Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/323830343a333432343a3a2f33322d313238203d3e20323635343338.roa
File:                     323830343a333432343a3a2f33322d313238203d3e20323635343338.roa (raw, json)
Hash identifier:          pMuxTuCFmujqNNp1ZSALOAP3EwO1yt6P5/KlJT7nUaI=
Subject key identifier:   47:DF:FE:04:C1:7E:12:92:9A:65:76:90:C4:44:92:70:2D:97:29:9C
Certificate issuer:       /CN=6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645
Certificate serial:       4FF75E63BAE10DE0F6B55669DBF4F3343667E6BC
Authority key identifier: 6F:3D:C6:EC:FD:EB:92:A9:96:C6:A9:AD:8D:17:24:E7:15:1E:D6:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/323830343a333432343a3a2f33322d313238203d3e20323635343338.roa
Signing time:             Thu 04 Apr 2024 00:45:35 +0000
ROA not before:           Thu 04 Apr 2024 00:40:35 +0000
ROA not after:            Thu 03 Apr 2025 00:45:35 +0000
asID:                     265438
IP address blocks:        2804:3424::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.crl
                          rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f7:5e:63:ba:e1:0d:e0:f6:b5:56:69:db:f4:f3:34:36:67:e6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645
        Validity
            Not Before: Apr  4 00:40:35 2024 GMT
            Not After : Apr  3 00:45:35 2025 GMT
        Subject: CN=47DFFE04C17E12929A657690C44492702D97299C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:61:d3:d1:3f:a2:b9:92:2a:be:5a:a5:1f:85:
                    f5:86:99:11:cb:bc:a7:59:b4:9b:93:14:24:f2:4a:
                    9e:bd:3c:1d:83:3d:2b:91:97:cf:40:78:c1:5a:ed:
                    2b:50:ee:4b:a6:38:24:14:3e:8d:c3:6b:64:34:1a:
                    e9:80:64:51:1f:7b:5d:6f:27:08:c7:e1:12:e4:f8:
                    6b:4e:77:f0:c1:2d:d8:70:a3:eb:98:57:86:2b:ee:
                    0b:b8:9e:a2:64:b7:c3:43:52:f9:6e:6b:f6:05:e2:
                    e5:98:90:8f:3a:1c:b1:1d:b7:8f:50:7e:27:0c:b9:
                    da:be:91:d2:b9:23:8b:f7:fa:d5:2a:dd:bf:b4:2d:
                    b8:d2:f6:16:3c:a4:fe:07:b9:a2:32:37:56:b4:bd:
                    36:18:9d:46:8f:15:68:5f:27:cf:7a:c3:1c:57:e9:
                    28:f3:96:cb:ed:a6:c2:58:6e:c7:fe:f8:45:13:f8:
                    c4:2d:b1:b3:d7:96:ec:4c:61:fa:7c:49:17:3d:1c:
                    b8:03:26:0d:f3:bd:d6:37:66:5d:50:97:c3:67:2a:
                    77:27:3a:78:4e:01:ff:9c:b7:0c:05:e0:84:92:d6:
                    8d:38:84:69:e5:5e:41:9d:00:63:35:03:f7:8d:08:
                    8c:c7:df:a1:a9:8e:e4:5a:d2:43:af:f7:db:52:50:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DF:FE:04:C1:7E:12:92:9A:65:76:90:C4:44:92:70:2D:97:29:9C
            X509v3 Authority Key Identifier:
                keyid:6F:3D:C6:EC:FD:EB:92:A9:96:C6:A9:AD:8D:17:24:E7:15:1E:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/323830343a333432343a3a2f33322d313238203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3424::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:14:54:e9:3f:f2:57:66:40:24:ea:62:f2:66:3e:9d:4a:
         e5:b8:fa:c9:91:a4:ae:5c:f4:d1:35:3c:44:7c:13:94:2f:15:
         67:11:56:b5:5f:a2:2a:d3:4b:f1:2f:da:35:d8:56:b3:55:5f:
         26:56:6a:17:3d:5e:ce:e4:04:60:48:32:9e:5e:1a:38:a2:86:
         26:b1:0b:6a:00:61:82:ec:0c:8b:77:c7:54:61:7c:0c:4e:d3:
         91:dd:db:a4:e8:c4:46:26:76:7b:7a:94:3c:6c:c2:de:93:0f:
         cb:b7:fc:60:40:18:a3:e5:3c:fe:db:1c:ca:7c:fc:8d:7d:79:
         30:b2:b5:85:1a:4c:64:96:1d:10:0a:f1:6a:89:99:ab:8d:43:
         2c:b2:73:67:6b:11:9f:ba:48:36:6f:56:8f:44:91:4f:cb:b3:
         d4:67:5e:87:9e:b6:c0:f0:d8:61:0b:eb:e9:f3:76:b4:1e:56:
         fc:7f:e7:b1:80:f5:76:e5:f3:83:ca:83:a9:04:34:6a:09:7b:
         f8:22:89:a6:e4:a8:33:f5:a8:dd:c6:ec:23:1a:83:dc:b2:73:
         31:11:77:e7:48:b1:74:0c:5d:2c:71:e8:72:b0:90:94:6c:49:
         c9:14:b0:8a:0d:bd:59:89:2a:4e:11:f0:ba:6c:dc:dd:40:54:
         d7:03:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org