Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa
File:                     323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa (raw, json)
Hash identifier:          wHrl1aBybFczKBlHItZjttqPrzgo383fYaelUVNo7DA=
Subject key identifier:   0D:CA:34:56:0A:19:77:36:DA:30:E8:6B:2F:CB:DB:2A:6E:59:AE:BB
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       3841582AA42D74CB6F986AB17D71F030CCF66AE6
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:03 +0000
ROA not before:           Thu 04 Apr 2024 17:34:03 +0000
ROA not after:            Thu 03 Apr 2025 17:39:03 +0000
asID:                     53047
IP address blocks:        2804:6f0:ff00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:41:58:2a:a4:2d:74:cb:6f:98:6a:b1:7d:71:f0:30:cc:f6:6a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:03 2024 GMT
            Not After : Apr  3 17:39:03 2025 GMT
        Subject: CN=0DCA34560A197736DA30E86B2FCBDB2A6E59AEBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:6f:94:b8:e3:55:ac:48:24:d6:2f:64:09:
                    1b:25:ef:a3:6b:93:70:d2:5c:3a:7b:36:59:53:c0:
                    c9:69:a0:9d:47:98:f1:d9:2f:2e:f8:9b:7c:0a:bb:
                    7e:74:96:e3:41:5e:68:fd:f7:1b:e6:d3:be:fd:6b:
                    d4:ab:37:f4:27:0c:60:2d:02:4e:0d:dc:99:70:e9:
                    7b:9d:2c:72:e3:ab:0a:09:0f:61:82:e1:23:20:7b:
                    5c:33:9c:01:a9:d0:07:4e:96:53:29:c8:34:d5:f1:
                    34:39:5e:d9:9d:38:44:e8:f1:3d:13:af:e3:69:25:
                    f8:60:fd:90:0b:40:7c:3b:1d:58:11:13:31:68:c8:
                    01:0d:8a:9b:1d:ea:d8:21:fe:50:d3:8a:37:13:d1:
                    47:af:a8:73:d5:73:06:53:dc:1f:ff:da:ee:6c:9f:
                    c3:ca:1b:c1:d5:61:e0:a6:40:7c:1e:64:09:ac:ad:
                    ea:da:d4:36:73:c9:89:43:ab:15:4e:4e:f8:e4:f2:
                    dc:28:79:f0:87:6b:3c:48:72:cb:ed:37:f0:ab:d1:
                    ca:63:ae:6e:be:86:79:2b:8c:91:4e:a2:8c:a8:fa:
                    56:f4:8c:15:59:cb:f0:33:31:19:16:42:2a:36:41:
                    82:94:29:84:42:e3:ff:73:92:25:e7:64:58:75:ff:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:34:56:0A:19:77:36:DA:30:E8:6B:2F:CB:DB:2A:6E:59:AE:BB
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:a9:bc:e8:09:82:17:29:b7:ed:45:6d:c9:ef:66:14:4e:
         55:9c:ea:47:6e:f5:80:77:9b:82:e1:bb:21:ed:96:8b:c8:cd:
         3f:50:50:2d:c3:72:06:ea:20:b9:6b:c3:4c:b4:c6:23:8e:65:
         37:7f:f4:e1:88:07:6d:c7:ad:4b:5a:d9:ba:2a:8b:6a:29:a7:
         05:dc:4d:a2:6b:3c:ae:08:0f:3d:a9:50:92:b4:4a:47:de:ab:
         29:15:36:fc:f6:7f:b5:82:cb:6a:5f:f7:c6:93:54:f3:c8:5c:
         82:28:ee:ca:b7:f4:cc:12:e6:36:3e:a0:0e:d6:58:cf:4f:1e:
         e4:5a:34:3c:32:8b:14:f6:b4:3e:3d:9b:09:76:3e:cb:8a:8e:
         a9:0b:54:9f:72:e7:af:31:e6:22:8f:9d:40:b6:b4:59:a7:36:
         27:c7:d0:96:d8:e6:74:c7:d1:3b:26:68:be:26:e8:2e:f3:80:
         e4:07:40:8e:64:d0:18:f2:c0:3a:df:3b:13:ac:1a:d7:f8:74:
         25:51:dc:d9:c3:c2:d1:2d:6d:28:ab:b4:65:9c:7b:d5:26:5a:
         0c:df:fb:6e:7f:9b:97:aa:a9:44:a3:a5:6e:d0:48:53:b8:00:
         ad:3b:a7:28:2c:63:50:0d:39:85:a2:e4:90:b0:44:ce:2f:2a:
         45:5e:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org