Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a383030303a3a2f33342d3334203d3e20323733363539.roa
File:                     323830343a386134383a383030303a3a2f33342d3334203d3e20323733363539.roa (raw, json)
Hash identifier:          3FFD6RC2RTQRmKhwbgMSjWW6VdcV85SIJy8jcTX9cKs=
Subject key identifier:   52:AC:C8:63:C0:93:4D:7F:88:AD:86:A8:7C:5C:0E:A0:21:31:09:DC
Certificate issuer:       /CN=3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D
Certificate serial:       3291245108F0A777559E685A004AA74D52DE22A0
Authority key identifier: 3A:22:EC:79:4C:37:86:DA:E5:FD:E0:9E:C3:7F:1A:CE:71:8B:1A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a383030303a3a2f33342d3334203d3e20323733363539.roa
Signing time:             Thu 04 Apr 2024 03:55:52 +0000
ROA not before:           Thu 04 Apr 2024 03:50:52 +0000
ROA not after:            Thu 03 Apr 2025 03:55:52 +0000
asID:                     273659
IP address blocks:        2804:8a48:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.crl
                          rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:24:51:08:f0:a7:77:55:9e:68:5a:00:4a:a7:4d:52:de:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D
        Validity
            Not Before: Apr  4 03:50:52 2024 GMT
            Not After : Apr  3 03:55:52 2025 GMT
        Subject: CN=52ACC863C0934D7F88AD86A87C5C0EA0213109DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:3e:45:fb:22:b4:03:5a:41:2c:c2:69:d9:
                    dc:4e:7e:c1:f4:5e:e4:91:0e:51:be:84:5a:be:01:
                    0a:ff:8d:58:2f:80:bd:d7:21:9d:f2:5c:12:66:41:
                    f4:ea:0e:14:9b:cc:9a:38:6b:bf:25:13:32:8b:ef:
                    69:26:66:39:4e:0c:06:fe:9a:c5:35:4e:f5:3e:8a:
                    0c:f8:d1:44:73:35:01:ea:e5:1e:65:0b:2f:64:52:
                    68:c1:1e:13:1d:a0:b4:5b:f2:df:c3:d9:cf:ac:1d:
                    ae:b4:4c:d3:69:17:3b:8f:56:6a:c6:6d:51:57:83:
                    cd:ec:ae:fe:36:a7:bd:44:20:16:4e:a8:23:48:42:
                    62:cd:62:83:80:c7:7f:04:92:59:fa:01:0e:2e:c7:
                    13:4b:36:38:4b:82:72:e3:c9:b1:e8:1f:1d:48:3b:
                    c0:02:79:2a:11:6d:d1:d3:17:80:94:9b:57:87:a5:
                    99:4d:b4:b0:de:8f:03:f0:e7:78:c8:d5:12:fc:19:
                    eb:84:fd:95:d7:4b:c1:68:34:64:01:93:2a:5e:ed:
                    e5:e1:17:be:8b:bf:23:73:14:a9:7e:74:ff:d7:44:
                    2a:a5:d1:2e:e9:c6:fa:14:65:5f:00:d1:f7:69:7a:
                    63:77:d6:6d:06:6e:a4:7a:1b:d1:fd:28:3c:37:e0:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AC:C8:63:C0:93:4D:7F:88:AD:86:A8:7C:5C:0E:A0:21:31:09:DC
            X509v3 Authority Key Identifier:
                keyid:3A:22:EC:79:4C:37:86:DA:E5:FD:E0:9E:C3:7F:1A:CE:71:8B:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/323830343a386134383a383030303a3a2f33342d3334203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:83:e9:b5:9f:af:26:06:9b:37:53:b1:ed:f3:3b:21:ec:3a:
         6f:91:d6:c1:f9:d3:bd:6f:5a:3b:d0:a5:5f:27:bd:ba:d1:77:
         d7:54:5d:08:21:0c:54:a1:78:1a:76:eb:1f:54:c7:1e:6d:5c:
         4a:87:42:68:0a:b7:8a:6d:86:d4:d0:41:f5:36:f9:b0:d4:05:
         24:f8:5f:27:e7:ff:fa:8d:81:b9:e4:29:93:cb:61:32:79:0e:
         25:8d:16:47:1c:f7:41:5f:ef:7e:3a:63:f8:ce:7a:63:3f:b0:
         26:5b:c7:e7:b4:27:88:7d:37:28:03:f1:30:9e:e7:b5:33:f2:
         da:eb:2c:d0:97:0c:d3:fa:0d:a2:7d:81:da:53:fe:8a:6e:89:
         4f:39:d0:21:46:f3:1d:99:33:d9:1b:c6:37:15:42:34:03:f5:
         e2:e4:a7:c4:a2:dd:bc:f2:5d:8f:19:6b:90:99:e8:a7:b9:5b:
         99:59:e5:0d:a7:ea:1c:21:6a:cf:bd:c3:79:cc:b7:ef:8b:a3:
         36:b8:68:21:2e:f8:7c:d3:b2:c8:76:c4:b0:bf:11:de:9a:9f:
         aa:df:48:6a:16:98:c3:3d:b2:15:26:80:08:be:0e:5e:c6:68:
         7c:9f:d5:7b:95:dd:09:f7:15:81:38:47:a5:79:da:64:f3:a4:
         72:7c:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org