Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316630343a3a2f33322d3438203d3e203533303436.roa
File:                     323830343a316630343a3a2f33322d3438203d3e203533303436.roa (raw, json)
Hash identifier:          3SlslTfV7qgXhUSvNVGWHN1mhK5XSbvZzPV7YmJswEw=
Subject key identifier:   BB:FD:A3:E6:D6:F9:9D:09:91:C3:AD:2F:5D:9D:F9:FE:05:F8:A0:80
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       407DC961A334E05F42066051B726C88FA3F2E437
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316630343a3a2f33322d3438203d3e203533303436.roa
Signing time:             Tue 04 Jun 2024 14:33:46 +0000
ROA not before:           Tue 04 Jun 2024 14:28:46 +0000
ROA not after:            Tue 03 Jun 2025 14:33:46 +0000
asID:                     53046
IP address blocks:        2804:1f04::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7d:c9:61:a3:34:e0:5f:42:06:60:51:b7:26:c8:8f:a3:f2:e4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Jun  4 14:28:46 2024 GMT
            Not After : Jun  3 14:33:46 2025 GMT
        Subject: CN=BBFDA3E6D6F99D0991C3AD2F5D9DF9FE05F8A080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:2f:ff:e4:2d:9b:e9:03:87:a9:d4:8c:83:
                    4a:c3:e5:be:f8:d9:7e:ab:72:3b:63:f2:79:c5:8c:
                    bb:69:98:2b:58:a0:53:71:8f:18:99:eb:37:51:cd:
                    bb:50:43:f3:b7:88:2c:fe:b6:76:5b:fa:8c:7f:ed:
                    bb:a9:18:f5:b1:ac:8d:ac:35:cc:4f:dd:19:6c:ea:
                    8c:f1:25:f4:a2:26:36:b5:70:8e:63:8d:8d:e7:f2:
                    76:86:68:62:58:ae:c2:71:68:df:4b:a0:cf:30:e6:
                    c9:71:1c:bb:44:52:62:10:90:37:27:0f:16:5f:6a:
                    e0:a7:97:eb:32:7d:46:b2:f9:27:21:ae:8c:8e:fd:
                    a0:e4:b5:19:86:6b:0d:3d:a9:d2:b2:a7:96:85:fb:
                    99:17:62:26:0b:35:7a:ca:58:22:2d:d3:13:8d:33:
                    d6:e6:77:c6:16:7a:0d:a1:c1:95:09:6e:c4:c2:9f:
                    83:39:74:e3:ca:d2:6b:36:56:e0:e0:b9:e9:9b:5f:
                    c1:5a:42:c2:96:12:29:8d:dd:27:c6:56:a5:1c:cb:
                    c9:7f:f5:3f:cb:ff:1d:78:84:e5:c5:ab:14:19:85:
                    55:ef:53:60:87:f2:bc:96:02:1f:e1:05:1e:fa:d9:
                    9d:09:8b:20:be:5a:61:25:5b:04:e3:59:11:9e:2b:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FD:A3:E6:D6:F9:9D:09:91:C3:AD:2F:5D:9D:F9:FE:05:F8:A0:80
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316630343a3a2f33322d3438203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f04::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:51:47:b1:d3:c4:dd:04:83:b8:a5:3f:b0:14:1b:c8:2d:68:
         15:57:23:16:e3:25:ef:5f:68:93:c7:8a:ff:bf:a7:8b:7f:bd:
         c2:8e:96:da:41:ac:d7:c4:7a:97:96:94:20:8f:f1:7c:c5:e4:
         28:5f:ab:77:06:c1:e8:86:c8:c6:01:71:f9:fe:4a:28:0f:49:
         5d:6e:f5:77:c9:2a:72:fd:a3:5d:e0:b3:d2:56:5d:a9:e5:c7:
         f0:d0:b0:84:e4:3c:29:c4:1f:3d:a2:bb:d2:96:8b:e6:75:d8:
         39:41:ef:bc:2c:2e:82:f8:83:e6:05:0a:80:9f:b0:15:ef:33:
         61:36:c0:c8:9c:e3:de:f2:55:f2:0c:c4:57:ea:1b:7e:3e:7c:
         2b:8c:83:5b:51:11:4a:11:ab:82:61:13:d7:e5:57:48:b6:d8:
         f4:d4:76:74:64:26:8f:e7:10:ed:be:0c:66:9f:82:65:e3:18:
         e3:b0:d1:38:64:26:33:b4:85:52:02:e1:fe:dc:7d:3f:7e:64:
         6c:e1:a2:6b:53:da:4b:03:15:a7:05:9f:8d:17:e3:36:0e:e2:
         b4:cc:67:e0:43:a7:37:b1:4a:79:9a:3e:c4:ce:9e:64:d5:6a:
         d6:c9:9f:29:d4:29:bc:17:eb:b1:71:36:d3:b8:91:b7:c8:b6:
         56:83:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:36 2024 by rpki-client on console-ams.rpki-client.org