Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa
File:                     323830343a373932303a3a2f33322d3438203d3e20323731323836.roa (raw, json)
Hash identifier:          pFAr+8bFChiRuYeGE5Z2wNjNYoeGJuEnIyZjp5zxwEk=
Subject key identifier:   65:03:A3:E8:0E:00:CD:F8:9F:B9:07:E9:33:C2:57:F7:EA:43:DF:97
Certificate issuer:       /CN=6689F5CF61182A36307EEB7C011D8636B6340149
Certificate serial:       3E366229F2E89C0DEFE8A520BA0D66D9A61472BA
Authority key identifier: 66:89:F5:CF:61:18:2A:36:30:7E:EB:7C:01:1D:86:36:B6:34:01:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa
Signing time:             Thu 04 Apr 2024 06:49:15 +0000
ROA not before:           Thu 04 Apr 2024 06:44:15 +0000
ROA not after:            Thu 03 Apr 2025 06:49:15 +0000
asID:                     271286
IP address blocks:        2804:7920::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.crl
                          rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:36:62:29:f2:e8:9c:0d:ef:e8:a5:20:ba:0d:66:d9:a6:14:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689F5CF61182A36307EEB7C011D8636B6340149
        Validity
            Not Before: Apr  4 06:44:15 2024 GMT
            Not After : Apr  3 06:49:15 2025 GMT
        Subject: CN=6503A3E80E00CDF89FB907E933C257F7EA43DF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:78:10:67:72:09:02:00:43:27:4c:f4:56:
                    c9:b9:58:01:9b:a0:27:ad:fa:9c:a9:5d:46:c8:ed:
                    18:db:da:dd:33:61:62:a1:b3:f1:40:38:9f:0f:06:
                    bb:3d:3d:e8:d6:1f:d3:2b:d9:2b:44:b2:27:b8:7f:
                    11:6e:be:e5:0a:ce:84:66:e6:8b:e0:02:0a:40:79:
                    3d:e7:89:da:52:6c:ee:e7:7b:ae:78:08:37:20:ea:
                    64:8d:1f:e7:bf:1c:f7:00:d7:66:1f:09:a2:b5:b6:
                    70:b6:d0:60:99:33:a2:9d:6e:00:4e:66:64:17:9d:
                    f8:2d:08:c8:1a:72:c0:31:39:35:98:54:6e:80:5a:
                    63:47:86:8f:0b:b7:62:a1:2b:22:ff:d5:6b:d2:da:
                    70:62:ab:a5:8f:16:cb:f9:23:74:bd:d5:29:93:4c:
                    6c:9a:9e:d1:41:b5:9e:d3:2e:ca:a3:57:d4:c0:b6:
                    37:a1:2c:3b:e5:9e:fe:ff:fa:a5:00:b2:97:65:b8:
                    d8:f8:53:bf:24:b8:f0:1d:5b:60:34:bf:98:ce:cb:
                    49:97:34:4a:93:78:ae:12:3a:22:91:ec:3a:86:79:
                    66:f0:54:7f:15:9e:82:b3:f3:5f:a6:57:f3:40:0d:
                    15:d2:f6:64:28:00:88:08:d7:3e:2e:2a:fa:ed:38:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:03:A3:E8:0E:00:CD:F8:9F:B9:07:E9:33:C2:57:F7:EA:43:DF:97
            X509v3 Authority Key Identifier:
                keyid:66:89:F5:CF:61:18:2A:36:30:7E:EB:7C:01:1D:86:36:B6:34:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7920::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:71:18:0b:be:f3:8d:45:e9:8b:32:3e:03:56:ed:d3:d6:fb:
         14:18:15:a6:67:3f:17:90:36:80:28:b4:0b:4f:e5:1e:80:ed:
         56:65:b3:43:d6:18:5f:8c:a3:d4:b7:88:ed:d7:b4:03:ad:ad:
         df:75:c3:5e:21:d2:30:67:41:88:eb:87:cd:14:c4:14:68:b9:
         e4:d1:90:03:60:a5:9c:4c:b5:1f:93:85:1c:ec:8d:d2:7d:58:
         c6:de:38:00:7a:b2:46:f0:23:72:db:66:91:fe:aa:90:e8:16:
         1c:75:74:a0:63:2d:55:3b:7a:10:74:94:5f:9d:f9:28:e9:3a:
         df:91:78:06:50:03:a7:fe:95:08:02:cc:cf:65:cd:94:96:d6:
         98:bd:9b:46:90:fa:f9:68:8a:a9:62:cb:06:ba:3f:72:88:f5:
         69:7d:4f:78:5d:68:d5:a3:ec:9c:c9:75:d3:90:68:d6:f2:fd:
         9b:4f:33:30:e8:81:be:69:69:1e:9e:e9:2d:c2:de:55:5e:60:
         b6:f6:e5:92:80:b8:8d:a1:58:a4:a4:63:c2:90:48:98:14:41:
         68:62:2d:c2:72:a4:c8:f8:41:a6:a6:ff:26:e5:5a:9c:73:22:
         9c:d8:de:8e:a2:99:d7:52:6b:00:75:0c:46:04:ff:90:99:4f:
         5a:de:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:20 2024 by rpki-client on console-ams.rpki-client.org