Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a383030303a3a2f33342d3334203d3e20323733343132.roa
File:                     323830343a386533633a383030303a3a2f33342d3334203d3e20323733343132.roa (raw, json)
Hash identifier:          ALZQwJj7OPvFBFUFjGoJifMroxxwcKhZ7PqXOmexuh8=
Subject key identifier:   00:3B:9A:B7:15:62:98:F4:38:40:01:43:75:CD:3D:60:CE:56:CB:32
Certificate issuer:       /CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
Certificate serial:       188CA820E97E8ED35B5C414001E7CEC16E803BE7
Authority key identifier: 40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a383030303a3a2f33342d3334203d3e20323733343132.roa
Signing time:             Thu 04 Apr 2024 06:19:53 +0000
ROA not before:           Thu 04 Apr 2024 06:14:53 +0000
ROA not after:            Thu 03 Apr 2025 06:19:53 +0000
asID:                     273412
IP address blocks:        2804:8e3c:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl
                          rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8c:a8:20:e9:7e:8e:d3:5b:5c:41:40:01:e7:ce:c1:6e:80:3b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
        Validity
            Not Before: Apr  4 06:14:53 2024 GMT
            Not After : Apr  3 06:19:53 2025 GMT
        Subject: CN=003B9AB7156298F43840014375CD3D60CE56CB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:bf:18:64:7c:a6:1a:2a:29:6a:66:57:b6:
                    fc:d8:dd:de:9f:12:63:1c:3b:7f:d4:86:b0:0e:22:
                    39:21:d1:26:08:d0:98:da:3e:56:98:11:25:89:59:
                    96:47:80:70:b3:a5:39:9f:92:bc:a2:66:6f:b9:09:
                    9a:d1:ad:95:ad:21:78:16:70:4c:c6:1d:2d:9b:c0:
                    7e:f3:fd:e9:f2:00:2a:d2:e0:95:e2:81:ce:cb:fb:
                    f9:d1:aa:54:c6:e8:1d:e1:16:05:9b:5b:90:91:6d:
                    11:47:bb:f2:b8:19:1f:a9:e8:e9:f4:ba:04:4b:1e:
                    d8:10:86:9a:4c:87:19:8d:20:3d:4a:ec:d6:6a:86:
                    61:11:61:6e:cb:e4:1e:ea:c3:92:e9:ec:39:29:23:
                    8e:23:76:76:48:22:46:25:01:8d:27:0a:a6:75:b6:
                    b8:fc:52:68:aa:4a:d7:b2:94:79:f9:cb:9c:2d:62:
                    76:0f:a1:ea:6e:66:db:b8:b7:a0:87:ac:8c:51:96:
                    d5:4f:ce:91:6b:22:8d:26:f5:db:96:e4:b1:8e:1b:
                    51:7f:0d:7c:ec:53:c5:e8:fe:6c:79:13:a7:de:56:
                    14:d0:5b:3f:63:c8:af:7d:46:a3:7b:30:26:1c:5f:
                    0c:31:8a:47:e8:b7:cd:73:24:81:60:2b:7b:2e:0a:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3B:9A:B7:15:62:98:F4:38:40:01:43:75:CD:3D:60:CE:56:CB:32
            X509v3 Authority Key Identifier:
                keyid:40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a383030303a3a2f33342d3334203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:02:5a:61:f1:c9:9a:fa:39:f9:bb:90:e2:2b:b2:fe:13:00:
         69:c1:47:d9:4d:b0:1b:b3:69:05:71:24:65:b3:2c:da:08:39:
         1c:0f:1a:6e:55:48:56:18:48:3d:18:89:9b:2a:79:44:f5:5b:
         36:83:89:65:23:c4:5e:4c:c2:f1:b4:64:67:92:ce:e3:75:75:
         dc:98:a5:49:4f:bd:11:75:01:2f:0e:7a:84:42:a7:6d:82:96:
         5a:0b:8c:1c:9b:4b:34:5b:13:92:23:8b:21:8c:f2:9a:ff:04:
         e1:af:12:fb:71:2d:7e:bd:6f:8c:58:29:5b:5d:77:9e:fc:67:
         26:c9:26:59:80:7e:44:8c:44:f6:9d:f5:a6:20:c3:81:13:79:
         16:51:83:05:e4:9d:05:ad:6a:43:c6:da:55:aa:24:07:30:12:
         fe:1a:ab:a3:b5:86:f7:3e:3c:24:f5:ad:b0:2f:5c:e3:13:5f:
         0e:3e:84:e1:e2:57:b1:23:6b:16:01:20:2e:d0:bb:2b:4a:40:
         c2:92:44:f3:ae:5d:7a:6e:54:37:c7:7e:68:de:f0:cc:30:20:
         a7:77:66:86:9d:3f:d9:b1:f2:e7:a9:bf:b1:9c:2c:54:de:23:
         0c:ce:78:e4:a3:5e:81:9d:a8:23:19:6a:4c:f6:21:40:be:f4:
         5b:73:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:01 2024 by rpki-client on console-fra.rpki-client.org