Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/323830343a323634383a3a2f33322d3438203d3e20323634333337.roa
File:                     323830343a323634383a3a2f33322d3438203d3e20323634333337.roa (raw, json)
Hash identifier:          sMCM0tpVpcJcPsevyeN+if46+zhJ5OnPCQfUkIrIs1E=
Subject key identifier:   BC:7A:F0:95:41:A7:8D:6E:BA:B3:21:16:4D:1E:76:32:2E:D3:1B:77
Certificate issuer:       /CN=BA027AB7F3CF1ACF583420261DE8A117CC215B71
Certificate serial:       66B8DF4DDAE1203EEBEE2760C07C8163AA44969A
Authority key identifier: BA:02:7A:B7:F3:CF:1A:CF:58:34:20:26:1D:E8:A1:17:CC:21:5B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA027AB7F3CF1ACF583420261DE8A117CC215B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/323830343a323634383a3a2f33322d3438203d3e20323634333337.roa
Signing time:             Tue 01 Oct 2024 19:30:51 +0000
ROA not before:           Tue 01 Oct 2024 19:25:51 +0000
ROA not after:            Tue 30 Sep 2025 19:30:51 +0000
asID:                     264337
IP address blocks:        2804:2648::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/BA027AB7F3CF1ACF583420261DE8A117CC215B71.crl
                          rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/BA027AB7F3CF1ACF583420261DE8A117CC215B71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA027AB7F3CF1ACF583420261DE8A117CC215B71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b8:df:4d:da:e1:20:3e:eb:ee:27:60:c0:7c:81:63:aa:44:96:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA027AB7F3CF1ACF583420261DE8A117CC215B71
        Validity
            Not Before: Oct  1 19:25:51 2024 GMT
            Not After : Sep 30 19:30:51 2025 GMT
        Subject: CN=BC7AF09541A78D6EBAB321164D1E76322ED31B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:7b:b6:b1:0a:cb:da:e6:46:31:31:37:2a:
                    bc:61:0f:92:2b:bc:f5:af:fe:7f:be:b2:a9:63:cd:
                    8a:12:26:01:da:b7:48:e3:5e:54:6a:cd:15:52:85:
                    4c:94:be:62:44:0a:76:eb:35:26:9e:e7:3c:21:47:
                    cc:7e:8b:3d:96:ea:79:59:11:e1:b9:57:c5:24:ef:
                    0f:96:b3:e6:3b:60:5b:37:a1:6b:92:96:30:f1:5e:
                    64:03:4e:b6:f2:58:e0:87:a6:ea:be:21:0a:9d:0a:
                    23:44:1c:36:02:94:a9:c0:6c:91:87:3f:3d:b8:8e:
                    b7:d7:17:3f:55:90:9f:db:4c:54:c7:7c:95:13:a2:
                    f1:89:87:fb:be:15:75:26:23:b8:f5:e0:91:1c:e1:
                    ea:81:4e:1d:fd:e0:eb:fc:39:14:3f:45:9c:a9:5e:
                    70:f9:a4:76:9d:b0:43:79:e1:76:4c:ae:c4:9d:d0:
                    56:7e:43:e8:5b:1b:cf:c3:55:47:1a:f0:a7:52:ca:
                    47:81:fe:61:ee:86:c9:55:0e:9c:a6:91:9a:10:f7:
                    91:a3:1a:58:55:dc:2a:d4:e2:f7:30:04:02:ae:70:
                    28:d1:63:65:00:3b:08:f0:c5:ae:14:88:28:74:16:
                    81:ed:22:54:73:23:fc:96:da:6e:97:42:44:77:4b:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7A:F0:95:41:A7:8D:6E:BA:B3:21:16:4D:1E:76:32:2E:D3:1B:77
            X509v3 Authority Key Identifier:
                keyid:BA:02:7A:B7:F3:CF:1A:CF:58:34:20:26:1D:E8:A1:17:CC:21:5B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/BA027AB7F3CF1ACF583420261DE8A117CC215B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA027AB7F3CF1ACF583420261DE8A117CC215B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/323830343a323634383a3a2f33322d3438203d3e20323634333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2648::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:52:9c:3b:c2:34:8e:80:40:b3:82:c9:96:8a:f9:8f:cf:
         44:e7:f9:43:f0:e7:1b:a4:f5:2a:66:cc:a9:6f:57:d8:26:55:
         3a:28:0e:b4:a1:a5:ad:a5:e3:3d:dd:f4:e7:5f:8c:cf:b7:79:
         36:42:13:5a:21:ea:68:fe:e5:76:e6:f4:5e:3c:48:35:31:d0:
         9e:07:63:34:33:e0:13:89:6f:ea:5e:2b:54:12:85:f6:99:ca:
         19:e7:2b:47:3d:f7:b6:0e:a6:14:39:d6:d9:76:64:4e:e1:8f:
         5a:26:0e:c9:39:07:90:22:07:7a:3f:9c:f6:a9:5a:77:ec:5d:
         96:7d:d4:69:be:df:7c:7e:c1:e4:3e:6e:8d:09:63:32:31:54:
         da:a2:4c:c9:12:03:91:8e:b1:88:4f:76:3f:75:a6:1a:41:21:
         46:d5:6c:42:5e:df:86:77:3c:d3:1d:12:55:d4:92:61:c2:a7:
         01:a5:b4:e0:7a:c6:6b:e9:48:b3:d5:c6:17:99:72:e0:88:c2:
         4a:a0:4b:11:be:48:29:4d:43:5a:e9:d6:88:cc:c7:b7:ed:80:
         3d:c4:be:2e:00:b0:2a:0b:df:74:49:5d:c8:5b:58:11:31:b9:
         fb:f1:3d:44:ec:d9:f2:53:7d:98:79:31:69:f7:97:b7:ba:62:
         b3:2c:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:36 2024 by rpki-client on console-ams.rpki-client.org