Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d3438203d3e20323730343339.roa
File:                     323830343a366330303a3a2f33322d3438203d3e20323730343339.roa (raw, json)
Hash identifier:          6W1u9Lx+kYlFXG/Vil2R+/9lI+f04yF4rEEBIN6Geu8=
Subject key identifier:   56:03:57:D4:16:27:C3:F2:E9:F3:DA:5F:88:4F:97:E9:D0:CD:26:49
Certificate issuer:       /CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
Certificate serial:       7D72972EB093D7466AC1100054FD01C2044DEB9A
Authority key identifier: 14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d3438203d3e20323730343339.roa
Signing time:             Fri 23 Aug 2024 14:34:14 +0000
ROA not before:           Fri 23 Aug 2024 14:29:14 +0000
ROA not after:            Fri 22 Aug 2025 14:34:14 +0000
asID:                     270439
IP address blocks:        2804:6c00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl
                          rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:72:97:2e:b0:93:d7:46:6a:c1:10:00:54:fd:01:c2:04:4d:eb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
        Validity
            Not Before: Aug 23 14:29:14 2024 GMT
            Not After : Aug 22 14:34:14 2025 GMT
        Subject: CN=560357D41627C3F2E9F3DA5F884F97E9D0CD2649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:2f:95:09:82:ed:8b:6a:3b:8f:aa:04:7a:
                    3f:00:22:34:3b:87:c2:86:6e:23:31:f0:39:f6:aa:
                    a1:da:bb:ef:01:61:77:5c:7f:0e:88:97:a9:f7:d1:
                    8b:4f:fc:18:48:0e:4b:bd:35:38:48:28:82:d3:cc:
                    6c:fe:3d:6b:08:0f:68:c0:78:a4:d0:28:a0:2c:67:
                    e8:8d:75:05:0c:6a:54:83:12:00:de:db:ed:37:e9:
                    69:73:53:c2:23:9d:2d:1d:d5:97:c7:46:9e:40:a8:
                    b5:24:33:6c:b7:98:c5:a4:ff:c5:2d:83:54:ad:ce:
                    0c:3c:be:86:10:29:89:1f:e1:df:40:ba:4e:cd:62:
                    59:93:0d:b2:bf:72:14:d1:70:86:1b:c8:b4:40:39:
                    64:de:6f:47:39:48:44:15:1f:85:06:f1:6c:e5:0d:
                    49:c8:a8:03:6b:60:74:5d:9d:d1:74:62:07:32:52:
                    f7:39:ed:a2:94:35:f8:ba:3a:c4:03:a3:8c:95:1c:
                    0d:d7:4c:9f:8d:ea:ef:31:b8:2c:b0:9f:19:8b:9a:
                    df:14:7e:e1:ba:a8:4d:6a:3e:13:84:50:4c:b7:bc:
                    61:5c:b8:c4:ff:9d:23:be:ac:3c:7f:67:c4:d4:08:
                    79:93:b4:94:d3:d8:d5:b3:84:c6:7c:f3:aa:ef:ca:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:03:57:D4:16:27:C3:F2:E9:F3:DA:5F:88:4F:97:E9:D0:CD:26:49
            X509v3 Authority Key Identifier:
                keyid:14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d3438203d3e20323730343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:44:1f:e1:19:24:61:30:a8:ed:0d:02:6a:c0:79:d3:9a:5c:
         ba:26:90:38:35:59:05:fc:78:9b:d0:6b:77:c6:8d:a0:81:0d:
         57:e8:74:33:d5:7a:49:0e:2e:30:16:db:fb:6f:34:5f:81:29:
         50:ba:ea:8c:d0:ba:f1:70:e3:ed:32:79:48:1b:22:da:04:de:
         7c:84:8b:9e:9e:77:f8:fa:b6:8b:23:d5:9b:72:90:5e:df:05:
         15:12:29:24:c0:75:dc:f2:b9:f2:7f:54:0a:be:1b:dd:b6:01:
         49:10:e0:0c:30:c9:81:46:70:c7:98:b0:48:f0:da:7b:b1:f2:
         7f:29:d2:03:e5:86:8b:16:93:b6:e7:da:eb:61:7e:52:64:52:
         78:d1:04:4e:f3:d6:5b:10:50:57:41:40:28:50:0c:85:a9:f7:
         a9:26:d0:68:3a:aa:98:0a:28:f1:c1:7d:e5:e1:3d:b0:f9:a0:
         94:de:50:c7:27:46:b2:df:73:f1:01:fa:3f:9b:cc:77:fc:96:
         e3:97:d4:a6:49:7b:53:d7:0e:73:28:be:52:8b:be:69:43:3b:
         ab:11:13:d6:1a:9d:b6:b9:56:25:0c:fd:a9:d8:a9:d8:81:7a:
         d4:8e:dc:f2:e5:18:32:6e:ff:af:4b:59:5e:36:d9:2b:be:29:
         64:8c:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:24 2024 by rpki-client on console-ams.rpki-client.org