a:
         4e:31:27:90:9f:aa:cc:6e:30:04:63:1d:a8:09:90:cb:59:e7:
         40:19:0d:88:7b:cc:0b:53:71:7a:0f:19:55:7c:b4:5e:b1:08:
         df:e5:97:ac:ee:29:ad:13:ef:47:f2:41:32:0c:26:25:8c:99:
         87:76:97:02:dc:f0:65:02:3d:c3:1a:3d:ae:aa:a5:05:f1:6e:
         18:7a:70:02:89:d2:77:cc:d5:85:3d:27:a8:bd:a2:35:2a:67:
         4d:96:97:f3:24:af:50:9b:0b:15:41:d9:c2:04:5e:62:fd:80:
         85:69:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org