Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a383030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          gNdH/es02eaxyJn2l5anfkQeol4ZuJU95Wc/2Dw/8uo=
Subject key identifier:   32:D0:BC:D9:94:2D:81:CD:18:A6:37:9C:2C:02:F4:6D:8A:12:40:68
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       01242FFCC53B6A91BBE920F3E1F5D38AD83BC6F2
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:40 +0000
ROA not before:           Wed 15 May 2024 14:44:40 +0000
ROA not after:            Wed 14 May 2025 14:49:40 +0000
asID:                     264422
IP address blocks:        2804:1e58:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:24:2f:fc:c5:3b:6a:91:bb:e9:20:f3:e1:f5:d3:8a:d8:3b:c6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:40 2024 GMT
            Not After : May 14 14:49:40 2025 GMT
        Subject: CN=32D0BCD9942D81CD18A6379C2C02F46D8A124068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:07:02:0c:a8:81:fd:af:17:d7:b8:14:8d:
                    4f:8e:a1:70:0f:39:61:6a:e7:0d:90:bd:cf:62:fc:
                    bc:78:12:f0:40:47:83:aa:f7:ef:e9:26:76:60:72:
                    cb:f4:96:00:7e:1d:cf:be:20:d8:14:d5:15:86:cc:
                    1c:0a:52:70:25:ee:e3:e4:e8:af:e2:eb:07:8c:53:
                    a0:7b:f6:7c:0d:7a:cf:21:68:b8:6d:60:de:1b:83:
                    10:77:c3:52:3f:5a:78:d2:94:f7:79:c4:ce:74:70:
                    4e:4f:4e:ce:19:19:0a:a5:a1:d8:44:75:26:63:a8:
                    84:da:a4:93:b4:bd:23:d8:55:db:ce:03:94:36:17:
                    45:72:10:79:9c:78:83:0c:17:f5:70:14:0f:fc:0d:
                    80:25:b4:40:23:72:00:52:b9:12:da:24:20:87:89:
                    b1:79:5e:59:ae:33:26:28:ec:9c:77:56:77:a0:fa:
                    52:25:38:a3:3b:bf:44:05:37:e5:de:ea:bd:17:5e:
                    0d:fc:ba:38:cd:21:5b:73:e4:82:29:27:04:f7:10:
                    bb:9c:c3:99:e8:68:19:2a:f8:cb:33:cd:9d:fe:66:
                    f4:03:1c:58:55:9d:66:28:cb:fc:8c:33:30:ab:f5:
                    79:00:38:c4:85:f3:d3:3a:0c:f2:e1:c4:89:2a:c7:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D0:BC:D9:94:2D:81:CD:18:A6:37:9C:2C:02:F4:6D:8A:12:40:68
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:a1:ff:36:63:89:7c:2e:42:26:9c:0e:21:0d:5a:5e:b4:d6:
         4f:2d:32:46:5f:16:82:b1:a2:e5:a5:da:35:2a:8f:3e:5a:df:
         dc:65:70:a5:77:98:42:2d:45:90:d0:61:39:39:8a:56:de:84:
         8d:7b:26:a0:33:43:67:2e:bb:21:99:24:94:0d:9f:2f:9b:0f:
         7a:82:2f:6b:df:5d:82:c0:5c:86:dc:33:1c:66:01:a0:b0:d7:
         dc:13:fd:44:43:3f:47:93:f2:e1:bb:64:2f:17:cf:a5:a8:55:
         f3:2e:07:45:c2:75:6a:60:e0:70:8b:2c:85:af:eb:f6:20:ff:
         b2:32:37:2f:b3:9e:77:99:a9:1f:54:ff:72:3e:49:76:24:f6:
         39:30:d4:ad:43:c2:a2:ec:cc:d8:ea:7c:58:c0:f2:06:75:d7:
         ec:a6:2c:b2:42:c6:bb:49:14:90:4d:37:f9:92:47:72:b6:3b:
         a9:3f:74:b6:a3:8a:41:41:75:71:49:5d:67:7c:46:ae:59:ed:
         ff:0d:a6:5e:4e:33:7c:06:72:d4:a6:16:7e:8f:77:98:ac:34:
         e2:16:e8:b5:88:c6:9a:6f:35:61:0e:36:d6:d2:8e:32:e3:d6:
         f8:f7:c4:d5:2e:d8:52:56:c5:5c:81:3b:45:43:e2:07:bd:ed:
         57:c4:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:39 2025 by rpki-client