Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a393030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          dTsgriOyxKXAIdNDWvMKImRD421OuIAFfmQc11w8zkc=
Subject key identifier:   89:8A:5C:B4:6A:4F:FC:37:0A:12:D6:74:32:CE:0B:A9:AA:20:06:B5
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       5A86EF1E00D305DB28E1A7AC62A25F06B7E8F763
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:39 +0000
ROA not before:           Wed 15 May 2024 14:44:39 +0000
ROA not after:            Wed 14 May 2025 14:49:39 +0000
asID:                     264422
IP address blocks:        2804:1e58:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:86:ef:1e:00:d3:05:db:28:e1:a7:ac:62:a2:5f:06:b7:e8:f7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:39 2024 GMT
            Not After : May 14 14:49:39 2025 GMT
        Subject: CN=898A5CB46A4FFC370A12D67432CE0BA9AA2006B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:9d:0e:82:a4:18:8e:e2:73:29:2a:bb:96:
                    84:5e:04:40:80:75:fa:2b:16:57:f7:60:b1:3d:d5:
                    2f:9f:c0:74:d0:4a:a0:60:04:e8:0d:ce:7d:0e:6b:
                    03:16:cb:2f:2c:6a:7c:1a:fb:d6:f1:37:51:c3:e5:
                    86:a3:4f:07:97:b7:4d:e9:f0:ba:d8:ae:de:16:fe:
                    bd:a1:e3:14:d1:11:0a:be:e0:20:77:53:22:5a:b8:
                    84:86:c0:d1:68:e9:4e:a0:7a:ed:01:bd:26:d0:73:
                    da:f8:9c:82:14:77:08:0e:6d:0a:a9:c5:f9:23:1a:
                    40:bb:ad:28:98:dc:e3:19:55:33:e3:0c:38:32:3d:
                    7e:6e:11:76:7c:7d:3a:16:cb:3c:90:8b:51:93:36:
                    68:54:b9:55:23:7f:6e:3e:ac:1f:e0:44:10:f2:04:
                    69:c9:17:06:32:80:b9:61:c1:42:be:88:eb:37:b8:
                    fe:8a:2d:c3:48:56:fe:6b:bb:0b:63:74:d0:2c:dd:
                    31:5a:f0:cc:e0:54:09:ba:9d:0d:26:9a:29:30:74:
                    5e:94:98:f1:63:d8:81:41:85:d1:03:6e:72:31:d5:
                    c3:99:c8:5e:68:ae:64:e3:df:05:4f:aa:0e:12:fa:
                    c3:ac:f4:f8:c8:ef:86:92:1b:6a:90:7d:25:f0:fc:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8A:5C:B4:6A:4F:FC:37:0A:12:D6:74:32:CE:0B:A9:AA:20:06:B5
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:81:8c:d9:22:96:2c:5f:80:ed:10:18:b1:23:ef:8b:b1:6d:
         ed:6f:7b:db:08:7a:69:91:41:a4:e7:27:47:25:07:f5:25:1f:
         01:f0:39:1e:d8:ea:ef:74:22:9c:0a:1b:7c:42:fe:e6:aa:6a:
         a2:bd:73:ce:cd:6c:33:43:17:4e:96:07:e6:c2:12:d3:14:27:
         95:34:4e:02:04:d9:16:7d:62:c2:67:d2:28:c4:37:25:5c:92:
         64:ff:17:6e:e0:93:25:b6:79:87:fc:1e:61:e8:f7:a5:34:69:
         85:24:f8:15:b6:a6:ad:60:5f:85:9d:bc:08:1c:b2:16:51:9d:
         f3:82:b8:d4:ee:4d:3e:ac:58:de:53:04:aa:78:b3:c2:ee:c1:
         03:4e:52:6d:37:7e:5e:b5:2b:83:93:0a:46:e8:2d:6a:15:5e:
         e1:16:e6:5e:e4:f4:02:da:9c:b8:e6:f6:db:da:26:82:8a:31:
         67:55:35:e5:da:5f:58:e7:a9:92:ae:fa:ab:98:07:2f:bf:bf:
         c2:32:13:e8:e2:7f:05:9a:b0:46:b0:13:d2:3d:ce:11:76:98:
         7c:38:23:81:22:c9:71:0e:28:19:73:46:81:50:05:f7:7f:1b:
         bc:cf:eb:28:9a:b2:0f:e1:64:6d:f3:0b:21:47:a1:12:a7:97:
         4b:5f:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:47 2024 by rpki-client on console-fra.rpki-client.org