Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/323830343a373632303a3a2f33322d3430203d3e20323731303931.roa
File:                     323830343a373632303a3a2f33322d3430203d3e20323731303931.roa (raw, json)
Hash identifier:          Fxsrd1n9EgkpSptgHvclvmTHw6SwL0gYVxYg1hnHdtU=
Subject key identifier:   DA:C1:F8:C6:C9:6A:15:06:15:8A:03:0E:BF:AC:B3:0F:4E:04:91:68
Certificate issuer:       /CN=DC1AF965E88CC5CC96AB700F97E1089DE1A75A19
Certificate serial:       31D54B9A3E8A3F9A0CC35DBFB03A05977214CE1F
Authority key identifier: DC:1A:F9:65:E8:8C:C5:CC:96:AB:70:0F:97:E1:08:9D:E1:A7:5A:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/323830343a373632303a3a2f33322d3430203d3e20323731303931.roa
Signing time:             Fri 05 Apr 2024 02:47:33 +0000
ROA not before:           Fri 05 Apr 2024 02:42:33 +0000
ROA not after:            Fri 04 Apr 2025 02:47:33 +0000
asID:                     271091
IP address blocks:        2804:7620::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.crl
                          rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d5:4b:9a:3e:8a:3f:9a:0c:c3:5d:bf:b0:3a:05:97:72:14:ce:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1AF965E88CC5CC96AB700F97E1089DE1A75A19
        Validity
            Not Before: Apr  5 02:42:33 2024 GMT
            Not After : Apr  4 02:47:33 2025 GMT
        Subject: CN=DAC1F8C6C96A1506158A030EBFACB30F4E049168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:08:cd:a1:01:14:6d:36:2c:d2:15:2f:6a:
                    b7:20:13:4b:18:6d:b7:71:4b:d9:48:be:e9:a8:79:
                    57:57:a9:19:07:12:08:6e:6c:e8:de:cd:9e:98:63:
                    a6:c5:4c:3c:a4:c5:d5:0a:ba:de:13:e2:1a:74:f3:
                    d3:f9:ad:ae:d1:c5:3e:67:73:89:e5:c2:20:94:2d:
                    72:82:96:2e:56:c4:a8:a5:53:62:91:45:27:9e:a2:
                    0d:f3:4f:09:1d:bd:32:8b:29:53:60:09:f0:b6:b3:
                    26:3d:15:00:31:14:52:e0:cf:13:36:3f:28:fc:24:
                    9c:52:ce:62:b4:ad:7b:cc:88:ef:55:fe:8a:64:4b:
                    bd:8f:09:d1:02:86:dc:dd:31:6b:2a:aa:ef:82:46:
                    91:68:f0:1f:d1:5b:89:5c:5b:06:cc:1a:89:1a:22:
                    ca:2a:4f:56:9c:2f:db:44:fa:f7:0a:d4:5f:ad:8e:
                    75:ff:9e:d4:85:91:7e:90:b6:8b:50:af:54:e0:e5:
                    4b:36:c5:5a:fd:50:8e:c2:32:3d:07:5b:98:c9:fb:
                    81:d9:37:2c:2b:36:50:b8:02:60:3f:78:a0:ca:92:
                    8f:91:3e:cc:c8:d9:ad:8d:99:0b:b9:3c:1b:1b:62:
                    b4:61:93:a9:f0:4d:3a:92:65:a7:cb:93:ff:bd:5b:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C1:F8:C6:C9:6A:15:06:15:8A:03:0E:BF:AC:B3:0F:4E:04:91:68
            X509v3 Authority Key Identifier:
                keyid:DC:1A:F9:65:E8:8C:C5:CC:96:AB:70:0F:97:E1:08:9D:E1:A7:5A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/323830343a373632303a3a2f33322d3430203d3e20323731303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7620::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:f0:f7:a1:4b:80:4d:0e:66:6a:25:eb:36:cb:67:d4:0a:9c:
         8f:9e:73:f9:29:c7:d6:be:06:0e:af:5a:7d:33:ba:b5:f7:17:
         51:be:b2:31:fd:78:af:14:2d:15:fb:39:cb:5a:18:9e:20:70:
         97:f1:38:a9:a2:76:44:69:00:ad:55:00:6e:70:44:e3:88:fe:
         a0:14:6d:41:3a:b1:1a:26:d8:b8:8a:fe:a4:b4:b5:cc:89:3f:
         10:64:83:a1:a7:a1:01:6f:82:62:37:ab:96:73:2a:11:52:48:
         c5:80:ae:60:50:04:f3:25:f0:ee:fc:3d:35:62:27:ea:62:84:
         35:6f:e3:cc:66:bf:b0:d9:1a:44:11:85:d8:6f:ff:37:2a:7e:
         ef:68:f5:3d:10:82:3b:5e:c1:d1:57:b7:0b:6c:c4:e9:ff:ed:
         76:69:c2:82:55:39:67:d5:be:57:a3:f9:38:f9:88:31:96:1f:
         2c:68:9a:46:4b:f2:b4:7e:aa:f4:b7:00:43:b5:1d:f4:3f:6e:
         09:29:2a:c1:3b:82:2c:7a:10:80:95:1a:c0:8f:da:72:5c:d9:
         82:d9:76:67:aa:c5:f3:c3:cc:17:8c:df:40:d3:3c:e8:10:30:
         4b:c8:55:31:73:ab:d3:15:0c:79:4a:da:24:64:c9:ac:3a:37:
         90:c2:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:07 2024 by rpki-client on console-ams.rpki-client.org