Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          4qnPwJknG/RzWY+F3NFlfoi0YtqAUyuQUuLu9YwZJhk=
Subject key identifier:   72:9A:E7:D5:EC:D1:65:7B:31:E2:EC:62:57:67:6C:27:87:DE:17:50
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       3EF2BAF496B2A0304F9AAFD9A7753B2ADE90DE6F
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:32 +0000
ROA not before:           Wed 15 May 2024 14:44:32 +0000
ROA not after:            Wed 14 May 2025 14:49:32 +0000
asID:                     264422
IP address blocks:        2804:1e58::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 05:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f2:ba:f4:96:b2:a0:30:4f:9a:af:d9:a7:75:3b:2a:de:90:de:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:32 2024 GMT
            Not After : May 14 14:49:32 2025 GMT
        Subject: CN=729AE7D5ECD1657B31E2EC6257676C2787DE1750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:26:79:d4:a5:85:a3:99:4f:7a:e3:3c:97:
                    f3:f7:db:a6:9e:ba:29:9d:71:f1:0d:52:b3:1d:8e:
                    09:7a:fc:b5:db:64:28:88:45:ed:8a:9c:5a:00:30:
                    b9:85:6f:a3:b5:fe:76:3f:76:ae:01:66:3f:2e:0c:
                    aa:07:c9:c5:e1:48:c1:02:35:9c:f8:cd:88:e1:3c:
                    1a:1f:2f:27:5f:89:0f:cd:f7:02:f8:e1:94:a5:60:
                    12:ee:57:45:91:ab:87:01:76:2d:b9:9a:36:ac:54:
                    85:31:18:29:05:b6:2d:1c:bc:90:15:2d:86:90:6c:
                    3d:e2:d6:1e:b0:39:88:f3:28:69:d6:d2:6a:8f:f1:
                    cc:61:cc:d6:c4:aa:dd:95:81:53:ea:d2:ee:ad:5e:
                    5d:3d:2e:b1:d2:18:3c:35:e7:19:d3:78:1e:aa:a9:
                    9f:5d:3d:5b:73:de:29:cc:81:46:f9:95:0c:0f:2b:
                    f9:6d:bb:20:e1:e0:54:cb:9f:bb:a8:ef:99:41:98:
                    3e:47:1c:59:bb:5e:44:e8:f9:8a:e9:25:18:f6:20:
                    af:88:f4:5a:7c:35:41:2c:ed:ae:77:28:81:e0:be:
                    d7:5f:d8:e9:f2:dd:d8:24:84:5a:ce:cc:eb:1f:54:
                    34:a8:38:66:99:49:8e:41:72:27:1e:6a:da:98:b6:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9A:E7:D5:EC:D1:65:7B:31:E2:EC:62:57:67:6C:27:87:DE:17:50
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:3b:40:31:24:84:af:d5:67:42:a0:33:ff:7c:ea:ff:62:
         24:0c:c5:97:62:c2:04:33:21:8d:07:5a:51:21:8a:a9:b7:34:
         3e:bd:18:99:b6:bc:44:29:10:86:a5:1b:e9:0a:7c:84:0e:80:
         d7:5e:bc:74:c9:a5:41:9c:30:48:c0:4f:1c:76:0b:c1:69:f6:
         f0:f6:ee:79:91:1f:1e:2f:0c:bc:28:aa:dd:b9:63:7d:21:6c:
         02:d7:d2:7b:88:8e:41:24:c4:ec:44:f8:01:6c:2d:20:5f:7a:
         3e:20:a2:62:3d:eb:91:44:f0:37:cd:da:d3:81:c7:4d:f6:72:
         54:69:30:71:30:a8:ca:29:ac:53:31:b8:f1:03:7b:c7:a7:34:
         cf:d1:43:5c:e7:2e:38:0f:e9:f1:54:98:f1:ac:fe:40:4a:f5:
         6d:07:96:ec:d0:76:75:e4:58:be:7c:b3:ac:76:8d:71:8d:72:
         05:b6:86:35:71:0c:1f:00:ac:94:1b:7d:a9:16:c6:ba:68:bf:
         7b:a6:76:f7:41:c3:3a:6b:21:69:ba:61:5b:b1:0b:29:e6:81:
         d7:c3:f5:dc:4b:41:bd:25:88:1c:f9:6a:33:75:4b:fa:c3:48:
         b1:d1:f4:ec:df:57:32:72:fb:17:92:7a:95:e3:94:17:d6:1a:
         06:2a:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:37 2024 by rpki-client on console-ams.rpki-client.org