Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a393030333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          e8RHj5NRhb9wTsN4RvTHusrIC8y99AdPWVCnJdWVb5M=
Subject key identifier:   F0:BA:75:6B:77:90:D5:8C:99:0E:3C:81:36:BA:F0:99:09:5A:77:D0
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       612298D8A24F762ACFBAE4707426670E5BCF9A6D
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:36 +0000
ROA not before:           Wed 15 May 2024 14:44:36 +0000
ROA not after:            Wed 14 May 2025 14:49:36 +0000
asID:                     264422
IP address blocks:        2804:1e58:9003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:22:98:d8:a2:4f:76:2a:cf:ba:e4:70:74:26:67:0e:5b:cf:9a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:36 2024 GMT
            Not After : May 14 14:49:36 2025 GMT
        Subject: CN=F0BA756B7790D58C990E3C8136BAF099095A77D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:99:1e:4a:0c:65:18:18:33:1d:d6:cb:35:
                    9d:56:37:5d:f7:d9:63:83:37:e0:94:f0:1c:92:ec:
                    c4:4a:a8:cf:a0:35:ed:06:d0:1b:c1:ec:0c:22:c4:
                    30:17:a3:9f:45:08:67:3d:2f:b5:04:59:e4:6e:11:
                    6b:df:1e:23:46:09:ec:4e:73:34:e3:db:cc:d1:1e:
                    25:19:de:e7:82:27:66:ec:59:11:82:7e:99:5e:d0:
                    9f:fe:9b:9d:6d:37:8c:92:02:1b:1a:9e:49:e3:bd:
                    1f:11:86:e6:70:f1:c8:b3:aa:ef:5c:dc:de:37:84:
                    28:6d:10:d8:6c:8d:0b:c1:09:a1:3a:4b:7f:a6:7e:
                    24:5c:2b:8e:f2:53:08:7e:79:55:3f:b7:42:e9:7e:
                    45:2d:45:a6:db:27:a1:35:83:a6:89:92:2a:69:b4:
                    1d:e7:4f:c8:35:0d:43:91:99:ac:02:3f:9b:67:bf:
                    27:5a:2f:57:ad:39:3f:fb:d8:85:68:25:95:23:90:
                    e2:7b:73:ff:60:97:da:af:b0:06:bf:0c:78:2c:b7:
                    c1:fc:e2:9f:cc:6e:4b:96:a2:23:ab:3f:50:f5:d7:
                    e7:3e:2c:0d:f7:7c:6d:e3:7f:19:41:a6:4f:7a:60:
                    73:45:24:b8:c5:b2:91:a0:51:d4:5a:64:09:c6:ea:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BA:75:6B:77:90:D5:8C:99:0E:3C:81:36:BA:F0:99:09:5A:77:D0
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9003::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:18:bf:64:7d:cc:c7:d3:24:b6:9e:f0:c9:25:5a:b2:33:18:
         1a:99:ab:d5:e9:15:d4:c0:38:4a:0d:09:fd:db:49:4b:6c:b0:
         1a:bb:ac:ba:a9:1e:33:e4:56:65:93:34:e1:c0:31:ff:40:a5:
         d3:2d:13:15:42:bb:07:fd:8e:7d:e9:48:3f:6b:78:6e:bd:ec:
         4a:64:b6:83:2b:85:09:64:d1:fd:c6:e2:80:44:60:9b:2f:29:
         cf:e1:f7:75:d5:5a:7c:e5:98:37:8e:25:55:ce:cb:c6:16:fc:
         4b:ab:6e:28:b2:56:96:fc:f1:a6:01:ec:82:b7:ce:39:cb:a6:
         05:f8:77:35:9c:c7:ad:08:bd:60:e2:c7:cb:bd:59:75:ba:b4:
         42:0f:bd:6b:ef:f3:9f:a8:6c:67:88:47:70:d2:1a:b2:b7:6d:
         9a:0d:71:7a:71:08:97:86:6e:70:53:52:9b:69:5c:12:67:19:
         bb:c5:5d:9c:ca:87:b6:01:4d:61:b4:a7:1a:71:1d:aa:c9:de:
         09:3c:35:ee:a5:df:3a:3d:c3:d5:ea:b3:70:49:2b:7f:c9:82:
         86:dc:5b:5d:25:7e:00:cc:8a:af:78:ec:36:04:f3:e7:48:48:
         e2:60:be:64:62:6b:68:83:74:14:86:56:29:39:2a:c1:a4:4f:
         f6:67:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:00 2024 by rpki-client on console-ams.rpki-client.org