Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a663030333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          N5zAonEs/pcOeBmswkYENYUPkyF5FMQeNvR4HTQM1k0=
Subject key identifier:   64:65:13:93:0D:39:A0:F6:65:10:C2:EA:37:BE:F3:75:BE:44:59:A5
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       36539E02100C0995392CEFA1A568A01CAE2302C5
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:28 +0000
ROA not before:           Wed 15 May 2024 14:44:28 +0000
ROA not after:            Wed 14 May 2025 14:49:28 +0000
asID:                     264422
IP address blocks:        2804:1e58:f003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:53:9e:02:10:0c:09:95:39:2c:ef:a1:a5:68:a0:1c:ae:23:02:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:28 2024 GMT
            Not After : May 14 14:49:28 2025 GMT
        Subject: CN=646513930D39A0F66510C2EA37BEF375BE4459A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:0a:3b:cb:b1:88:ec:86:04:42:b4:26:da:
                    40:44:1b:f3:be:8d:6c:db:41:9a:e4:95:ce:3d:4b:
                    76:14:da:69:c6:46:3e:0d:6f:82:45:6f:48:8e:31:
                    18:86:dc:0a:94:62:46:9e:25:ab:67:8c:08:46:32:
                    e3:b6:5f:90:d9:0d:1e:42:c1:cb:e0:4c:01:b5:af:
                    04:80:31:c4:67:e1:04:0d:43:02:bc:f1:17:d6:2d:
                    e4:a5:34:8f:8a:63:0d:87:c6:f8:f1:0f:74:36:8e:
                    b8:63:70:85:eb:6d:45:d4:27:81:96:b7:d3:84:65:
                    2d:dd:e0:d3:56:24:4c:2a:f0:b7:7b:74:7f:c7:0e:
                    2a:85:cd:9b:d6:6f:33:be:c4:3b:5f:87:1f:ee:4d:
                    c8:a7:df:8f:3e:40:e5:93:84:41:2b:6d:55:6e:9e:
                    95:8c:9f:82:a2:c4:09:dd:cf:d1:07:e3:95:fe:93:
                    23:6d:09:83:56:af:5b:d5:36:e8:d0:56:1f:cc:03:
                    e9:ca:e9:ff:79:28:5e:0e:5b:95:9f:7a:d5:d4:e7:
                    c9:ac:dc:ef:8b:4f:9b:12:6b:d9:97:9c:c5:f0:01:
                    8b:57:ad:0d:f2:35:c6:c7:02:4b:7c:ef:bb:48:31:
                    c0:fa:6f:84:b3:88:c7:54:17:65:88:aa:35:2f:75:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:13:93:0D:39:A0:F6:65:10:C2:EA:37:BE:F3:75:BE:44:59:A5
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f003::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:31:1d:fa:91:30:f1:63:3f:a8:88:ed:b7:31:22:13:27:
         ae:c1:2f:e8:ca:e6:7e:d1:00:2a:e5:f8:6a:ff:f0:7c:43:4f:
         52:16:74:6f:13:fa:05:0d:53:05:c8:e0:d2:6d:85:60:bc:72:
         66:55:c1:4e:74:7b:67:8e:b1:88:31:77:2d:59:6f:73:f7:09:
         7e:03:0a:25:55:d0:ca:07:b1:81:22:94:35:1a:30:7d:cc:88:
         2e:3a:15:63:31:2c:3f:46:b5:aa:75:6a:69:55:4b:37:34:53:
         f1:77:30:43:1a:1d:0b:b1:db:00:1b:08:28:a0:09:e8:d8:2a:
         39:48:8a:0e:1c:33:71:22:62:d1:d5:ab:fa:74:44:97:ae:1c:
         5f:6a:e0:23:54:d2:66:bf:3d:79:3e:22:a6:72:5a:83:64:3a:
         85:9c:44:85:e5:c6:db:31:bd:0e:da:7f:59:22:bb:21:99:24:
         72:ad:59:f0:71:0b:0a:3b:bf:e2:fd:6e:bd:36:b5:fa:0f:df:
         e2:ea:63:08:28:b2:1a:9e:85:4a:0b:88:5f:82:79:51:b0:b3:
         30:b4:98:3c:aa:d7:d3:aa:a5:31:cc:16:36:49:52:2c:0b:f1:
         34:55:9e:c1:b1:96:59:d7:f1:5d:73:44:66:3e:44:ce:7a:8d:
         fe:0e:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:24 2024 by rpki-client on console-ams.rpki-client.org