Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa
File:                     323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa (raw, json)
Hash identifier:          0OyrPWN0QyCWops5E90S4aegpvrjwBiaH+mNB/3aRgI=
Subject key identifier:   68:5F:BE:B7:E2:E0:FE:30:FF:56:B7:1B:E0:62:22:D5:98:0D:24:CA
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       64E76E1D98CC212FC6D71F924E5D3E7FDE127C1E
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa
Signing time:             Thu 04 Apr 2024 04:17:49 +0000
ROA not before:           Thu 04 Apr 2024 04:12:49 +0000
ROA not after:            Thu 03 Apr 2025 04:17:49 +0000
asID:                     266968
IP address blocks:        2804:4618:3100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e7:6e:1d:98:cc:21:2f:c6:d7:1f:92:4e:5d:3e:7f:de:12:7c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Apr  4 04:12:49 2024 GMT
            Not After : Apr  3 04:17:49 2025 GMT
        Subject: CN=685FBEB7E2E0FE30FF56B71BE06222D5980D24CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:21:9c:78:c4:a2:2d:e7:15:2a:ad:10:04:
                    96:77:cf:18:90:e6:44:b5:76:bb:ae:64:92:0c:39:
                    5b:01:1a:bd:aa:38:64:77:5d:a2:16:94:d7:a0:c8:
                    64:3c:87:b7:7f:1e:0f:a3:85:5c:0b:71:95:c5:c5:
                    62:5e:a8:d2:d3:05:3a:a9:62:f0:9c:dd:fd:f6:5e:
                    3f:51:19:d4:97:9f:2d:dd:b4:7e:31:73:cd:4d:e8:
                    9b:21:cd:0c:f6:d6:40:30:9a:a1:eb:c1:92:e2:81:
                    db:23:c7:11:c5:18:3a:71:41:7b:8a:7f:2b:4e:1d:
                    31:96:02:a0:2a:c6:66:91:4e:b5:5e:58:94:c0:02:
                    87:dd:cd:20:33:41:a3:ca:76:e6:1d:03:45:23:06:
                    27:9f:03:cf:32:02:70:d8:4c:80:73:03:68:c1:98:
                    12:d4:c7:54:77:1a:82:f3:69:e9:31:7f:18:53:d2:
                    49:3c:e9:5b:53:fd:ba:93:de:d6:cd:c6:1b:9b:a0:
                    3f:4e:3e:5e:90:23:75:fe:b0:2f:8f:f9:df:a5:a6:
                    2d:4f:21:d5:05:92:2a:6b:9f:95:ac:0c:08:ed:60:
                    c2:1d:90:33:fe:68:70:36:d2:43:c5:37:16:4b:04:
                    07:dc:68:ee:b4:19:89:4e:ed:b3:97:04:91:b3:40:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5F:BE:B7:E2:E0:FE:30:FF:56:B7:1B:E0:62:22:D5:98:0D:24:CA
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:3a:dd:ea:bb:e7:11:9c:07:57:23:fc:4f:1b:51:81:1b:
         73:3a:1a:1e:8e:0f:8b:7c:4a:03:04:68:9a:8b:cf:14:6d:29:
         56:a6:9f:5f:f7:ed:f6:4e:54:b7:a9:79:b0:7e:04:6b:42:c0:
         38:e4:47:31:ac:43:ff:d5:23:c0:15:d9:37:ee:6a:28:a9:9b:
         ae:3d:72:7a:92:1b:52:16:71:61:7d:e3:4d:49:fc:ab:f0:fd:
         04:1d:bf:25:70:ae:87:6b:0f:e2:69:f6:70:12:36:8b:0d:ef:
         b6:3a:31:de:b3:5c:75:18:32:a4:1f:67:31:9f:72:66:fd:55:
         fb:df:a5:eb:5e:85:1d:51:ca:1e:1a:80:e6:74:55:59:b4:9e:
         18:a6:4f:8d:ff:c1:2a:25:cc:8d:0d:07:ec:af:50:d9:4e:91:
         8b:ef:cf:95:9c:19:16:86:bb:2a:71:11:89:7d:2b:ab:69:e3:
         24:00:97:dc:62:59:d8:93:96:65:9e:36:ee:8a:5f:97:03:a5:
         9b:ab:29:8a:e2:2e:af:92:ff:80:5f:98:35:d3:2b:ca:51:77:
         1f:00:f5:04:ef:4e:1a:8e:44:5e:fe:fc:99:15:c9:de:66:2b:
         2d:94:a3:d8:5f:87:6e:de:d7:d6:b2:c7:68:c5:e5:f0:b9:37:
         48:e7:e8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org