Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/323830343a383130303a3a2f33322d313238203d3e20323632333036.roa
File:                     323830343a383130303a3a2f33322d313238203d3e20323632333036.roa (raw, json)
Hash identifier:          Ixun3nWW3SSxlndSkYliPomT6RUJWF3m47aF6RdUzTo=
Subject key identifier:   5B:09:29:53:81:0C:58:49:D0:81:6E:67:0F:C4:B4:A1:24:05:A0:D6
Certificate issuer:       /CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
Certificate serial:       655163ACA52DBD5D0D48789552CB0AFBEA9DA583
Authority key identifier: 29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/323830343a383130303a3a2f33322d313238203d3e20323632333036.roa
Signing time:             Mon 08 Jul 2024 15:37:39 +0000
ROA not before:           Mon 08 Jul 2024 15:32:39 +0000
ROA not after:            Mon 07 Jul 2025 15:37:39 +0000
asID:                     262306
IP address blocks:        2804:8100::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl
                          rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:51:63:ac:a5:2d:bd:5d:0d:48:78:95:52:cb:0a:fb:ea:9d:a5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
        Validity
            Not Before: Jul  8 15:32:39 2024 GMT
            Not After : Jul  7 15:37:39 2025 GMT
        Subject: CN=5B092953810C5849D0816E670FC4B4A12405A0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:ad:a8:bd:6a:0c:2c:70:d4:92:83:f8:f9:
                    13:a3:ba:1b:a2:e4:e5:86:4a:f5:bf:3e:f3:ac:61:
                    e0:7d:89:2b:6e:c5:aa:98:31:f9:51:45:62:96:c9:
                    56:ca:8b:5e:9a:8f:73:a7:60:d8:27:32:a1:25:72:
                    e2:b2:68:83:4d:46:23:b3:ca:be:01:37:e5:c7:52:
                    88:6a:d4:e7:51:ec:32:d1:36:ee:fd:c4:6c:80:bd:
                    34:48:0b:45:43:37:a9:1a:ac:9d:f5:b8:b2:4e:06:
                    6d:35:a5:bb:ee:53:65:eb:36:5c:8c:ee:06:3e:16:
                    7b:ec:db:b8:54:04:69:aa:af:a4:43:7c:34:1b:d6:
                    66:3e:eb:0c:d0:8b:22:7f:4d:ad:5a:36:85:45:ea:
                    a8:2c:b1:23:ac:ba:97:de:a4:8e:cd:31:62:9f:a1:
                    a0:17:ae:ea:51:8c:63:91:ec:ac:82:61:10:b8:2d:
                    38:7a:a9:e7:57:08:76:bb:bb:7c:64:76:70:01:bd:
                    04:61:f9:f1:e2:e1:07:04:d0:23:ee:3a:de:4d:d1:
                    ae:1e:29:15:ce:7d:a7:b1:39:3f:21:34:e6:39:90:
                    29:9a:d7:a0:7a:82:03:05:ac:95:4e:e2:c7:0a:a7:
                    b7:cc:12:e7:19:40:1a:08:42:f3:8d:c4:1e:79:e8:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:09:29:53:81:0C:58:49:D0:81:6E:67:0F:C4:B4:A1:24:05:A0:D6
            X509v3 Authority Key Identifier:
                keyid:29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/323830343a383130303a3a2f33322d313238203d3e20323632333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8100::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:10:f4:a0:b1:40:b6:a1:5c:90:ec:b2:fe:c5:e5:40:b9:
         69:e6:7e:50:99:98:e6:d9:06:3f:95:2f:7a:98:e2:c9:a4:61:
         78:d7:20:d7:0f:6a:cb:b6:aa:f9:4e:a3:af:8c:05:07:fd:9e:
         33:ca:ef:fb:2a:22:87:d6:0b:89:29:33:d1:d6:a2:ba:bf:a7:
         c9:6d:a0:eb:43:82:9c:a6:92:84:f4:4e:0a:ad:cc:d0:07:11:
         49:e9:7c:84:15:cb:4b:79:04:6e:e1:e5:00:ba:83:ca:54:49:
         ba:ac:d1:b5:d2:da:fb:09:9c:2a:ca:87:6d:5a:ac:c3:0f:ef:
         68:e4:70:08:86:86:90:8d:01:57:f7:2f:dc:1d:0d:37:06:db:
         a1:18:97:cb:57:45:9a:31:02:28:28:df:bb:52:d2:8c:fe:44:
         d4:ed:c5:91:88:92:59:d7:1b:50:a5:e1:e2:1e:19:85:18:ef:
         56:23:d7:0a:e7:36:4a:5f:43:b2:fa:c6:5f:3f:92:52:97:dc:
         63:d5:c1:2f:9e:eb:ce:41:a4:cb:78:67:57:bc:17:7b:f1:48:
         5f:55:20:da:82:05:7d:ea:12:d8:68:fe:42:f3:b6:9d:53:fd:
         94:b1:10:ba:0d:ac:6f:d0:40:97:05:4d:db:eb:9b:82:18:f5:
         37:5c:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:31 2024 by rpki-client on console-ams.rpki-client.org