Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030343a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a393030343a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          jwp/56cTW6YJ840lnkSzBjESMXdGE5EMHkVqc8K+R+0=
Subject key identifier:   7F:8B:49:70:20:DD:1E:89:21:2A:F2:93:4E:1A:56:C0:B7:15:7A:64
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       7BC6F97BE95FDD02D9770F6F1EB587C687451064
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030343a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:31 +0000
ROA not before:           Wed 15 May 2024 14:44:31 +0000
ROA not after:            Wed 14 May 2025 14:49:31 +0000
asID:                     264422
IP address blocks:        2804:1e58:9004::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c6:f9:7b:e9:5f:dd:02:d9:77:0f:6f:1e:b5:87:c6:87:45:10:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:31 2024 GMT
            Not After : May 14 14:49:31 2025 GMT
        Subject: CN=7F8B497020DD1E89212AF2934E1A56C0B7157A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:11:47:cb:5e:ea:01:0f:5b:9b:a2:01:7e:
                    db:53:5a:61:fd:7c:24:7d:d3:98:74:88:5b:4c:c2:
                    82:50:f8:37:5f:13:68:6f:9f:ed:15:31:3e:42:cf:
                    f5:71:81:4e:fc:43:86:17:c2:04:f5:cd:6b:92:87:
                    87:6d:6f:33:8c:4d:6c:bd:4d:af:ad:70:7a:66:46:
                    f7:f5:c3:aa:4a:e8:83:48:d4:49:0d:fd:3a:ca:32:
                    21:f5:62:26:48:7d:09:86:51:e6:4b:8c:07:de:2a:
                    10:6a:e4:ac:2d:53:31:de:18:78:f2:93:5f:fb:73:
                    14:cf:f5:71:38:dd:dc:47:fd:17:ec:1b:fc:27:40:
                    79:02:bb:b3:2b:a1:5a:69:76:64:9a:54:16:34:b5:
                    52:98:82:37:b3:90:93:65:9b:a1:64:fd:33:b0:70:
                    74:93:5b:cc:1b:0d:85:6f:eb:94:cd:e1:7f:ab:ab:
                    9f:84:d4:1d:e4:a1:dc:08:1d:4d:e6:d3:24:3b:1c:
                    a5:68:02:55:b7:35:1e:84:e6:9c:d4:04:99:1d:5b:
                    4b:37:d6:5b:4b:3c:63:6b:29:71:a9:3a:00:a2:24:
                    b4:43:62:ef:28:b7:62:a3:06:13:fc:e7:b1:30:ed:
                    13:f9:ed:b0:b0:61:6f:2d:2b:6d:84:7e:d4:0d:31:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8B:49:70:20:DD:1E:89:21:2A:F2:93:4E:1A:56:C0:B7:15:7A:64
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030343a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9004::/46

    Signature Algorithm: sha256WithRSAEncryption
         65:38:b6:c7:0a:02:e8:f4:57:76:4e:40:3d:a1:03:ed:86:df:
         e5:39:55:a6:54:24:4e:bf:d7:d3:a2:d7:01:d2:1a:78:71:62:
         83:20:63:f2:16:89:a6:ea:9d:87:4a:7d:68:dd:c7:e6:23:93:
         67:2d:2e:3c:99:64:1a:fe:1a:34:e5:8e:3d:2e:be:b4:01:e2:
         7b:df:70:d6:79:a5:12:27:34:e9:bd:46:3f:53:73:43:26:28:
         17:90:57:0e:de:bc:fc:79:86:12:be:bc:0a:d2:11:b8:57:f7:
         b5:9c:a3:78:0f:9e:5d:10:be:a1:87:a1:26:e9:6b:e2:67:a0:
         82:4a:f9:fe:80:7a:9a:d2:0a:40:6a:37:5d:f8:6a:34:db:b6:
         92:2f:3f:e3:df:1d:4b:c2:ec:73:20:f4:fb:23:6a:ab:30:c9:
         c4:0c:1c:69:f1:9a:bc:62:c6:41:db:32:ef:d0:2f:d2:56:3c:
         de:e5:19:13:34:62:0e:d9:92:87:5a:f7:1c:1b:5f:d5:7d:a9:
         37:b7:fd:8a:1f:61:20:5f:8c:4e:1f:66:a6:13:79:fa:f5:f2:
         64:ba:34:e4:f0:d3:95:de:69:78:53:89:2d:00:2b:94:72:24:
         16:43:12:78:70:20:54:b6:70:ef:d3:9d:6b:77:83:b1:2a:af:
         bd:c0:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:14 2024 by rpki-client on console-ams.rpki-client.org