Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa
File:                     323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (raw, json)
Hash identifier:          atpKgXGgojqrjzZNxBkFMc53TUqT2pMVSHRVOlGtSlY=
Subject key identifier:   78:4E:5B:E7:36:E4:E9:6D:0F:AE:F0:B4:65:63:A7:BC:F0:D0:B9:90
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       40B41591A9228514D6651311EB69A473DE6A2DDE
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa
Signing time:             Thu 04 Apr 2024 16:56:15 +0000
ROA not before:           Thu 04 Apr 2024 16:51:15 +0000
ROA not after:            Thu 03 Apr 2025 16:56:15 +0000
asID:                     262772
IP address blocks:        2804:30e4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b4:15:91:a9:22:85:14:d6:65:13:11:eb:69:a4:73:de:6a:2d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Apr  4 16:51:15 2024 GMT
            Not After : Apr  3 16:56:15 2025 GMT
        Subject: CN=784E5BE736E4E96D0FAEF0B46563A7BCF0D0B990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:61:9f:d7:85:2e:b8:25:e0:08:e7:67:59:
                    39:e7:89:6c:92:3b:2b:1a:53:7b:56:f0:2c:1a:a3:
                    c7:90:67:b1:b2:db:fe:e8:bc:73:b1:c8:85:d6:7b:
                    ed:c9:01:63:a2:99:1c:0d:d0:16:d5:1a:16:69:8b:
                    69:55:80:bf:c7:af:82:e0:6d:db:0e:d0:8c:24:9e:
                    6c:25:b2:73:01:e1:ce:df:e5:d1:60:65:36:6e:ac:
                    ec:8d:d1:1d:68:c3:34:a8:47:e5:3f:8e:1f:d5:eb:
                    b3:74:f2:78:ad:a4:4c:1c:27:fc:a0:e8:57:9e:14:
                    94:f7:48:a2:38:71:43:b6:c2:a4:95:36:20:c2:ef:
                    3e:e1:ed:64:40:1a:e4:3e:c9:a9:bf:91:1b:76:f7:
                    6d:f9:e2:cf:49:f5:7f:8e:96:bd:a8:e9:d0:e3:12:
                    e5:16:bf:9f:e7:fa:f6:15:e0:f8:fe:1b:0e:c7:30:
                    58:db:62:4a:85:43:c1:54:79:28:99:c5:26:d4:18:
                    6e:01:74:d4:62:4b:93:56:54:c1:84:da:37:6f:55:
                    2a:07:58:b3:6c:32:1f:86:e5:61:2b:9e:4d:08:42:
                    eb:a9:29:c1:b8:98:a4:c0:91:b0:b3:09:27:71:60:
                    1d:7e:3a:58:2b:6b:c4:53:c9:f8:fe:2b:fe:a0:ce:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:5B:E7:36:E4:E9:6D:0F:AE:F0:B4:65:63:A7:BC:F0:D0:B9:90
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:1d:04:07:ef:ea:ac:2b:ef:e2:e9:1c:d8:90:be:0e:0f:24:
         e6:df:c4:82:24:45:10:1c:cd:00:18:99:ce:2f:98:73:e4:39:
         96:69:6d:99:3f:db:da:6d:67:48:86:94:93:d3:47:81:d9:6f:
         5b:0e:e0:a9:fe:33:e4:61:ea:dc:a3:ff:d1:5d:52:83:40:2b:
         b1:47:92:18:b3:ac:dd:24:57:f8:f5:87:7f:a4:a2:34:ab:4d:
         e5:cc:a2:ab:dc:7f:5d:73:2a:01:4a:1f:ae:d9:2c:91:03:ff:
         da:00:56:e4:cc:8f:ef:81:bb:0d:6d:1b:16:84:b3:6a:b5:e7:
         20:55:b9:54:79:de:8f:a7:48:07:c5:3c:c1:5a:a9:40:ef:54:
         17:32:c4:3e:0f:96:2c:59:77:0f:af:10:d1:61:63:b3:e7:68:
         b0:09:cd:b2:ee:b4:0d:15:58:0e:0c:4c:96:ce:93:a1:95:e4:
         6e:df:29:14:d1:e4:86:54:57:ec:a4:45:db:2c:6f:14:67:73:
         8b:aa:f9:e4:e9:15:de:de:55:91:e4:b3:a8:15:b2:88:93:2d:
         d3:a8:5f:f4:32:5a:37:b5:1a:98:03:78:59:86:28:94:98:66:
         93:cb:1d:5a:b7:7d:a7:b0:ca:c0:88:09:7d:f6:47:9c:89:46:
         37:eb:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:00 2024 by rpki-client on console-fra.rpki-client.org