Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa
File:                     323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          E8sU/NCx5/8U/Qi0Dw5w8wEhWNgcMsQQhndipiLj8n0=
Subject key identifier:   AE:49:0C:C6:C2:CC:2D:6C:E8:92:9A:C9:C5:00:34:C7:57:4A:C9:0B
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       053A1FF5F93626B856012B74F2BE9E8462D64C23
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa
Signing time:             Thu 04 Apr 2024 15:50:30 +0000
ROA not before:           Thu 04 Apr 2024 15:45:30 +0000
ROA not after:            Thu 03 Apr 2025 15:50:30 +0000
asID:                     263280
IP address blocks:        2804:164c:cb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3a:1f:f5:f9:36:26:b8:56:01:2b:74:f2:be:9e:84:62:d6:4c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Apr  4 15:45:30 2024 GMT
            Not After : Apr  3 15:50:30 2025 GMT
        Subject: CN=AE490CC6C2CC2D6CE8929AC9C50034C7574AC90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:de:5a:ec:8d:0d:51:49:89:67:47:d8:39:b9:
                    e4:d7:90:03:2c:33:ff:82:a6:1c:b9:46:12:3f:0e:
                    e4:b6:cd:44:e7:54:3c:09:bc:4a:6b:99:0d:46:5e:
                    23:e6:bf:3f:ee:3e:aa:07:94:21:41:39:32:c1:b9:
                    3e:28:3a:7b:6d:2b:4a:a5:4c:00:7b:4d:60:ea:34:
                    62:81:1c:9f:2c:d1:6c:0d:f1:c4:8a:90:0c:c2:99:
                    68:75:ad:aa:d6:82:86:04:74:28:95:38:f2:70:13:
                    5b:d3:5d:a8:ad:3e:ec:28:aa:73:ca:f5:8d:9e:ca:
                    f3:b6:e7:e9:69:11:f0:b1:a7:d2:fa:18:0b:e0:28:
                    2b:28:7f:cc:d0:e1:83:b9:03:91:bd:c5:bd:5d:a6:
                    26:5c:e0:a0:fa:62:df:06:a2:3b:b0:71:d5:12:09:
                    f6:6c:fa:5c:4d:c4:16:a2:a6:ab:84:4d:a2:d7:65:
                    4a:8c:46:41:4a:19:ab:8a:26:07:8e:6d:3f:38:d3:
                    ac:04:b7:19:7e:79:8f:3c:3d:d3:d8:45:90:6b:2a:
                    2e:96:f0:05:a8:cd:dd:0a:3f:32:27:01:45:d2:7e:
                    0d:a0:6b:31:39:13:6d:df:87:6c:9e:1b:ca:1a:aa:
                    01:35:22:fa:2c:ab:c2:77:8b:b6:16:12:31:c7:9e:
                    ce:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:49:0C:C6:C2:CC:2D:6C:E8:92:9A:C9:C5:00:34:C7:57:4A:C9:0B
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c:cb::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:bb:df:35:eb:84:93:77:92:6e:29:c3:6b:72:6a:46:a3:
         59:dc:81:47:fa:eb:13:2d:f1:3e:ce:66:1d:2d:5f:88:6e:ec:
         ce:03:8c:54:30:30:11:05:44:58:67:a2:1e:84:9f:99:f5:50:
         bd:88:6a:73:08:e6:97:fd:84:4d:bc:8c:e7:28:a6:70:75:c5:
         f1:81:a0:33:9f:24:bf:18:e5:bd:7f:b7:b6:bf:b9:42:0f:c8:
         14:cc:5f:3c:25:82:8b:4c:54:be:85:3a:89:d5:8c:5b:4d:bb:
         d6:96:1e:7a:6c:41:e0:42:f1:4e:d1:8c:a4:46:57:3b:bf:a0:
         38:c0:29:38:33:d9:8b:12:25:8d:03:6e:46:9a:58:cc:cf:94:
         dc:d9:06:2e:dd:9a:dc:1c:ef:2b:76:45:67:a8:31:32:be:f7:
         e0:2e:4b:10:7d:48:56:e2:34:b0:75:4d:8c:33:59:d5:c7:c8:
         16:00:49:ca:8e:7c:cf:7b:38:b5:05:10:93:2c:f9:5e:86:28:
         bc:7c:ae:a9:48:1a:90:51:19:e7:2f:e7:bc:c6:fe:20:ef:dd:
         5c:47:98:74:53:a1:de:17:11:55:e7:17:f3:af:af:1e:68:2b:
         f2:c8:e9:d7:1e:3a:ab:8a:9a:47:e2:97:9c:1f:5e:f2:a7:2c:
         9f:0a:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org