Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a633130303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a633130303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          9xub/zbHK+O+vKEELfWeklN3Ca49WXOkTBw2rI6+tqA=
Subject key identifier:   34:6F:F7:B0:1E:7B:B3:EE:9D:76:32:A8:30:5A:69:DA:F7:03:77:FD
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       2046DC7EA50D7533E84BAE0CCC702B0905481EE1
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a633130303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:03 +0000
ROA not before:           Thu 04 Apr 2024 17:34:03 +0000
ROA not after:            Thu 03 Apr 2025 17:39:03 +0000
asID:                     53047
IP address blocks:        2804:6f0:c100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:46:dc:7e:a5:0d:75:33:e8:4b:ae:0c:cc:70:2b:09:05:48:1e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:03 2024 GMT
            Not After : Apr  3 17:39:03 2025 GMT
        Subject: CN=346FF7B01E7BB3EE9D7632A8305A69DAF70377FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:de:54:1f:c9:f8:ee:b6:f3:55:d4:67:38:
                    c6:8d:f4:a1:77:f4:fc:69:c8:71:9e:b4:4c:75:b4:
                    dc:55:ff:2c:c9:96:b2:86:56:ae:c5:33:f6:9d:43:
                    fb:28:77:75:bb:d7:19:fb:b4:3e:c0:b4:f1:b1:cb:
                    02:21:69:37:c0:a3:26:6e:31:66:20:9f:e4:a5:a8:
                    cc:8d:74:40:1d:21:2b:39:96:9d:f5:4f:c3:04:67:
                    2c:09:81:b3:18:65:06:99:c8:b6:f4:93:28:2b:fe:
                    22:f9:c3:c6:ca:26:68:8d:f4:25:64:7d:3b:68:e4:
                    d1:1d:3b:ac:2a:9e:05:5a:f4:e2:79:e8:d9:05:65:
                    7e:1a:ed:73:03:3c:f7:e7:3d:81:a5:b1:f3:38:12:
                    99:7a:82:63:63:fd:0c:73:4a:fe:86:93:a2:f2:68:
                    74:9b:27:ba:c3:94:bb:14:d3:62:dc:c7:d0:39:9f:
                    88:a2:f5:0a:6e:84:55:31:c2:f5:f8:46:93:0e:d9:
                    15:62:a1:ae:57:56:97:8f:86:ba:35:ff:cf:7a:a9:
                    9b:b1:a5:97:20:25:4b:77:77:9f:e0:96:81:70:4f:
                    b0:11:40:f5:14:8b:91:58:ef:9a:5f:6e:8d:28:f6:
                    40:b9:d7:d5:00:4d:b4:17:b7:dc:55:76:25:9c:2b:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:F7:B0:1E:7B:B3:EE:9D:76:32:A8:30:5A:69:DA:F7:03:77:FD
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a633130303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:07:70:e3:48:21:1d:91:bb:b2:90:d7:35:ac:6e:34:f5:
         2d:64:5d:13:07:28:08:ba:8c:2f:7a:d8:b6:ed:7a:4e:ca:97:
         2b:e4:69:97:71:54:4b:a3:29:00:f6:01:d6:ef:f5:0c:78:64:
         f8:ac:4f:5a:e2:94:26:d9:13:9b:e9:9a:c7:7f:37:97:51:c8:
         38:4b:28:a3:2c:1b:af:fd:c7:14:cb:85:18:78:8f:b9:f6:64:
         30:4e:19:61:db:d6:ad:9c:e2:47:eb:f2:fd:d5:f9:37:3f:95:
         59:19:1a:9d:e9:af:98:aa:ae:f7:9d:a0:7c:e8:4f:72:45:63:
         32:ee:8c:81:fc:59:ef:5b:ad:56:a6:04:6a:aa:cd:1f:87:7e:
         ac:36:da:7c:b0:65:30:c7:c7:99:23:f7:46:33:2b:41:3a:a5:
         cd:ad:7b:cf:55:0e:1c:37:3b:8f:b1:98:ce:54:f5:8f:03:c2:
         8a:8d:de:4f:ad:5a:25:a8:41:4c:45:85:07:f3:53:7a:07:e5:
         72:bf:f0:08:55:c9:63:1f:bc:50:3b:34:51:6a:5c:94:ef:8c:
         e7:04:03:bf:78:d1:cd:18:eb:a1:b8:a1:5d:2c:2b:d1:7e:07:
         89:98:41:26:c4:f6:a3:54:3d:c5:ae:b0:6f:58:89:89:97:af:
         82:e9:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org