Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa
File:                     323830343a356465303a3a2f33322d313238203d3e20323638393938.roa (raw, json)
Hash identifier:          aPjhmtPka6LWp6PYECrqO72hlrYSKdposc7ZocxC158=
Subject key identifier:   B4:22:1E:D6:F4:91:ED:F9:ED:CF:F8:54:C9:65:2E:34:14:35:69:2B
Certificate issuer:       /CN=6B94A85AE07C5BF4E43485EF13FAA7C008DB5441
Certificate serial:       0EE1B002FBC0CAA25C880A77E77D3C2C027DF9CC
Authority key identifier: 6B:94:A8:5A:E0:7C:5B:F4:E4:34:85:EF:13:FA:A7:C0:08:DB:54:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa
Signing time:             Thu 04 Apr 2024 10:48:15 +0000
ROA not before:           Thu 04 Apr 2024 10:43:15 +0000
ROA not after:            Thu 03 Apr 2025 10:48:15 +0000
asID:                     268998
IP address blocks:        2804:5de0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.crl
                          rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e1:b0:02:fb:c0:ca:a2:5c:88:0a:77:e7:7d:3c:2c:02:7d:f9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B94A85AE07C5BF4E43485EF13FAA7C008DB5441
        Validity
            Not Before: Apr  4 10:43:15 2024 GMT
            Not After : Apr  3 10:48:15 2025 GMT
        Subject: CN=B4221ED6F491EDF9EDCFF854C9652E341435692B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:b1:9c:12:b4:f0:f3:a1:b7:86:0e:4d:cc:
                    4a:34:d2:c8:46:e7:70:9e:bf:85:c2:8e:b2:88:ef:
                    0a:e4:c6:0e:20:44:ee:6f:9a:4c:87:de:ab:89:19:
                    5f:a4:90:4d:54:23:aa:6c:a2:2e:31:8e:d7:71:99:
                    5d:12:36:25:60:3c:93:ee:6a:1f:75:89:83:95:69:
                    cf:af:fc:a0:96:f3:95:38:a4:96:bc:0d:38:96:26:
                    4f:d3:3e:54:c3:4a:09:1f:e9:79:46:79:bb:5e:e2:
                    fd:fc:2e:e2:fe:da:d0:0e:0e:e6:bb:e2:22:b1:a8:
                    b7:a2:0d:cf:49:f4:bb:47:db:41:d2:24:fa:a9:68:
                    4a:67:04:20:76:63:e8:c5:8a:26:b4:75:5a:cd:45:
                    68:f7:18:f3:06:8f:8e:13:93:95:3e:95:24:24:8d:
                    03:ad:be:16:21:de:62:8b:ab:11:58:8f:d1:34:ef:
                    8d:76:35:ed:30:77:e0:af:a5:9e:dd:6f:58:e7:a2:
                    ef:28:15:97:aa:13:f6:61:97:26:77:46:50:5a:4c:
                    4a:5b:5e:85:cf:e0:39:87:2a:5b:8c:c5:d3:b6:70:
                    70:26:07:9c:89:c8:7c:55:08:b4:c6:73:86:66:fa:
                    6e:1a:93:16:05:d5:94:74:64:27:95:b8:d3:07:b3:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:22:1E:D6:F4:91:ED:F9:ED:CF:F8:54:C9:65:2E:34:14:35:69:2B
            X509v3 Authority Key Identifier:
                keyid:6B:94:A8:5A:E0:7C:5B:F4:E4:34:85:EF:13:FA:A7:C0:08:DB:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:75:9c:fd:fb:41:f4:17:0e:4e:e0:3d:0f:94:a1:ee:92:82:
         c5:97:5e:2d:f8:8e:13:d1:1b:8a:9d:51:29:de:23:32:05:56:
         44:6f:7f:af:e6:6c:44:0e:8a:70:b7:10:61:cd:70:91:73:3e:
         a5:7c:27:e7:5d:1a:b0:44:29:0b:00:9f:b8:91:de:38:7a:36:
         c2:1d:57:ff:7d:bb:15:2d:2a:9b:89:eb:ba:a9:59:e0:81:0e:
         b6:4e:c6:d1:cb:73:5a:ed:9a:5d:f3:6b:32:73:c7:0b:28:5c:
         4f:a6:ee:ce:f4:49:be:c7:f4:6e:75:b7:d1:65:a6:f2:b8:ba:
         ff:13:3d:d4:23:10:a0:24:ca:0a:96:1a:1d:ec:b0:b8:2e:c1:
         c8:9d:23:7a:ec:05:fc:7c:0e:54:48:ed:f7:a3:5b:06:73:8e:
         ec:24:a8:15:5a:73:30:de:1f:36:55:f0:17:ad:e6:c9:a7:e6:
         b3:42:04:51:19:e0:fd:dc:2b:a0:51:fd:54:c7:2c:6d:e9:86:
         b0:52:2a:16:81:a9:54:55:ed:0f:19:a0:7f:c8:24:b6:eb:ea:
         e9:c6:f5:db:bd:31:27:ec:6f:70:fd:ca:e1:b7:c3:b7:ec:75:
         62:48:fe:5d:c0:37:f8:b0:af:59:3c:49:0c:70:c1:15:08:2b:
         8a:9f:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org