Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          tKYBDfy3973x7vYLkc3UtnFZtIi0GBn/6jt1E8S8eZA=
Subject key identifier:   33:56:97:5C:3A:CC:9E:1A:64:15:4E:46:CA:7A:0D:2E:F5:3A:9B:3B
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       5A0941AD47C56C82C809B30D07E6CFC64B4D551C
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:34 +0000
ROA not before:           Wed 15 May 2024 14:44:34 +0000
ROA not after:            Wed 14 May 2025 14:49:34 +0000
asID:                     264422
IP address blocks:        2804:1e58:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:09:41:ad:47:c5:6c:82:c8:09:b3:0d:07:e6:cf:c6:4b:4d:55:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:34 2024 GMT
            Not After : May 14 14:49:34 2025 GMT
        Subject: CN=3356975C3ACC9E1A64154E46CA7A0D2EF53A9B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:b0:8e:32:46:90:ce:fb:f8:62:08:69:6c:
                    71:b8:91:b7:ee:16:63:12:cb:fb:90:0d:99:ee:25:
                    85:0f:65:17:2c:33:70:03:44:e5:4d:f4:9a:66:65:
                    fb:86:2e:0a:b5:b9:18:29:df:57:01:93:e4:f5:d0:
                    10:97:b7:9f:37:26:24:e0:8f:a5:71:b3:0d:bb:7f:
                    40:b6:25:a1:2a:49:12:de:7d:ea:8b:c7:85:88:6d:
                    8d:94:a5:a3:21:4f:84:0c:18:ab:ce:0f:70:8b:b4:
                    37:a1:8b:e2:64:2c:12:8e:27:6a:d2:c2:41:de:94:
                    1c:5a:73:c3:a4:f6:01:59:d0:b0:ad:27:ae:d8:03:
                    49:c8:64:be:d2:b2:f7:b4:e3:1a:53:00:b8:ea:65:
                    a3:49:6f:b3:30:ad:b3:1e:62:8f:60:9a:63:bb:33:
                    d9:f0:92:f4:11:6f:e5:d4:82:27:77:d5:9f:ac:3a:
                    13:88:e0:19:91:8b:28:ed:51:0c:f2:cc:54:be:79:
                    62:70:17:70:c0:94:f6:18:32:d5:8b:a1:9d:56:18:
                    81:51:8a:0d:46:f4:ca:24:4b:a9:48:32:93:cb:2c:
                    e5:1a:d5:37:cc:48:29:9a:01:93:31:5f:02:20:47:
                    44:ba:0f:88:dc:5f:96:4b:3e:5c:dd:b2:94:21:5d:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:56:97:5C:3A:CC:9E:1A:64:15:4E:46:CA:7A:0D:2E:F5:3A:9B:3B
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:61:6e:74:9b:1c:2e:c7:f1:23:28:26:bb:63:89:66:ba:
         26:39:e2:08:74:a8:81:4c:0f:3f:b6:0d:6d:95:c0:7d:0a:25:
         8c:ca:ff:2a:e8:c2:a7:60:66:43:0c:bb:3c:24:46:a2:68:5e:
         b9:d3:fc:e6:9a:0a:71:97:4f:81:89:4e:04:e5:0f:30:c3:9c:
         87:64:ed:fa:af:cd:6a:87:c8:5c:1f:72:57:b7:88:e6:0b:f7:
         3a:e8:3c:db:e7:7f:b6:36:a3:41:f9:d0:c6:66:ca:4b:55:5d:
         c1:d5:57:b6:3d:d8:75:3f:41:66:a8:ab:83:75:2f:03:e8:25:
         5d:d4:11:40:68:61:6e:8a:1b:01:1c:6b:d7:a2:57:03:56:f3:
         14:3a:bd:7b:7a:8f:1a:50:7a:0d:a2:56:d5:d2:1d:ff:6f:3f:
         91:7d:59:0c:cb:e7:43:d1:b9:df:83:94:a5:bd:30:7f:dd:b1:
         f0:76:47:de:b9:42:a4:23:7d:c7:7f:44:91:2d:6f:1b:15:12:
         7c:cb:d9:61:df:cc:de:c4:9f:d0:a5:60:3f:c5:17:7a:df:e5:
         58:e4:2a:c1:fd:7c:4f:8d:7b:db:f5:46:b5:47:27:56:71:a3:
         0b:de:63:dc:aa:4a:d9:00:a8:6a:af:cd:21:ee:8c:7a:4a:48:
         29:ca:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:47 2024 by rpki-client on console-fra.rpki-client.org