Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa
File:                     323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa (raw, json)
Hash identifier:          jdgMGkF2cYnNV+TE3pyMV0fRJr04KpmiNodlVQNelZA=
Subject key identifier:   6D:CA:06:F0:93:78:2A:32:75:FA:99:2E:09:6A:7D:EF:7F:A9:B8:79
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       35E6A0A9A765B950B5A5B4B55D4B9881A05908BA
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa
Signing time:             Thu 04 Apr 2024 04:17:49 +0000
ROA not before:           Thu 04 Apr 2024 04:12:49 +0000
ROA not after:            Thu 03 Apr 2025 04:17:49 +0000
asID:                     266968
IP address blocks:        2804:4618:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e6:a0:a9:a7:65:b9:50:b5:a5:b4:b5:5d:4b:98:81:a0:59:08:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Apr  4 04:12:49 2024 GMT
            Not After : Apr  3 04:17:49 2025 GMT
        Subject: CN=6DCA06F093782A3275FA992E096A7DEF7FA9B879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:02:b6:c7:2c:e5:b8:6b:f3:48:7b:d6:54:
                    89:ba:19:9a:b5:58:1e:40:9d:a4:de:0a:b6:d8:b9:
                    ac:b0:f6:7d:84:57:f7:a9:de:bc:9c:77:64:8f:86:
                    25:26:0b:b5:3c:6d:f9:5d:3c:69:91:22:d5:7f:9a:
                    86:6e:f2:08:05:66:37:5e:e8:a8:1c:b5:9f:b2:ef:
                    03:bb:d6:84:8f:46:a2:e1:9c:22:fe:a4:5a:91:3b:
                    79:40:ae:a1:46:02:d9:df:de:c8:1c:6f:4e:0e:bb:
                    b8:ed:b2:c3:fe:4c:1e:a1:88:6f:35:5d:72:77:c5:
                    9a:b3:27:79:1e:c1:87:46:4e:24:2c:fa:5a:d4:a1:
                    f1:f3:2d:1e:67:08:1e:2a:51:1d:6d:e5:c0:95:be:
                    0e:be:e0:b3:c7:14:ed:d5:60:00:d2:f2:f8:f8:2c:
                    18:5a:ca:37:6f:b6:cd:03:42:a5:97:d6:95:7a:53:
                    25:4e:40:dd:e2:47:4c:95:d7:b7:94:e2:03:6f:1b:
                    e7:60:5d:ee:ab:c1:f2:f3:8b:9d:f9:38:08:c1:7d:
                    72:c7:8a:bf:7d:bf:c4:da:72:30:f7:1b:65:e9:1a:
                    19:f8:6d:58:d1:e4:7d:47:a4:c2:c3:00:2a:f9:8a:
                    ab:e1:0b:f7:59:c1:2a:39:67:eb:af:3a:49:7b:7b:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CA:06:F0:93:78:2A:32:75:FA:99:2E:09:6A:7D:EF:7F:A9:B8:79
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:24:09:99:a3:7b:5c:53:d8:fe:4e:17:f0:80:cf:08:66:8f:
         01:f7:63:ca:67:53:80:56:a9:71:8e:c3:bc:2d:c7:03:66:ea:
         e0:37:56:eb:ea:cc:63:34:fa:d1:55:a2:ca:d9:54:2d:fc:8e:
         fa:75:51:b0:45:bb:19:a1:d5:4d:df:ba:d5:2f:b7:1f:41:fa:
         2b:89:8b:4a:14:b4:71:32:c2:e5:10:f5:fa:d7:52:0e:46:7d:
         37:0e:b0:72:5a:f1:73:cc:0f:a2:4a:d1:76:69:06:88:84:28:
         1c:81:d5:fb:aa:3d:9e:08:2f:d4:cc:dd:e7:4d:cf:b5:3a:24:
         b1:53:30:74:62:37:dd:47:f1:6d:61:f3:89:bf:82:cd:ab:ee:
         da:33:eb:0c:8f:26:db:2c:9f:d1:0a:26:c7:1c:fc:6e:18:8c:
         84:36:0d:d6:cd:ab:f3:5b:3e:5b:a9:c9:98:db:5a:cb:fa:c6:
         d2:22:99:0a:cf:9b:14:29:16:5e:e4:9c:df:5d:0c:c0:fc:d3:
         5c:d6:7d:95:0e:68:e4:c3:b2:3c:ae:57:ae:a2:43:fd:d9:30:
         69:8e:46:ac:e9:5c:ab:37:3b:bf:0e:07:84:32:a4:87:6a:57:
         55:ff:aa:de:5e:03:fb:45:a0:f6:07:e4:19:63:36:f1:f6:a0:
         18:16:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org