Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa
File:                     323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa (raw, json)
Hash identifier:          WeNUEuAc/B45qcoKVEfWoH2Y5Z8fihinY6l+95kEPjY=
Subject key identifier:   B6:A6:56:A7:37:12:D3:A0:2A:E2:F1:23:A7:57:82:11:26:4B:4C:DA
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       598CC719768ADA13DD7093DE5F4E6B992FC6C405
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa
Signing time:             Wed 03 Apr 2024 18:52:09 +0000
ROA not before:           Wed 03 Apr 2024 18:47:09 +0000
ROA not after:            Wed 02 Apr 2025 18:52:09 +0000
asID:                     263989
IP address blocks:        2804:28f4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8c:c7:19:76:8a:da:13:dd:70:93:de:5f:4e:6b:99:2f:c6:c4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Apr  3 18:47:09 2024 GMT
            Not After : Apr  2 18:52:09 2025 GMT
        Subject: CN=B6A656A73712D3A02AE2F123A7578211264B4CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:ab:ed:59:c5:ab:97:49:16:84:c2:cc:43:
                    0f:e2:91:0f:ed:1a:31:37:f2:ed:22:72:b3:0e:24:
                    61:c8:a1:b8:f4:96:46:76:ee:8d:35:bc:c5:e6:5b:
                    cc:65:27:60:15:5a:30:8a:d1:82:b9:4b:7f:f9:ac:
                    45:14:5d:bf:d7:3a:e6:24:43:91:fe:18:55:34:dd:
                    6b:66:ef:00:84:e9:44:88:d1:3b:90:b1:fe:6b:e9:
                    c3:91:73:f7:0c:35:2b:01:c3:d5:95:68:4b:8e:f0:
                    b0:c8:1f:0f:ca:da:db:a1:3f:3c:f0:fd:74:7d:b2:
                    ac:3e:01:d4:19:e4:6a:14:2e:c9:0f:35:7e:10:f2:
                    d6:2e:f6:d4:c5:30:01:12:6b:7c:6c:84:f0:03:cc:
                    4b:50:3c:20:05:05:61:16:09:d2:45:0a:c0:7d:e3:
                    d6:95:b9:ef:a1:5a:c3:6a:3e:28:9d:ef:a8:c1:6d:
                    90:7e:08:aa:a5:df:c7:5f:6c:08:30:24:85:86:60:
                    56:04:cb:13:26:46:88:fc:11:ed:44:df:75:f3:85:
                    57:27:7b:c0:55:de:80:88:60:e6:a6:99:2c:42:33:
                    d4:6c:d4:d8:d0:67:58:3f:f6:e4:4e:09:8f:54:80:
                    08:53:03:29:53:5c:41:8c:ac:9d:94:45:87:d5:9f:
                    82:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A6:56:A7:37:12:D3:A0:2A:E2:F1:23:A7:57:82:11:26:4B:4C:DA
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         f3:aa:ed:2b:91:67:c7:96:39:ed:8a:06:e2:07:59:91:1c:3a:
         fe:2f:d9:c1:5e:49:67:74:9e:21:c5:e8:c9:b8:37:c4:a3:43:
         26:a5:89:23:6b:e5:47:b6:f2:84:dc:7a:ed:16:16:9c:31:c8:
         a4:45:8b:74:28:ea:4d:5c:16:af:ed:20:0e:df:0d:f9:9c:2a:
         cf:5b:74:bb:94:e2:8b:e6:7d:fa:13:fe:a2:80:9c:e2:61:2a:
         b5:38:11:44:79:5a:67:b6:5f:b6:7a:51:71:54:5c:aa:52:31:
         e6:3b:53:1f:50:b3:3c:ca:8d:46:37:92:f3:2a:bc:5e:d4:7b:
         94:b8:60:ca:c8:6a:1f:38:fc:fe:fd:27:b9:26:be:1a:07:39:
         c7:8b:a3:31:63:80:9b:10:89:c3:9e:bc:e7:cd:13:d7:0d:8c:
         76:be:51:f9:fd:dd:ba:69:31:be:e8:14:85:14:c3:38:33:86:
         3c:dd:3a:ec:97:dc:31:81:6d:29:76:26:d7:1d:ff:40:74:53:
         b9:40:78:27:ab:99:f3:4a:ca:1d:75:d7:34:aa:07:44:42:e0:
         8f:98:de:97:6a:f1:92:d3:53:bb:06:c6:29:bb:71:91:ba:f4:
         55:c5:ec:f6:78:01:ab:57:a8:19:74:80:98:e5:28:3a:30:6d:
         53:4f:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org