Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a3a2f33322d3332203d3e20323638313439.roa
File:                     323830343a353863383a3a2f33322d3332203d3e20323638313439.roa (raw, json)
Hash identifier:          LOPMlLxLrimUGniJ6PcIGdC9fbYUE5jlUa0E67lF0i0=
Subject key identifier:   A9:2F:23:D8:D0:E6:41:25:29:AE:FE:96:B5:FC:E8:D3:3D:B9:12:8B
Certificate issuer:       /CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
Certificate serial:       721B3E73F36651FF5516677E15187C8B3BF1FF1E
Authority key identifier: 62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a3a2f33322d3332203d3e20323638313439.roa
Signing time:             Wed 01 May 2024 00:12:40 +0000
ROA not before:           Wed 01 May 2024 00:07:40 +0000
ROA not after:            Wed 30 Apr 2025 00:12:40 +0000
asID:                     268149
IP address blocks:        2804:58c8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1b:3e:73:f3:66:51:ff:55:16:67:7e:15:18:7c:8b:3b:f1:ff:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
        Validity
            Not Before: May  1 00:07:40 2024 GMT
            Not After : Apr 30 00:12:40 2025 GMT
        Subject: CN=A92F23D8D0E6412529AEFE96B5FCE8D33DB9128B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:43:1c:b1:00:fe:4d:42:ce:01:f4:78:f0:
                    b9:ab:a7:4c:2c:24:ec:a4:15:22:de:81:5c:91:e4:
                    c2:ea:43:65:48:bd:a5:57:27:6e:e7:8a:8f:9a:74:
                    e4:9f:00:c7:93:9d:ed:0b:fc:bb:7b:2f:17:d7:09:
                    c4:c6:3b:57:89:18:de:8b:14:41:3b:23:62:42:09:
                    fc:53:29:a7:0a:b5:46:c4:9e:0e:09:92:e3:3d:86:
                    4a:20:83:1f:4b:35:b9:69:ad:4f:c1:37:c3:8c:7a:
                    d7:06:79:ca:a2:d1:a6:05:ab:a6:57:da:ed:af:96:
                    2d:20:42:59:d7:19:e5:0a:95:2c:b1:ec:b0:ad:7d:
                    aa:76:bd:5c:05:ad:ca:b1:85:b0:b0:a6:3d:41:7d:
                    5d:47:7b:5d:0f:6c:8d:85:4d:ed:c0:6a:42:ac:ce:
                    90:2d:4b:47:5d:5a:2e:42:c2:b8:ba:e9:46:7f:14:
                    81:08:58:e2:63:2d:02:e8:04:ad:e0:74:e7:3d:4c:
                    5a:ad:b5:fe:71:f0:68:63:55:21:13:9d:69:bd:1d:
                    39:47:fd:4d:a1:64:d3:83:50:11:6d:7a:e2:14:05:
                    12:a1:43:fa:f1:56:d6:65:0a:61:25:dd:c3:eb:f0:
                    29:79:13:5f:d3:3f:9d:96:ad:83:9b:1e:f1:ed:87:
                    e1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2F:23:D8:D0:E6:41:25:29:AE:FE:96:B5:FC:E8:D3:3D:B9:12:8B
            X509v3 Authority Key Identifier:
                keyid:62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a3a2f33322d3332203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:0b:c7:96:4e:70:7e:3b:40:05:13:f8:66:03:ca:1f:5c:
         e6:87:2d:79:03:78:62:e6:d0:1e:c6:03:54:55:e4:74:41:ae:
         53:7d:87:eb:11:1a:20:e1:1c:5a:05:2d:e3:ed:95:5c:ea:f7:
         69:14:31:4f:93:33:e1:b1:90:9a:b6:27:e8:8c:63:b3:cf:3e:
         ad:ba:2f:cf:58:80:82:d1:83:4c:0f:ef:1b:75:0a:b2:a8:68:
         14:42:08:57:72:6a:dd:a9:93:c1:62:b6:20:ff:9b:fc:8b:a5:
         11:f5:d2:61:80:e8:1b:56:87:4b:01:fe:4d:fc:ea:41:00:10:
         c5:d6:83:53:11:17:17:13:e2:a2:a1:65:61:a8:37:bc:45:be:
         0c:13:30:73:5e:43:0f:d9:68:8e:37:ca:d9:13:e4:d8:1b:72:
         f4:d5:cc:a4:6a:45:39:5e:5f:d4:b0:c5:43:89:73:36:a9:40:
         0a:ab:de:00:f9:99:b2:d7:6e:9e:d6:51:38:0b:69:d6:76:35:
         8d:45:74:95:c2:aa:df:75:fe:ec:b6:da:b0:1a:81:65:ce:87:
         81:ff:f6:4b:2c:d3:3a:82:61:d4:44:08:dd:fc:c7:6b:6a:21:
         bc:30:24:78:e6:ea:64:b7:39:c9:3e:11:63:43:c2:80:72:25:
         b4:9b:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:09 2024 by rpki-client on console-ams.rpki-client.org