Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a3a2f33322d3332203d3e20323731323633.roa
File:                     323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (raw, json)
Hash identifier:          zfbN0smuechDbQJvWSgvxn+ZZZts5NL2vE4KbsYQQAs=
Subject key identifier:   FB:F4:FD:D1:AA:A7:19:2D:7B:77:5F:13:0F:67:03:43:FB:11:7B:7F
Certificate issuer:       /CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
Certificate serial:       324A9A5B141E6C814CAC6A722A91F1412BF6D2ED
Authority key identifier: 6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a3a2f33322d3332203d3e20323731323633.roa
Signing time:             Mon 13 May 2024 20:02:03 +0000
ROA not before:           Mon 13 May 2024 19:57:03 +0000
ROA not after:            Mon 12 May 2025 20:02:03 +0000
asID:                     271263
IP address blocks:        2804:78c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4a:9a:5b:14:1e:6c:81:4c:ac:6a:72:2a:91:f1:41:2b:f6:d2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
        Validity
            Not Before: May 13 19:57:03 2024 GMT
            Not After : May 12 20:02:03 2025 GMT
        Subject: CN=FBF4FDD1AAA7192D7B775F130F670343FB117B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:15:31:14:ba:ae:96:fe:4e:4b:01:e9:de:
                    d7:2a:ef:aa:5e:68:51:5d:25:86:d0:ef:95:21:7d:
                    3a:53:bb:92:17:6d:fb:94:06:1f:23:83:4f:ad:92:
                    b2:49:33:d0:85:ca:06:3c:de:f1:b5:b2:b9:1d:64:
                    5c:ad:2b:b0:9d:38:a4:57:65:2d:69:be:be:41:89:
                    7e:ce:f5:a7:26:1f:3d:79:1d:fe:ec:12:3c:15:8c:
                    84:ef:26:40:b7:f6:cc:17:6d:4d:01:c8:45:00:bc:
                    c0:f7:fd:df:01:71:4e:89:93:d0:2d:32:65:08:16:
                    d9:01:02:f1:0f:2f:3f:a2:e6:73:36:4b:8f:cd:d1:
                    91:ee:47:9c:00:fb:53:dc:d4:7c:81:30:19:87:a0:
                    a4:fb:76:dc:9a:9e:82:97:cc:1c:b6:57:eb:14:13:
                    cb:06:fd:c7:a7:51:cf:eb:fa:d8:68:d7:17:82:27:
                    66:09:fd:19:81:72:27:3b:d7:86:43:b4:05:46:9c:
                    e4:be:97:84:a9:79:33:e5:43:04:8c:52:12:c6:bc:
                    04:df:73:19:3d:46:51:80:8d:fc:27:db:12:5e:52:
                    a3:66:18:ec:78:ca:1d:c6:a2:3f:7c:6c:51:02:0b:
                    69:d5:43:ad:15:30:d5:c1:a4:b7:8c:f2:6f:58:e7:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F4:FD:D1:AA:A7:19:2D:7B:77:5F:13:0F:67:03:43:FB:11:7B:7F
            X509v3 Authority Key Identifier:
                keyid:6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a3a2f33322d3332203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:d8:4f:2d:19:0c:1e:da:41:88:a1:86:24:a1:26:23:82:7e:
         0c:21:db:3a:51:1a:d6:d9:b9:32:de:4d:c2:68:68:1d:d3:49:
         d9:91:46:41:84:04:31:c2:79:e8:19:6c:72:7a:9e:82:2d:4e:
         62:2e:3e:ec:05:f4:58:47:c3:21:f4:d6:f1:f0:12:ca:3d:41:
         b8:fc:67:a7:26:07:cb:57:ef:d1:db:15:a1:94:2e:6d:6e:92:
         cc:70:96:94:5e:d4:20:f9:17:f5:47:f2:32:4b:1e:16:0f:7a:
         c9:7c:9a:68:2f:ab:72:89:5d:e6:a9:26:9a:54:ba:4f:51:d7:
         91:41:e8:19:44:eb:46:8e:73:71:f9:38:72:36:ae:df:7a:7e:
         b2:20:b5:12:12:42:79:69:24:09:5b:7e:67:fb:31:d7:6b:1e:
         5c:fe:8e:b9:91:9b:7a:25:ab:3f:fc:96:8e:f4:96:42:85:52:
         2f:c8:1a:5b:36:cc:7f:32:d8:7a:62:87:d1:d5:14:f0:7f:ed:
         57:f5:23:1c:70:a0:c6:76:15:f3:45:41:14:71:2e:db:8c:64:
         77:c4:1e:20:81:94:25:37:6e:55:2b:44:da:2f:a6:b8:1c:d2:
         80:4b:0b:05:54:7d:77:a9:9a:b1:bf:32:7a:ec:6c:fc:48:ca:
         fa:77:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:47 2024 by rpki-client on console-fra.rpki-client.org