Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d3438203d3e20323633313033.roa
File:                     323830343a346332343a3a2f33322d3438203d3e20323633313033.roa (raw, json)
Hash identifier:          SlpLQBLbr4eAH2eSW7lbhywUphealCL/ZzftIlyVe+4=
Subject key identifier:   E4:04:1A:23:17:65:B3:1F:AA:37:0D:50:EE:A3:E6:6F:63:E6:2A:64
Certificate issuer:       /CN=00645880B1F7617180805DD76753D47FE99FB546
Certificate serial:       2039060AD02E92246AC91F724AD6C4017E712B2E
Authority key identifier: 00:64:58:80:B1:F7:61:71:80:80:5D:D7:67:53:D4:7F:E9:9F:B5:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00645880B1F7617180805DD76753D47FE99FB546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d3438203d3e20323633313033.roa
Signing time:             Thu 09 May 2024 13:25:18 +0000
ROA not before:           Thu 09 May 2024 13:20:18 +0000
ROA not after:            Thu 08 May 2025 13:25:18 +0000
asID:                     263103
IP address blocks:        2804:4c24::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/00645880B1F7617180805DD76753D47FE99FB546.crl
                          rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/00645880B1F7617180805DD76753D47FE99FB546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00645880B1F7617180805DD76753D47FE99FB546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:39:06:0a:d0:2e:92:24:6a:c9:1f:72:4a:d6:c4:01:7e:71:2b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00645880B1F7617180805DD76753D47FE99FB546
        Validity
            Not Before: May  9 13:20:18 2024 GMT
            Not After : May  8 13:25:18 2025 GMT
        Subject: CN=E4041A231765B31FAA370D50EEA3E66F63E62A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:f9:54:0c:c9:f8:42:9e:95:9d:e9:92:73:
                    b7:c8:e8:91:a8:71:d3:3d:95:af:39:9f:21:35:12:
                    93:60:6c:48:3e:35:41:64:a2:70:c3:0a:1e:8b:49:
                    4d:9c:75:3c:fd:3f:4d:0f:95:05:ed:ff:77:dd:c6:
                    03:a4:69:09:59:4e:3f:eb:7b:21:e0:d4:4c:60:a7:
                    13:d4:46:79:cf:9d:87:eb:02:84:c1:50:83:0d:42:
                    47:29:d8:5c:58:88:fa:52:f6:df:2e:11:ae:af:b6:
                    09:c6:42:a8:b3:95:fe:29:51:32:97:a0:ca:bc:80:
                    91:ff:56:a7:4a:79:bd:b5:d8:a8:24:c0:fe:33:78:
                    42:c6:0e:d5:b3:7c:8f:02:54:03:98:80:49:27:9a:
                    fd:07:fc:34:8d:ec:e6:35:85:5d:c1:8b:b8:d4:4d:
                    a8:e1:cf:ae:90:72:fb:1c:1c:b6:7d:09:d6:b4:b1:
                    fb:0a:27:ff:fe:cd:26:de:a5:a6:8d:bd:ad:2a:15:
                    2f:b5:8f:97:c9:e2:e5:b9:28:81:e0:53:fd:74:25:
                    54:45:f8:a4:79:d6:92:23:d6:1f:1f:71:14:69:bb:
                    97:b4:28:2d:4e:86:f9:02:8b:39:98:0a:3f:21:21:
                    6a:ce:3b:f8:56:f8:7b:7c:de:4c:0d:27:fb:4c:d2:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:04:1A:23:17:65:B3:1F:AA:37:0D:50:EE:A3:E6:6F:63:E6:2A:64
            X509v3 Authority Key Identifier:
                keyid:00:64:58:80:B1:F7:61:71:80:80:5D:D7:67:53:D4:7F:E9:9F:B5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/00645880B1F7617180805DD76753D47FE99FB546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00645880B1F7617180805DD76753D47FE99FB546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d3438203d3e20323633313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:91:dc:7f:6a:dc:79:bc:3d:96:5b:25:54:bb:c4:f1:27:9f:
         54:a2:09:6a:66:ee:ab:cf:b0:39:52:95:be:87:d4:ee:51:d3:
         89:cf:eb:ec:4d:0f:fd:bc:6c:e2:72:e8:3b:51:3a:1e:9b:fb:
         8c:de:18:6b:db:0c:e5:92:a6:f8:43:d7:87:37:2b:26:ef:e2:
         56:aa:3a:f5:7c:96:e5:34:e4:11:67:a5:d7:26:8f:a5:42:e3:
         0d:40:65:83:b4:42:e7:ec:a7:0c:ff:c2:14:69:87:e8:f0:31:
         43:cf:9e:01:70:04:a3:c2:9d:59:f7:b8:f3:9f:98:6f:48:3c:
         2b:48:9f:03:0c:b7:c8:7b:3e:d8:3c:ac:c6:17:f8:dc:85:47:
         15:55:3e:ad:01:8c:ee:bc:fd:93:78:f0:7c:32:e7:4b:c5:89:
         ee:9d:51:06:39:e2:3e:35:93:c1:32:46:f6:01:77:0f:b2:93:
         b9:a9:16:40:c0:c9:8b:92:44:97:5f:cb:60:9b:48:23:1d:35:
         6d:8d:d1:7d:0c:96:cb:8b:d0:23:19:50:25:87:5e:88:ae:6d:
         27:3d:f7:5a:7d:01:f8:46:28:6b:dc:e9:6a:c1:f9:39:60:4a:
         9a:ec:c9:b9:8e:a7:6b:5b:2a:1b:f8:74:83:f2:1e:64:83:4e:
         3a:86:5e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:51 2024 by rpki-client on console-ams.rpki-client.org