Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a333030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          e+9D/hmPJeXAecOZjmkaQdO1poqn6LEIJfsdTDl5QUs=
Subject key identifier:   CA:A9:EF:20:82:B5:E2:B9:1D:AE:E5:04:1B:C5:34:FE:09:B2:1C:D1
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       7D8DEF8977459DDCF7FB1DC7F925C0F76550614A
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:33 +0000
ROA not before:           Wed 15 May 2024 14:44:33 +0000
ROA not after:            Wed 14 May 2025 14:49:33 +0000
asID:                     264422
IP address blocks:        2804:1e58:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8d:ef:89:77:45:9d:dc:f7:fb:1d:c7:f9:25:c0:f7:65:50:61:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:33 2024 GMT
            Not After : May 14 14:49:33 2025 GMT
        Subject: CN=CAA9EF2082B5E2B91DAEE5041BC534FE09B21CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:c4:46:f6:69:60:58:88:8c:d9:df:4f:b6:
                    1d:08:15:cb:90:38:b8:84:63:8a:f9:3a:1c:05:de:
                    41:19:53:31:f5:1e:a3:0d:8f:ce:24:cb:fa:35:f2:
                    82:74:40:76:6a:8d:e1:70:96:aa:d8:e6:ae:83:81:
                    42:71:ce:3e:61:66:33:09:cd:19:16:33:b5:5d:fd:
                    30:29:18:9c:ae:1d:73:6e:d6:25:be:de:f8:c6:38:
                    02:15:df:75:6b:f3:05:d1:7b:a4:46:73:07:b2:90:
                    99:23:aa:06:2d:bb:27:3b:37:ce:49:91:7a:e9:01:
                    87:e3:25:20:e6:69:32:08:95:33:41:6f:72:6a:10:
                    a2:de:5a:a9:6b:f0:c6:cd:b1:14:57:ef:8e:07:07:
                    32:9f:84:7a:13:2d:83:ef:04:9c:be:62:e6:88:e0:
                    0a:6f:df:56:e3:92:b6:27:c7:c0:bd:49:3a:d6:50:
                    b9:90:49:11:bd:90:05:5f:bb:7c:1a:87:b7:ca:9b:
                    d2:73:43:d6:a0:7e:17:06:cb:80:3a:e7:75:e8:1a:
                    da:13:a7:9b:ac:8d:b8:be:ba:e1:ab:ca:86:ea:30:
                    1c:46:03:39:fc:c3:9d:41:e9:54:92:c2:75:9a:41:
                    24:58:97:98:d7:97:b6:de:1f:f4:92:e7:cc:d7:d2:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A9:EF:20:82:B5:E2:B9:1D:AE:E5:04:1B:C5:34:FE:09:B2:1C:D1
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:d9:d8:62:ad:ff:70:d0:cb:f4:df:4b:fb:26:7c:e5:18:f6:
         e3:df:c0:87:cd:b2:07:7a:06:a8:52:02:97:a1:fa:80:51:71:
         f5:0b:ea:1b:86:8c:e1:23:84:9b:57:7d:79:c8:2a:b5:fa:f9:
         01:0c:5d:f0:b6:8d:3e:05:c7:ac:6e:44:24:f4:37:dd:26:ab:
         18:4f:81:c3:b1:14:a4:14:e8:7a:91:40:69:b3:26:ff:40:9c:
         94:12:2a:f0:c1:8f:63:41:60:dd:06:f4:ce:c2:fb:1e:d1:fb:
         c5:be:20:d0:9f:80:4c:43:f2:29:d5:c9:19:44:c3:d9:fa:3e:
         cf:ff:b8:cc:cd:80:14:ba:f5:c5:61:20:68:4d:bd:0f:1a:26:
         98:6e:33:62:3f:65:ee:f7:ef:5e:6e:9f:08:1e:6e:bb:d3:18:
         16:94:34:16:ff:e5:28:1c:82:3a:b3:90:7e:e1:c8:f8:69:dc:
         9f:8b:64:75:fa:b6:18:f8:32:6b:99:44:9a:3d:79:5b:57:a1:
         6b:7a:44:b0:e2:54:50:a4:5c:b1:9d:f3:c4:dc:64:64:7d:eb:
         72:49:3f:6d:cf:17:63:04:33:1d:14:c0:ae:e3:51:02:70:36:
         5a:c1:d2:0b:8b:ac:d4:6c:22:2c:af:bc:2b:b4:cb:53:da:9d:
         22:67:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:39 2024 by rpki-client on console-fra.rpki-client.org