Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a353030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a353030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          gU7Te8S6Rff0Qi9ZsFRUDP/RYLu9s5ZpFrCfVKSpTF0=
Subject key identifier:   E3:BC:0C:0F:01:FB:AB:15:F4:A1:34:F5:B4:A1:5E:6D:E1:23:D1:1E
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       329617B1803F8F9B566B17BF395EDE307EEEBCB0
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a353030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:35 +0000
ROA not before:           Wed 15 May 2024 14:44:35 +0000
ROA not after:            Wed 14 May 2025 14:49:35 +0000
asID:                     264422
IP address blocks:        2804:1e58:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:96:17:b1:80:3f:8f:9b:56:6b:17:bf:39:5e:de:30:7e:ee:bc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:35 2024 GMT
            Not After : May 14 14:49:35 2025 GMT
        Subject: CN=E3BC0C0F01FBAB15F4A134F5B4A15E6DE123D11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:3a:39:02:0a:05:3a:2e:07:50:ac:0a:fb:
                    df:1e:34:dd:99:23:c5:3d:60:67:31:47:80:1c:9d:
                    c2:ff:10:1f:60:6f:0a:1f:ab:ce:10:61:fe:b6:7f:
                    f6:88:69:9a:80:ee:fe:f9:7f:da:33:27:0c:9c:4a:
                    f4:f2:7b:3c:06:05:fe:df:d8:58:21:63:7d:ef:82:
                    1d:85:6e:6a:45:27:6c:eb:39:b6:a9:5a:c0:0c:53:
                    9d:ef:2b:90:c3:f5:3c:6c:31:6e:f0:15:cb:20:ea:
                    c6:55:64:d3:e8:d1:1a:67:67:a8:63:e7:58:3b:86:
                    1a:22:3b:5c:91:54:19:82:60:68:65:fc:34:be:ff:
                    67:82:f5:5e:f0:18:c0:22:c0:03:03:6f:8e:29:77:
                    86:ab:07:44:ba:45:88:1b:25:56:43:20:ba:91:c3:
                    b7:1d:c1:b0:51:d9:27:7c:5f:41:e0:e4:d6:a5:f4:
                    36:3b:d8:32:b4:b8:64:1e:ba:a3:8a:bd:dd:01:95:
                    ef:7d:6e:40:47:a8:b7:95:37:a1:bb:83:ca:09:5d:
                    cc:a9:e0:9f:45:c7:e3:84:59:7e:d7:06:ed:2a:0a:
                    4b:8d:4c:98:f6:d4:ea:20:d1:30:30:b3:b6:9d:16:
                    cc:07:f8:c8:ca:58:fc:53:a7:cb:33:1c:4e:c9:df:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BC:0C:0F:01:FB:AB:15:F4:A1:34:F5:B4:A1:5E:6D:E1:23:D1:1E
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a353030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:56:3b:ab:02:ad:a1:1f:30:e0:18:26:40:52:46:00:7d:35:
         30:ac:68:9a:d0:b6:b2:38:e6:b1:08:94:46:6c:f6:42:26:88:
         2f:47:46:53:99:40:9d:e2:f8:41:72:28:5b:f9:6b:ee:fa:c0:
         90:d6:94:9d:0d:6f:e3:be:21:c6:94:97:86:1a:ec:30:59:24:
         0b:00:c4:84:a6:c9:3d:4e:c7:cf:cc:0c:7d:a1:4a:7d:58:e6:
         40:4f:21:e0:fc:65:45:96:80:66:7c:21:4c:ee:c9:c8:33:16:
         33:e7:8f:c3:8d:98:50:8e:ec:92:6f:cc:29:a9:8e:0b:53:13:
         69:86:f9:05:26:f7:6d:27:c6:46:3a:fa:79:72:7d:9f:54:3b:
         a0:60:f1:26:41:95:fc:72:dd:d7:2c:cf:aa:ab:3a:e0:56:3c:
         47:57:a1:6c:c0:89:22:1f:4a:d8:82:4e:f9:41:ee:80:6b:43:
         95:6b:ab:91:77:68:04:8f:59:f6:c4:eb:61:f8:25:3d:b4:24:
         02:f5:49:51:e5:23:94:08:86:46:93:c3:71:33:40:ef:b0:9f:
         87:83:23:98:10:04:5a:f1:5e:32:a6:d1:28:f2:56:01:3c:8c:
         93:46:fb:14:46:b0:54:0e:17:f4:0b:6d:9f:f9:c2:a3:5e:67:
         49:6b:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:14 2024 by rpki-client on console-ams.rpki-client.org