Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a3a2f33322d3332203d3e203533303437.roa
File:                     323830343a3666303a3a2f33322d3332203d3e203533303437.roa (raw, json)
Hash identifier:          +qN3ivPl3Fiwabk70TvNB5wCP4avrlByX0pV3bObpOI=
Subject key identifier:   78:62:C7:44:DF:31:B8:20:E4:D0:8F:B5:AC:26:2E:20:D0:7A:D1:65
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       769A6C6307DB4C716BD031B86CBC0629D191EA68
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a3a2f33322d3332203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:02 +0000
ROA not before:           Thu 04 Apr 2024 17:34:02 +0000
ROA not after:            Thu 03 Apr 2025 17:39:02 +0000
asID:                     53047
IP address blocks:        2804:6f0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9a:6c:63:07:db:4c:71:6b:d0:31:b8:6c:bc:06:29:d1:91:ea:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:02 2024 GMT
            Not After : Apr  3 17:39:02 2025 GMT
        Subject: CN=7862C744DF31B820E4D08FB5AC262E20D07AD165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:38:d2:4c:ba:56:d1:5f:55:0a:d5:62:7a:
                    fb:b2:f1:ab:8d:ba:eb:86:1b:51:3a:0d:6c:2f:85:
                    de:ec:1e:ff:7f:4a:84:4b:c7:5a:5c:f2:eb:26:e5:
                    ab:5a:67:53:3f:38:fc:77:aa:e1:ec:7b:e0:a0:04:
                    35:db:98:1f:0a:01:2f:32:ba:94:93:10:76:52:96:
                    6e:14:52:f4:aa:5e:38:cf:94:01:df:43:d7:78:45:
                    23:9b:0f:d2:16:c8:42:a9:74:e2:60:a7:aa:5e:10:
                    3f:35:1b:c9:13:c6:47:be:94:50:56:89:94:27:bd:
                    36:6e:3b:99:52:d2:8c:01:18:f8:aa:92:79:da:c6:
                    a7:ca:2a:e0:88:49:50:73:94:f1:a6:a8:a9:06:83:
                    81:cd:c2:9f:12:f9:61:5a:19:45:f3:b8:65:1c:90:
                    84:ae:d3:47:5f:51:a9:ca:c8:fc:b2:43:3c:19:3b:
                    75:11:64:c3:6c:aa:78:98:74:e2:f8:ba:75:ff:ad:
                    50:fb:1e:63:89:a4:b9:83:a4:29:7a:38:57:df:8b:
                    b2:e7:44:55:b4:ad:f7:64:9e:28:be:01:13:8b:1d:
                    9c:16:97:9b:6e:15:7f:a5:04:e5:2d:e7:f3:f6:47:
                    e6:bb:0d:69:7f:8d:26:75:53:d5:b2:f4:89:f8:f4:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:62:C7:44:DF:31:B8:20:E4:D0:8F:B5:AC:26:2E:20:D0:7A:D1:65
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a3a2f33322d3332203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:12:ac:34:26:fb:7b:db:9c:fd:3f:e3:b2:fb:3c:68:cf:e7:
         0d:44:aa:a5:41:6a:a5:74:90:63:1a:6b:18:d1:4f:c2:ee:ce:
         8a:31:d9:16:a7:43:44:9e:f5:6d:31:31:0d:1f:ba:30:84:78:
         1f:78:15:18:48:84:52:bb:e2:d0:27:8b:d2:db:ea:9a:08:7b:
         fe:d4:94:8d:93:40:ec:44:73:7e:93:b3:b6:4a:66:24:c9:75:
         93:1d:7d:05:15:37:79:0c:de:5e:c0:4c:d1:93:3c:b4:75:4a:
         99:d6:a3:15:4b:de:d0:0d:19:d5:19:7a:02:a1:43:7a:68:1e:
         8a:bd:1b:44:d1:42:7e:8f:64:15:85:14:8f:77:58:af:ae:2f:
         51:e3:fc:6c:20:3d:22:a9:64:69:5a:95:fa:ab:55:6d:a9:e2:
         aa:81:ea:0e:45:66:54:9b:0e:2c:02:20:74:8d:72:71:21:43:
         f8:09:d7:84:94:34:d8:c8:34:86:11:a1:eb:7d:60:88:a1:e0:
         4b:86:a8:42:a5:8b:28:dc:a3:d2:63:ea:52:aa:ce:b9:52:34:
         00:c7:5e:b7:22:56:75:de:84:f6:c1:bd:f6:e8:47:e5:84:62:
         2d:82:bf:38:a6:43:b1:62:48:d7:8a:3b:37:b3:f4:48:ed:a6:
         61:35:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org