Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa
File:                     323830343a313362343a3a2f33322d3438203d3e20323632323838.roa (raw, json)
Hash identifier:          dy45+XlSNwcPLHZqK+M5uUN9w7hJ6sDxptWqbp+QPcM=
Subject key identifier:   22:D2:5E:F5:A2:F6:72:4F:A2:74:C1:DE:E0:E4:50:18:34:D0:35:6D
Certificate issuer:       /CN=DC4760B481E70FA8E13E470458ED532F02330CBE
Certificate serial:       44B3CCAAE05FF74E39620EB29A2B6807EB2D9C07
Authority key identifier: DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa
Signing time:             Fri 05 Apr 2024 05:41:04 +0000
ROA not before:           Fri 05 Apr 2024 05:36:04 +0000
ROA not after:            Fri 04 Apr 2025 05:41:04 +0000
asID:                     262288
IP address blocks:        2804:13b4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl
                          rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b3:cc:aa:e0:5f:f7:4e:39:62:0e:b2:9a:2b:68:07:eb:2d:9c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4760B481E70FA8E13E470458ED532F02330CBE
        Validity
            Not Before: Apr  5 05:36:04 2024 GMT
            Not After : Apr  4 05:41:04 2025 GMT
        Subject: CN=22D25EF5A2F6724FA274C1DEE0E4501834D0356D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6d:ea:61:35:b9:0f:90:d8:30:d4:a3:3c:67:
                    39:d9:cf:91:a5:ce:d6:4e:20:88:fe:5f:b8:a7:73:
                    e7:da:66:f4:04:08:e4:86:06:80:ee:7f:06:1b:6d:
                    80:5b:36:f6:3f:cf:d1:65:aa:ab:ca:67:a4:50:e6:
                    5a:7b:ae:a1:be:64:95:a3:b6:e0:30:56:8d:c4:d9:
                    ae:2c:ee:49:75:88:3f:da:7e:db:8b:ae:e7:a8:07:
                    25:43:c2:a0:19:15:71:76:99:16:cf:b7:5b:05:b5:
                    d4:7a:a9:eb:5d:c3:33:8a:92:3b:e8:c4:ca:0c:ee:
                    ef:73:35:a0:e3:01:39:15:e8:6c:5e:76:ac:0f:a0:
                    77:c1:99:9f:30:3f:cb:6c:c0:df:4f:ea:e7:11:c1:
                    8b:8c:5c:96:d2:14:b8:e7:1f:ef:4e:73:29:e8:0d:
                    ee:12:cd:0f:13:18:1a:da:f1:4c:b7:65:2a:28:d0:
                    05:b4:64:12:b3:38:c5:df:c0:4b:89:81:77:bd:3d:
                    b0:0e:da:11:c3:4c:b5:9c:ec:33:9f:ce:76:50:53:
                    1a:b7:2e:0c:bf:08:fc:d8:1b:19:48:b6:dc:93:7e:
                    dd:3f:9c:38:d1:a5:ac:a3:b0:c2:ce:b9:91:65:05:
                    c2:ac:40:11:fe:71:51:9f:76:c7:c7:06:fb:cc:66:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D2:5E:F5:A2:F6:72:4F:A2:74:C1:DE:E0:E4:50:18:34:D0:35:6D
            X509v3 Authority Key Identifier:
                keyid:DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:58:56:42:1e:a1:45:d2:26:5c:9e:df:26:e7:ed:4a:41:61:
         87:24:fc:8c:30:49:b6:29:9e:a8:74:18:af:d3:44:79:1b:f5:
         0b:3e:40:7b:de:5e:52:62:86:80:c2:0f:b2:ac:74:a9:ea:b2:
         0d:f1:9e:8b:16:94:0c:e7:b4:04:fe:7e:fe:58:ff:20:53:d3:
         35:df:dd:39:6d:54:74:eb:26:3c:e0:d1:b6:b7:8f:10:99:48:
         7a:39:79:49:ce:ba:20:5f:8a:22:43:8c:75:23:1f:f3:60:29:
         99:1f:21:58:79:b0:34:14:88:d1:c0:15:4b:0d:17:ad:15:42:
         87:ec:cf:62:c1:1f:ff:66:cf:00:20:32:0b:4b:4a:6f:9a:60:
         ce:fe:fc:c2:85:9a:21:ae:19:15:2a:52:5d:e4:73:34:5a:b1:
         fe:3d:b2:f8:08:a1:f2:97:9d:bf:aa:95:d7:6b:8c:bf:d2:2b:
         b3:44:ea:48:b0:fc:db:43:e4:a9:73:17:be:5b:03:76:31:2f:
         56:c5:d8:9b:4d:f9:58:39:ef:3d:b8:3b:65:42:46:39:42:33:
         fa:4f:fd:cd:3d:58:9b:9c:9e:0b:de:ee:08:3b:3d:4f:58:09:
         61:77:92:36:a7:d2:67:e7:8c:03:b8:12:1b:51:00:f4:42:52:
         1c:f0:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:29 2024 by rpki-client on console-ams.rpki-client.org