Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/323830343a6666383a613030303a3a2f33352d3335203d3e20323633363131.roa
File:                     323830343a6666383a613030303a3a2f33352d3335203d3e20323633363131.roa (raw, json)
Hash identifier:          kb5YnoOWSTgeJy6+R/4qo9U0CcaBs5pBA1cv1ORsd4A=
Subject key identifier:   FB:AA:B0:68:0A:08:80:E1:66:4B:4C:B1:9E:F9:C2:D8:72:D0:FF:D0
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       5626FF5D8F992771A6B042230206BBF75235A9D1
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/323830343a6666383a613030303a3a2f33352d3335203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:16 +0000
ROA not before:           Thu 04 Apr 2024 10:55:16 +0000
ROA not after:            Thu 03 Apr 2025 11:00:16 +0000
asID:                     263611
IP address blocks:        2804:ff8:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:ff:5d:8f:99:27:71:a6:b0:42:23:02:06:bb:f7:52:35:a9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:16 2024 GMT
            Not After : Apr  3 11:00:16 2025 GMT
        Subject: CN=FBAAB0680A0880E1664B4CB19EF9C2D872D0FFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:76:f6:83:3f:d0:0b:f9:d9:d6:ea:0d:31:
                    4c:bd:af:eb:40:0f:82:00:03:d6:87:00:87:2d:31:
                    a7:f4:5a:d4:b7:c3:f1:eb:5c:1d:74:de:2c:b1:1d:
                    00:aa:2f:8f:24:12:c3:be:91:1a:11:e4:30:55:a8:
                    66:1a:09:3c:4a:c8:6c:95:13:a2:92:52:c7:03:82:
                    bb:df:5e:08:21:4a:93:59:95:d0:5f:af:3c:5e:35:
                    51:d7:a1:72:79:79:ee:5e:41:de:8a:3e:26:d9:aa:
                    fb:1d:f1:9b:c4:fd:6d:af:b7:06:b9:d9:de:4e:39:
                    27:e8:b1:0b:92:76:63:15:d7:d6:3d:31:00:da:69:
                    89:6f:f6:59:52:90:b2:5c:8a:ca:8c:1c:24:a7:a6:
                    00:57:b6:82:f5:3d:e2:6d:7b:47:0c:96:e6:75:cd:
                    24:ba:1e:cd:52:e4:3d:ff:73:f5:e3:27:11:9c:28:
                    6e:39:5b:c9:36:f9:b7:c2:d0:83:37:a6:d5:92:5a:
                    ae:c4:cc:a5:a5:7b:bc:f0:db:0f:33:cf:61:42:30:
                    81:08:35:79:ed:fa:9f:ec:76:a2:f6:c6:2a:a4:de:
                    7a:8f:b3:4f:b6:47:19:b3:cf:82:ca:4e:9d:8d:b6:
                    ac:3d:90:39:df:02:d5:43:ae:2f:42:90:e0:1c:e2:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AA:B0:68:0A:08:80:E1:66:4B:4C:B1:9E:F9:C2:D8:72:D0:FF:D0
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/323830343a6666383a613030303a3a2f33352d3335203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b0:b9:43:f0:2e:00:bc:77:1d:c9:69:4b:32:e4:60:3d:32:76:
         f5:76:27:84:21:27:9d:b2:b8:95:c1:39:5f:2a:71:74:ff:bb:
         dd:eb:40:53:ff:ed:b8:97:81:d7:07:87:bf:da:fc:23:68:99:
         de:a4:41:1f:01:45:44:0e:5d:a1:d0:f0:3c:7f:77:38:af:c6:
         aa:57:aa:9c:30:c1:05:58:db:85:39:00:a1:78:94:09:14:07:
         58:fd:2c:58:4f:7c:30:54:9a:03:ea:cd:87:ab:3a:05:0b:d0:
         56:be:5a:14:74:c9:ba:07:66:c2:e9:e3:bc:69:28:8a:db:cf:
         6f:01:0f:ec:d1:3a:f3:8a:f2:7f:46:01:d8:b5:ca:28:e9:28:
         0d:f7:c8:d7:35:10:6e:21:90:95:bc:b1:20:5b:89:de:1c:c1:
         aa:9c:46:2f:9c:9f:f7:59:f4:cb:59:80:da:d7:a5:11:0a:78:
         d5:26:cc:0a:92:85:77:f1:d2:d1:9b:83:a1:be:e7:ba:f1:b6:
         57:38:95:cf:41:a2:34:49:4e:1b:43:60:aa:c4:87:77:e0:ea:
         a9:3e:18:31:8e:6c:34:17:3a:e0:3b:2a:6e:7d:e2:01:e0:ab:
         08:b0:9d:e8:54:1e:6b:3f:5d:18:b7:14:e0:be:01:9b:01:73:
         20:00:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:26 2024 by rpki-client on console-fra.rpki-client.org