Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383130303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383130303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          mJDH+RKaM+CUrxOlMrn3sjS79b0XrcWxD+ZhzWPDEzk=
Subject key identifier:   A9:9B:48:E8:E1:3D:7A:4C:98:F0:8A:77:2D:F7:E2:D9:F4:02:CE:E9
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       6E1C335A954126F889C534519A36649DEA281502
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383130303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Thu 04 Apr 2024 04:00:40 +0000
ROA not before:           Thu 04 Apr 2024 03:55:40 +0000
ROA not after:            Thu 03 Apr 2025 04:00:40 +0000
asID:                     52858
IP address blocks:        2804:774:8100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1c:33:5a:95:41:26:f8:89:c5:34:51:9a:36:64:9d:ea:28:15:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Apr  4 03:55:40 2024 GMT
            Not After : Apr  3 04:00:40 2025 GMT
        Subject: CN=A99B48E8E13D7A4C98F08A772DF7E2D9F402CEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:d0:08:bd:91:b7:6b:73:69:59:9a:44:70:
                    15:6f:46:2c:ca:6b:60:d9:f8:e7:24:6f:50:58:41:
                    9e:a1:c2:e9:4f:24:5a:0d:ef:b5:aa:0e:85:8f:c1:
                    aa:32:d2:23:36:aa:41:84:e6:16:ef:d8:44:78:7c:
                    aa:76:63:8a:e2:6b:67:78:08:09:3d:1f:31:85:45:
                    0f:08:9f:d2:47:cc:96:65:9c:97:69:b5:05:d4:03:
                    fe:d4:3d:44:aa:fe:8e:52:5c:10:a2:3d:36:23:82:
                    f6:ff:02:e0:e6:85:cf:b7:40:0e:94:78:9e:e3:be:
                    0e:a5:87:14:fb:8f:65:99:00:6c:5d:9c:16:64:99:
                    1f:4a:65:93:c0:eb:15:41:68:59:be:da:24:13:3c:
                    b7:2c:63:b1:68:51:11:cc:51:83:a2:59:b7:71:15:
                    15:56:78:fd:01:ff:fb:f0:ca:f1:72:a4:a8:64:2b:
                    c2:46:85:a7:3f:1f:20:e2:50:dd:a4:b6:4e:46:99:
                    3e:d6:f5:ed:02:16:0c:02:b4:a8:18:de:c7:58:86:
                    1c:a8:48:bf:82:b7:db:bd:45:f3:31:b3:03:e8:dc:
                    83:3b:8a:80:c9:9b:93:9f:95:ca:85:fb:91:6e:75:
                    95:a4:48:75:77:98:00:e0:1c:41:3c:5e:78:fc:74:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9B:48:E8:E1:3D:7A:4C:98:F0:8A:77:2D:F7:E2:D9:F4:02:CE:E9
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383130303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:82:a5:15:59:fb:19:72:ad:b6:d7:c9:34:e6:6e:61:29:
         e7:5f:8f:e8:58:ca:8a:b4:b7:b4:87:f1:29:c4:9e:d8:47:16:
         db:1f:5b:ae:8d:06:f6:7d:9b:c1:b8:d5:32:19:ed:57:1d:62:
         ca:b7:d1:3f:b5:da:f9:30:c0:a4:35:38:e1:a2:d5:37:34:b3:
         36:94:f0:0b:51:13:b4:46:b8:37:b9:b1:97:4c:48:0e:56:9f:
         6b:81:1e:bf:d2:b7:20:30:5b:c2:2b:0f:c3:48:d6:13:a3:5b:
         06:da:de:b5:a3:ca:09:ef:4b:2b:b8:5c:60:91:46:8f:d6:c7:
         b3:d2:58:d3:f4:85:b5:0e:0a:78:87:a1:d1:cb:2d:0e:a4:63:
         7e:5b:f4:80:e8:c2:54:a0:79:df:a3:42:3f:8f:08:95:7a:88:
         8c:80:d7:8f:63:6e:54:59:c4:bb:b1:70:e2:8f:f0:61:06:37:
         b2:9f:81:5e:7d:32:21:0e:b7:00:a6:18:15:5b:21:4b:fb:6b:
         6c:01:6a:cf:50:fc:09:c0:e0:82:b9:c8:bb:96:f0:e0:fc:da:
         ef:d1:4f:7e:26:81:46:a9:df:0a:45:63:31:b7:8e:d2:a3:8f:
         50:d8:b6:a5:af:5c:cf:90:67:f2:d2:29:ad:42:f6:6f:c8:bf:
         78:82:e7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:07 2024 by rpki-client on console-ams.rpki-client.org