Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a653030303a3a2f33362d3336203d3e20323637303739.roa
File:                     323830343a343764343a653030303a3a2f33362d3336203d3e20323637303739.roa (raw, json)
Hash identifier:          KCw/hp51HkHJovM93OTtlqMfKWofyvNLocA1zc0i7pI=
Subject key identifier:   2E:ED:18:BD:ED:54:E9:EF:B2:FC:7F:FE:83:3E:6F:CD:2F:09:DD:BB
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       17D2826F7AA27B2F2DD4A8C6E5029DC9764911C2
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a653030303a3a2f33362d3336203d3e20323637303739.roa
Signing time:             Mon 15 Apr 2024 18:26:38 +0000
ROA not before:           Mon 15 Apr 2024 18:21:38 +0000
ROA not after:            Mon 14 Apr 2025 18:26:38 +0000
asID:                     267079
IP address blocks:        2804:47d4:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl
                          rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 18:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d2:82:6f:7a:a2:7b:2f:2d:d4:a8:c6:e5:02:9d:c9:76:49:11:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr 15 18:21:38 2024 GMT
            Not After : Apr 14 18:26:38 2025 GMT
        Subject: CN=2EED18BDED54E9EFB2FC7FFE833E6FCD2F09DDBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:15:af:c0:01:47:9f:d4:59:a1:37:ca:ac:
                    50:ec:fc:a6:f6:d3:91:28:3b:ed:38:89:04:ac:22:
                    a2:b6:e9:28:b6:c5:54:09:52:8d:ba:56:27:4e:c8:
                    34:ed:d7:c8:b3:b6:86:a3:88:aa:a8:eb:ee:27:15:
                    a3:29:85:79:0d:6a:7e:c1:ed:26:2c:cf:f2:66:85:
                    0b:5e:ad:93:32:04:c4:39:a1:39:52:d8:ee:5f:76:
                    ea:21:bd:07:f8:41:42:8f:dc:2a:b1:2b:2a:17:32:
                    cf:8a:64:dd:71:dd:01:59:12:e5:9a:7a:b2:43:35:
                    93:92:e9:eb:5d:b7:c9:11:01:ed:26:91:d2:94:5d:
                    8d:87:80:4a:37:f5:8f:10:22:0f:3a:28:64:01:04:
                    27:20:0c:45:b8:ad:ca:aa:05:ac:e1:d3:ee:4d:3f:
                    fc:d2:18:76:7b:a4:4d:45:b7:18:ed:44:df:f2:d5:
                    63:5e:7e:2c:36:bd:98:03:b7:9a:9d:aa:82:df:0d:
                    19:5b:ce:7c:61:6c:3b:1f:36:45:5f:fa:fb:02:0c:
                    11:88:3a:90:8d:fe:25:4a:1b:bc:ca:46:d6:b4:13:
                    3e:ef:a3:02:97:36:51:9d:53:03:59:96:66:7c:11:
                    c3:72:37:45:f8:9e:fa:85:72:53:0f:eb:2e:d5:9d:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:ED:18:BD:ED:54:E9:EF:B2:FC:7F:FE:83:3E:6F:CD:2F:09:DD:BB
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a653030303a3a2f33362d3336203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:a5:30:b0:de:9a:0a:43:15:a2:ae:79:30:88:e6:0e:3a:
         c6:b7:ff:ea:62:9e:17:35:a5:b3:82:33:51:cd:bd:bc:bf:8a:
         ec:e0:e0:02:e8:7f:7d:36:58:bc:00:65:34:f2:52:3c:46:47:
         45:07:6e:68:6d:43:cb:10:f5:a3:39:c8:8f:8b:15:ab:4d:67:
         5e:93:e0:c3:99:25:b8:2a:1d:cb:2d:24:f3:33:f5:3a:bb:92:
         a4:8c:9e:dc:23:37:d6:a4:1c:ba:09:9d:52:09:62:a4:46:fd:
         86:53:98:90:b1:fe:11:54:48:c6:a8:8c:e6:a9:37:5c:73:39:
         36:df:ee:d3:f0:a9:4f:55:11:a0:cf:f5:09:97:e7:05:a9:86:
         2e:09:f7:6e:75:a7:57:11:0f:86:e1:d6:ec:7d:f6:5b:0a:f9:
         d9:c1:0e:ed:d7:5f:b9:6c:14:a0:ab:0a:b3:53:17:fd:92:3f:
         78:4c:96:0d:8a:00:b2:a9:74:19:6c:5b:45:26:67:d1:7c:0d:
         83:28:93:eb:fc:40:46:76:ca:10:ab:eb:d9:d3:d6:7a:9f:f6:
         4b:bc:50:f4:08:c5:aa:06:69:0c:40:7a:18:c4:0b:2a:0e:c6:
         25:c2:11:12:5a:bf:fc:ad:33:d5:12:83:66:45:78:86:b0:97:
         f7:ba:1f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:46:15 2024 by rpki-client on console-fra.rpki-client.org