Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa
File:                     323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          crMW9rz9qv9GGTShURhjMRWeUD/ri6pFIHUuhRsgAdA=
Subject key identifier:   05:DE:5B:34:C7:FF:A1:27:B8:A5:72:5A:3C:DD:0D:F0:F5:00:A6:18
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       1F81E3EFBA75DEFA18FAC574E9AF00813B564113
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa
Signing time:             Thu 04 Apr 2024 15:50:30 +0000
ROA not before:           Thu 04 Apr 2024 15:45:30 +0000
ROA not after:            Thu 03 Apr 2025 15:50:30 +0000
asID:                     263280
IP address blocks:        2804:164c:abcb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:81:e3:ef:ba:75:de:fa:18:fa:c5:74:e9:af:00:81:3b:56:41:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Apr  4 15:45:30 2024 GMT
            Not After : Apr  3 15:50:30 2025 GMT
        Subject: CN=05DE5B34C7FFA127B8A5725A3CDD0DF0F500A618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:f2:e6:b2:51:e2:61:0e:9f:03:f0:17:b6:
                    27:91:f6:56:8b:0e:25:cc:ae:fc:ec:43:47:7a:ff:
                    96:63:ff:6f:20:bf:e8:aa:23:3c:4c:e9:62:4b:ff:
                    94:95:3e:20:3c:11:2c:49:b1:eb:2a:32:11:4d:0f:
                    7c:83:91:a6:30:05:b8:99:b2:9a:13:be:51:d1:53:
                    a5:bd:32:f1:a9:d1:8f:6b:d9:23:49:16:04:04:d6:
                    11:a4:a1:9c:1b:0f:e2:a2:82:ca:74:91:ee:17:76:
                    27:5d:4c:47:42:85:d8:48:5d:ab:82:d9:2d:9b:61:
                    d4:29:b3:0e:f8:4d:c0:ab:49:d7:4c:ae:37:f2:17:
                    b5:fe:98:39:ac:29:80:bb:28:1a:4a:3f:9c:d3:db:
                    64:85:e9:d3:d2:5f:2b:e3:0e:19:82:46:ca:9d:b7:
                    23:09:4c:76:06:82:a2:ba:6a:b2:7d:bb:6d:26:56:
                    13:49:45:ff:da:0e:c6:ea:d1:ab:73:6a:1a:a8:59:
                    2a:d8:91:89:d8:76:a3:58:6f:e6:88:bd:7e:05:be:
                    10:11:27:5e:d0:7f:7e:77:02:f7:d2:79:2c:8e:5b:
                    fb:31:da:af:e1:21:bb:ad:45:89:88:c1:91:81:c8:
                    24:b1:4e:9f:b9:a9:7a:aa:a2:95:10:85:ef:0d:cd:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:5B:34:C7:FF:A1:27:B8:A5:72:5A:3C:DD:0D:F0:F5:00:A6:18
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c:abcb::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:cd:c3:32:8e:46:86:12:37:e2:a3:c3:f0:3c:7c:06:05:
         2a:61:28:90:21:7a:a1:ec:10:dd:07:67:d2:64:db:46:28:ba:
         72:06:46:30:d9:f3:50:a9:ab:ff:2e:be:d4:e0:ad:67:55:f1:
         19:0c:19:4c:64:56:78:9a:f7:ea:3f:43:a3:49:10:7b:05:da:
         97:71:90:31:0e:c6:b8:ec:d5:b8:a9:f2:57:8e:c4:05:67:a3:
         a0:9b:ca:cc:83:7d:2b:a0:47:3f:df:15:0d:47:a4:13:65:d8:
         3c:53:c2:db:f8:a3:55:f9:65:e4:53:4c:64:11:23:e5:c1:89:
         fe:cf:f4:13:d0:d3:3c:52:21:e5:63:c1:c5:43:19:0c:d7:6e:
         e7:8a:ad:63:2a:ff:81:8d:1f:3f:2b:75:09:48:f3:77:46:d6:
         f0:68:89:5b:9f:ec:b2:9e:1c:8c:08:c5:d7:53:ad:9f:a3:8f:
         0a:f7:2c:e8:92:9d:44:e9:42:c8:b9:4e:e4:72:2c:46:ac:2c:
         c0:d3:00:e6:82:fd:ea:03:01:7b:37:6b:32:06:d7:65:17:e3:
         e4:71:35:72:fe:5c:9e:77:bf:42:f1:8c:0a:63:ef:f2:18:ac:
         ff:46:b2:e2:21:5a:53:ed:d5:6e:18:83:d9:45:b4:c5:ee:24:
         db:47:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org