Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa
File:                     323830343a336462303a3a2f33322d3332203d3e20323636353437.roa (raw, json)
Hash identifier:          bzwW3JpMkWSzrjgcV7t/nx99FkEtdauOqmHQJs79lnM=
Subject key identifier:   C8:08:09:FE:42:6B:E8:67:40:97:AD:B7:9D:1C:60:25:E6:5E:7E:65
Certificate issuer:       /CN=164081884269A17674589E45798EE6EE0A93A94E
Certificate serial:       51739BCB2F23FA46215B61E704467A5E43B522FC
Authority key identifier: 16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa
Signing time:             Thu 04 Apr 2024 09:19:57 +0000
ROA not before:           Thu 04 Apr 2024 09:14:57 +0000
ROA not after:            Thu 03 Apr 2025 09:19:57 +0000
asID:                     266547
IP address blocks:        2804:3db0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl
                          rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:73:9b:cb:2f:23:fa:46:21:5b:61:e7:04:46:7a:5e:43:b5:22:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164081884269A17674589E45798EE6EE0A93A94E
        Validity
            Not Before: Apr  4 09:14:57 2024 GMT
            Not After : Apr  3 09:19:57 2025 GMT
        Subject: CN=C80809FE426BE8674097ADB79D1C6025E65E7E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:a9:c7:76:81:d9:70:7b:ef:d5:bc:52:32:
                    86:26:df:17:aa:2f:fe:56:11:77:9c:36:f5:46:47:
                    53:c0:cf:51:69:22:2a:f7:d6:f1:06:db:da:bf:2c:
                    b6:74:81:56:fd:ff:94:ab:e2:89:fd:9a:f6:c2:98:
                    27:a4:ba:d0:74:10:b9:9b:fc:d6:2b:7c:31:bd:c5:
                    04:4e:f4:bd:8e:5b:b0:db:77:87:fa:3c:61:1b:06:
                    fc:42:aa:a7:d7:31:38:40:39:70:38:83:c2:18:4e:
                    c3:17:0b:b0:64:45:15:c3:d5:35:33:21:bc:a9:2f:
                    77:8f:e4:e5:31:c3:14:77:b2:c8:ae:09:f6:d0:fb:
                    03:b5:87:ec:71:6e:24:59:96:7b:9f:bc:de:f4:69:
                    6a:92:6b:09:7e:cd:66:e4:4c:14:64:11:db:6b:f3:
                    80:9b:85:1b:e3:e2:a1:95:9b:7b:0e:4d:5d:24:39:
                    20:84:13:18:d1:75:f1:8b:de:76:7d:f7:d4:1c:50:
                    f9:88:59:16:33:31:3e:cd:b6:a0:9f:1f:6e:3d:2d:
                    4b:ce:2c:c2:b7:59:a5:5a:82:7e:15:c9:36:c4:9e:
                    bd:3e:8c:c3:4e:09:2d:7d:7e:cc:47:6c:db:cd:ca:
                    25:73:4f:48:37:72:e8:97:ab:f9:76:69:71:73:e3:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:08:09:FE:42:6B:E8:67:40:97:AD:B7:9D:1C:60:25:E6:5E:7E:65
            X509v3 Authority Key Identifier:
                keyid:16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:4e:dd:2c:21:2f:6f:62:76:e7:59:02:86:41:4f:8d:a6:4a:
         4c:fe:8f:ae:de:4a:0b:34:c4:a2:9e:c4:49:9f:5a:a4:29:d8:
         b7:a4:c6:c1:2d:04:c6:1c:c9:e1:25:37:31:66:51:0e:fb:a7:
         7c:cf:fe:98:10:66:e9:23:09:bd:cc:90:1d:58:e4:e6:ac:fd:
         24:ed:33:b5:53:08:56:f8:a4:a0:39:e4:1b:54:3b:8e:7d:a9:
         a6:8a:ff:5b:47:63:87:ea:57:99:c0:fa:f9:41:9a:f8:c9:f0:
         d3:5e:80:c8:ad:c7:73:44:32:d2:08:ef:52:2b:6e:4e:8d:0d:
         b4:40:a6:bb:03:07:9f:4d:58:4e:6c:01:91:7e:71:15:63:37:
         7c:af:b9:55:98:5d:ea:86:cb:f2:a2:6e:6d:2b:eb:2e:7c:d6:
         7f:e5:c2:8f:29:98:c2:2e:a7:a9:8f:dc:9f:6b:12:92:32:e2:
         38:3b:87:af:16:0e:2b:eb:2f:0b:ed:82:8b:95:e0:c8:57:a1:
         7f:16:24:19:2c:f9:ad:59:c4:35:2e:59:3c:b4:40:4b:86:12:
         fa:b5:59:7d:73:a3:40:7a:92:5f:db:f8:73:cb:50:76:d0:64:
         8c:bd:07:8e:1b:b6:b3:d2:f6:32:bd:d1:11:2b:d3:6d:a4:68:
         c1:bd:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org