Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a663030303a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          iuStquQQtxOhTc4uABsGP5YqJM/Wej1Ol5cp68nB+As=
Subject key identifier:   B3:8F:FD:72:E8:7A:36:42:6D:BF:A0:4A:41:1F:BC:13:E6:5D:5F:EC
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       7C1868C545BAC3B394EE384B42D2E32167A0C852
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:35 +0000
ROA not before:           Wed 15 May 2024 14:44:35 +0000
ROA not after:            Wed 14 May 2025 14:49:35 +0000
asID:                     264422
IP address blocks:        2804:1e58:f000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 07:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:18:68:c5:45:ba:c3:b3:94:ee:38:4b:42:d2:e3:21:67:a0:c8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:35 2024 GMT
            Not After : May 14 14:49:35 2025 GMT
        Subject: CN=B38FFD72E87A36426DBFA04A411FBC13E65D5FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:be:c9:78:8a:23:e3:18:10:5e:ce:ae:81:
                    cd:5d:a0:23:ab:02:42:be:66:91:6c:29:7b:b6:4c:
                    7c:35:a6:26:36:f6:1f:cd:bb:b9:d1:89:66:ab:be:
                    6e:1d:9a:05:88:b9:7c:90:21:31:f8:f4:80:11:29:
                    9c:02:76:e9:55:5e:37:86:92:0e:02:a7:d7:4f:90:
                    4e:db:44:f3:6c:cb:af:a4:2f:40:64:a4:13:4c:d0:
                    af:e0:5e:ea:1b:49:17:ea:f9:56:fc:e7:ac:0d:9b:
                    95:75:11:c6:0b:18:c2:9a:07:07:40:04:7f:93:9f:
                    85:a5:ae:fd:4f:cf:b1:5e:f8:70:a9:bc:2f:70:5f:
                    fa:9e:81:dd:42:2d:e2:2b:51:43:34:96:fb:11:52:
                    ea:9d:b7:7b:7d:c7:b3:e4:c4:f9:89:af:1b:a1:bc:
                    3c:8f:bd:b6:21:e4:86:b3:0a:5d:fb:c5:78:8f:1d:
                    0c:e6:68:26:83:3f:53:56:4d:87:37:56:4f:d8:62:
                    64:73:f5:a0:56:28:76:a0:e6:ac:01:94:2a:ca:24:
                    2d:f6:fa:24:3e:24:87:c3:a8:cb:02:d4:55:ef:7a:
                    e9:23:b1:d1:f4:69:d0:0c:3a:3b:37:40:79:dc:a5:
                    e6:8b:44:be:fe:8d:71:6b:11:bd:5e:c0:38:33:c1:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8F:FD:72:E8:7A:36:42:6D:BF:A0:4A:41:1F:BC:13:E6:5D:5F:EC
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:5a:be:28:c8:05:97:08:0a:22:19:26:f4:98:cb:89:59:52:
         bc:9d:d5:4e:16:fd:d7:b1:e2:19:07:2d:8b:0f:6a:5d:70:18:
         f7:0d:dc:b7:24:d9:bb:e8:25:ee:ea:4c:5b:a6:7d:31:19:f7:
         fb:72:bf:2a:f9:49:30:f0:7a:16:e4:d4:d2:9e:b4:6e:4e:b0:
         ca:be:82:a1:5b:b1:0f:f5:72:d9:6b:b7:97:7e:94:2f:bb:70:
         0c:33:dd:54:0c:99:e0:9b:47:d0:63:9b:4a:6b:eb:bd:57:53:
         f6:c8:1a:c0:19:17:5c:ef:a6:26:12:c7:97:98:8f:04:3c:62:
         6a:24:61:42:d2:cb:64:53:23:07:53:64:3c:9e:bd:cd:fb:d9:
         5b:60:15:24:f4:80:af:eb:29:23:7a:f3:03:fb:87:5a:5e:b0:
         6c:bc:76:c4:18:66:13:75:4a:c0:48:8f:a4:38:b1:e0:5a:bd:
         e1:bb:88:6a:85:f6:2a:23:c7:17:e1:4f:d1:c1:e2:99:03:c0:
         f3:f2:97:ea:65:0b:8f:c7:f2:f2:c3:0e:35:9e:b2:0d:1c:a3:
         bb:5b:bf:8b:de:23:82:bc:b4:ab:a9:ed:6b:fb:3d:c3:4e:4b:
         ec:08:7c:03:88:d5:bf:ce:28:bc:55:f4:7c:bc:86:2f:99:cb:
         d8:84:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:34 2024 by rpki-client on console-fra.rpki-client.org