Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a323030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          CVm0K0e5qH4NwUUZUXNNxuIqGgfofD0P7Igpg3vFaFs=
Subject key identifier:   73:30:C5:F0:8F:74:A0:16:80:E4:5E:28:65:97:AA:CE:89:41:38:B6
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       2403EB0267F3E8894C96D21740DC52C3B88E52F9
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:34 +0000
ROA not before:           Wed 15 May 2024 14:44:34 +0000
ROA not after:            Wed 14 May 2025 14:49:34 +0000
asID:                     264422
IP address blocks:        2804:1e58:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:03:eb:02:67:f3:e8:89:4c:96:d2:17:40:dc:52:c3:b8:8e:52:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:34 2024 GMT
            Not After : May 14 14:49:34 2025 GMT
        Subject: CN=7330C5F08F74A01680E45E286597AACE894138B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:51:dd:0a:54:da:fa:60:2f:a9:09:8e:00:
                    fe:e6:9b:5d:b1:bf:1e:4e:99:13:c2:3a:32:01:b4:
                    ae:e5:82:b2:55:87:9a:a2:09:76:96:84:41:c4:9b:
                    f3:6d:99:33:41:fe:03:e4:13:9e:cc:8c:52:0b:dc:
                    83:d7:ba:7f:3d:e4:84:03:ca:d8:60:87:70:9e:27:
                    6a:f7:46:0b:26:bf:69:bc:23:97:33:28:b2:1d:9b:
                    aa:56:94:2c:96:e7:ab:cd:54:18:99:de:c7:98:68:
                    47:48:24:97:5d:03:a3:7d:3c:a7:18:af:ff:cc:af:
                    69:af:ec:ac:ef:f5:dc:7b:d8:3b:15:e1:80:c9:00:
                    4e:22:02:07:9b:5a:7b:d3:34:f7:68:cd:09:ce:25:
                    6f:bd:1f:92:a5:8d:ad:20:1d:52:37:a6:1a:8b:a3:
                    a0:50:b1:dc:bb:c9:a3:a7:5c:3f:7c:41:6a:2f:f4:
                    c9:44:73:cf:9e:0f:3a:65:21:30:9c:c8:e2:0b:80:
                    8c:bb:a2:f4:bf:1c:9c:e6:b5:bc:9e:5d:b8:4c:2e:
                    18:a0:ee:c7:42:1b:fd:a3:af:4b:ca:f7:d3:b5:2f:
                    52:c2:e0:06:dd:38:a0:f9:22:22:d0:84:e9:d3:d8:
                    30:04:95:9d:c9:7e:01:b1:20:9c:a1:19:14:90:df:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:C5:F0:8F:74:A0:16:80:E4:5E:28:65:97:AA:CE:89:41:38:B6
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:98:41:23:1b:ac:d6:86:b8:a6:84:69:9d:ca:01:4f:1c:
         6f:09:6d:6b:e4:95:40:c1:c8:04:17:36:15:30:f0:35:3d:65:
         94:b6:7a:d4:2c:0e:c4:b4:08:6c:e7:5a:01:2c:72:bc:40:b2:
         38:bd:ab:ed:60:68:44:86:f2:48:6b:ff:27:cd:d9:01:fc:83:
         05:ad:8f:26:3c:d5:44:0f:40:b8:0f:ed:28:c3:37:07:47:11:
         f4:6e:c4:2f:0e:59:04:93:4f:2b:dd:a7:5f:f3:c3:b2:99:5a:
         db:a9:5b:ee:22:bc:c7:d6:c0:a6:74:3e:f8:93:37:3c:07:73:
         a6:11:8e:ec:f8:cf:f4:8b:5b:7d:c1:68:31:36:30:4c:03:a7:
         3a:df:9c:0d:eb:bf:4f:b1:37:3d:24:c2:4d:0b:bc:20:00:01:
         ae:0a:56:14:7f:31:1d:23:0a:0c:ce:9e:50:dc:7b:da:44:bd:
         ce:06:aa:c5:0d:07:c0:c7:da:09:74:98:eb:24:06:cb:4d:ec:
         ea:52:cc:5f:a9:af:fd:cb:cf:3b:e3:23:dc:fa:9e:99:6b:85:
         ac:a7:a2:e0:2e:8e:b2:13:89:92:e5:c3:c0:48:8c:78:f5:de:
         50:f2:c1:ba:a8:35:09:74:97:63:9a:60:2a:c9:98:90:47:4c:
         46:47:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:48 2024 by rpki-client on console-fra.rpki-client.org