Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a383a3a2f34352d3435203d3e20323638313439.roa
File:                     323830343a353863383a383a3a2f34352d3435203d3e20323638313439.roa (raw, json)
Hash identifier:          UgLbDCwq1RmMFpl96dxmcchZvUUQ50/U0e3HT9Gs6FY=
Subject key identifier:   9C:2A:95:A0:A2:FE:3C:21:B8:BC:B1:85:C5:67:30:F0:BE:5C:77:B9
Certificate issuer:       /CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
Certificate serial:       12D9A01B559EE557184D996F1B342AB4F4F181AA
Authority key identifier: 62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a383a3a2f34352d3435203d3e20323638313439.roa
Signing time:             Fri 30 Aug 2024 13:52:04 +0000
ROA not before:           Fri 30 Aug 2024 13:47:04 +0000
ROA not after:            Fri 29 Aug 2025 13:52:04 +0000
asID:                     268149
IP address blocks:        2804:58c8:8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d9:a0:1b:55:9e:e5:57:18:4d:99:6f:1b:34:2a:b4:f4:f1:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
        Validity
            Not Before: Aug 30 13:47:04 2024 GMT
            Not After : Aug 29 13:52:04 2025 GMT
        Subject: CN=9C2A95A0A2FE3C21B8BCB185C56730F0BE5C77B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:a5:64:07:fb:65:b1:49:f4:13:5e:c1:ce:
                    c2:81:20:f8:25:da:d8:a5:26:00:5c:2a:e6:ef:a2:
                    0f:d0:ad:99:e3:0f:fb:7d:ba:a5:21:8a:63:4a:96:
                    29:08:a9:e7:3d:b0:e5:d3:c7:23:e6:0f:b9:c0:64:
                    1d:62:1e:7e:bc:a7:45:ef:b4:e9:29:85:67:49:93:
                    df:29:98:cf:7a:d6:ef:43:9b:3e:e1:f7:ae:b6:0d:
                    d4:2d:35:df:05:bc:08:01:9b:82:dd:b1:76:ae:32:
                    5e:54:53:08:26:d7:94:5a:87:a8:70:1f:15:93:b2:
                    24:62:4b:8f:19:33:f9:dc:ae:fb:1b:cd:16:a3:cf:
                    64:6a:8e:ca:92:70:c6:1a:3c:db:54:0b:c6:e7:7c:
                    85:72:47:18:21:2d:a7:c6:31:fa:6c:0a:1a:f5:51:
                    0e:1f:a9:bb:b0:b5:23:55:ee:0c:d9:2e:e9:a1:34:
                    63:a1:d4:71:29:9b:0f:47:5f:ea:ad:be:83:a7:60:
                    d6:23:c0:c7:55:c7:9b:05:43:46:cc:36:b4:64:4b:
                    4f:71:e6:87:e9:18:d6:a8:f3:89:db:cb:26:bc:e4:
                    47:f6:8d:1e:86:07:44:0d:15:ad:d9:47:c2:17:86:
                    dc:08:85:f7:19:d3:05:b7:f2:69:39:a6:6e:37:17:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2A:95:A0:A2:FE:3C:21:B8:BC:B1:85:C5:67:30:F0:BE:5C:77:B9
            X509v3 Authority Key Identifier:
                keyid:62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a383a3a2f34352d3435203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58c8:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         41:5e:85:0e:b6:dd:dc:40:f6:01:20:b4:91:82:4a:1b:ed:a1:
         49:9c:27:cb:f2:9c:e6:e9:e9:29:f1:50:42:3d:06:eb:3f:c0:
         2b:e9:2f:e3:e9:ba:99:72:81:b1:a7:b1:a2:d9:6d:7c:80:c2:
         16:95:5d:87:aa:57:48:ee:69:90:e7:a6:66:69:9b:c0:49:31:
         b3:8f:a1:2b:3c:01:c7:e3:84:9c:d8:fe:da:27:4c:47:69:c0:
         f4:53:8c:5a:ef:98:91:1a:e2:44:7b:74:34:c3:5a:f9:bc:f3:
         c8:60:bf:8c:e4:dd:b0:a4:7d:04:bc:9d:4f:c5:9b:dc:5b:89:
         d9:91:07:6f:c0:fc:b3:f9:2c:53:de:24:3e:dd:6c:ea:08:a3:
         22:a3:17:04:b0:41:22:6c:88:31:3e:03:3c:d1:2c:57:ce:fc:
         9b:fc:67:19:81:5f:3f:74:21:a4:93:2e:59:9d:d2:38:28:9e:
         d3:69:e7:61:3f:66:ea:6e:40:b1:8a:55:7b:57:81:8f:59:ca:
         56:c8:6e:45:fd:14:ad:6d:e5:c2:3f:25:bd:13:3a:6a:4f:80:
         9d:27:c0:f2:0f:44:a8:cb:97:ea:0f:34:c5:e9:e7:fd:b9:c2:
         77:36:a9:4d:9d:2b:3b:4e:af:ef:27:99:40:47:ae:fe:88:ad:
         e8:b0:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:55 2024 by rpki-client on console-fra.rpki-client.org