Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/323830343a323737383a3a2f33322d3438203d3e20323633393033.roa
File:                     323830343a323737383a3a2f33322d3438203d3e20323633393033.roa (raw, json)
Hash identifier:          XRgYxLHb9BMetDtm4cZmy5sgYFmy4H1lQsLyAiLwx04=
Subject key identifier:   6E:5C:36:6C:C0:0C:4A:1A:C7:6B:56:42:B1:22:85:A7:A3:C0:01:31
Certificate issuer:       /CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
Certificate serial:       2FF0744AB34EEB5EC1330FE910CD86F11B81B884
Authority key identifier: AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/323830343a323737383a3a2f33322d3438203d3e20323633393033.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     263903
IP address blocks:        2804:2778::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.crl
                          rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f0:74:4a:b3:4e:eb:5e:c1:33:0f:e9:10:cd:86:f1:1b:81:b8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=6E5C366CC00C4A1AC76B5642B12285A7A3C00131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:f2:d9:0f:a0:30:b7:c9:66:1d:f7:c6:ce:
                    db:ef:3b:6c:1a:5d:39:3c:2d:36:00:90:f4:42:76:
                    79:3e:f2:aa:f4:93:4a:89:c5:28:84:d2:d6:7b:29:
                    13:e1:67:b0:dc:9c:49:fe:ff:c2:1b:96:cb:c1:5a:
                    45:3e:47:9c:4e:0a:34:71:70:a8:de:d5:92:16:6e:
                    fa:f8:02:80:29:42:7a:92:15:72:f3:4a:55:fa:1c:
                    e2:96:74:89:a9:b5:72:22:66:ef:73:8d:49:13:d6:
                    6a:d5:a2:70:b4:a3:fc:30:fa:16:7c:fd:a0:97:8f:
                    67:77:c5:94:b4:14:02:de:bf:60:fc:1e:28:d3:26:
                    b7:7e:f1:db:d5:13:ac:11:0d:ce:4d:d7:06:2d:26:
                    1b:f5:b2:02:7b:4b:2d:05:e4:40:ba:5a:aa:68:42:
                    ef:dc:f4:43:0c:31:e0:cf:18:d7:69:9b:b8:44:5d:
                    7d:58:0e:5c:6d:81:cc:53:c4:a5:1a:6b:1e:dc:27:
                    45:ea:58:8a:fd:ed:2d:38:da:e5:41:e3:c0:0d:17:
                    cd:e1:f9:7b:a2:84:af:b5:a9:0b:f8:59:f4:b8:20:
                    04:3c:35:5b:fb:03:4c:5c:b6:96:e9:66:33:ea:93:
                    31:83:85:cf:30:92:41:15:15:82:d8:ce:5d:e4:59:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5C:36:6C:C0:0C:4A:1A:C7:6B:56:42:B1:22:85:A7:A3:C0:01:31
            X509v3 Authority Key Identifier:
                keyid:AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/323830343a323737383a3a2f33322d3438203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2778::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:eb:db:b3:9c:f1:ac:c7:3a:1f:e7:d9:8b:dc:bf:a3:66:
         d8:4d:a5:3e:26:61:ad:f2:6f:08:a4:bb:16:5d:96:dc:e9:28:
         16:25:85:94:60:9b:a8:80:ee:a3:6c:4e:c3:96:94:04:73:c4:
         eb:89:93:7e:f8:8c:34:ff:55:95:73:29:7b:40:9c:14:47:2b:
         05:2e:0a:0f:d8:20:ac:59:e2:83:e6:8a:85:92:20:96:cb:1f:
         9f:02:3f:2e:bd:de:03:5c:2d:38:92:04:46:9e:5f:f2:58:7e:
         6e:d6:c9:e6:5a:6f:e2:85:fb:55:77:29:30:63:ef:0f:31:58:
         7e:ac:62:df:b7:32:bd:43:92:cc:b7:fb:4d:1b:eb:9f:31:95:
         ad:11:5e:1f:c2:75:67:9c:2e:c8:10:3d:ba:5a:75:69:fb:b9:
         de:6f:c7:1f:04:da:71:9e:be:77:0f:75:c3:45:0a:2c:35:f2:
         af:9f:de:e7:91:83:9b:54:ab:65:65:b5:80:cc:13:cc:3e:4f:
         79:95:d2:f9:59:34:7d:fd:62:f6:e6:bf:47:6c:ce:29:fd:6f:
         71:5a:6a:5b:d1:2c:3c:7a:3b:c1:45:bd:22:65:94:23:65:80:
         64:3a:10:85:9d:90:9b:a0:9f:e8:77:70:3b:66:7a:18:48:12:
         f7:74:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org