Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/323830343a363231633a3a2f33322d3438203d3e20323639323736.roa
File:                     323830343a363231633a3a2f33322d3438203d3e20323639323736.roa (raw, json)
Hash identifier:          /fOGcAHZy72uHLzHhHT0fg3vA96Gon/gQK15ynUZBGs=
Subject key identifier:   85:B6:2C:7D:E1:4A:F3:51:42:C4:8E:11:82:93:AB:80:B6:A6:81:EA
Certificate issuer:       /CN=BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F
Certificate serial:       5DA6C8F5C2D12F46D711E61FFB2D059F71A92674
Authority key identifier: BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/323830343a363231633a3a2f33322d3438203d3e20323639323736.roa
Signing time:             Tue 24 Sep 2024 14:19:49 +0000
ROA not before:           Tue 24 Sep 2024 14:14:49 +0000
ROA not after:            Tue 23 Sep 2025 14:19:49 +0000
asID:                     269276
IP address blocks:        2804:621c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.crl
                          rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a6:c8:f5:c2:d1:2f:46:d7:11:e6:1f:fb:2d:05:9f:71:a9:26:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F
        Validity
            Not Before: Sep 24 14:14:49 2024 GMT
            Not After : Sep 23 14:19:49 2025 GMT
        Subject: CN=85B62C7DE14AF35142C48E118293AB80B6A681EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:09:d9:e0:a4:92:b6:17:c3:10:21:09:e4:
                    73:ac:2d:43:0d:91:5d:b2:c4:a9:bf:93:0e:6c:5e:
                    66:26:95:51:c8:b4:32:be:cb:22:9b:5f:7d:06:4d:
                    88:3a:de:28:8f:08:51:08:f8:f5:94:0a:10:48:3d:
                    b2:d7:28:36:83:64:f3:eb:f6:22:de:99:db:1b:54:
                    f3:88:37:9c:1e:9c:ef:5e:f5:90:74:f9:51:af:a6:
                    0e:81:98:62:fc:cf:c3:b4:fd:bd:13:6e:54:a9:fe:
                    c4:8f:e1:15:2e:e6:b0:10:d2:c3:ad:3d:c9:e2:83:
                    c8:51:d1:09:81:ae:63:9d:3a:d5:c7:07:3c:88:67:
                    08:ae:7d:6f:cf:9b:48:fc:cb:72:53:b1:ca:f1:a6:
                    5f:03:15:ad:08:c9:97:01:12:67:d0:85:a4:ec:bb:
                    07:f7:99:b8:6a:a0:d8:90:c0:b4:da:60:65:c1:a0:
                    d8:05:8c:c2:d5:f5:06:a3:9a:55:34:84:6e:d3:33:
                    cc:0a:1b:b4:0d:90:1d:af:4f:28:bc:60:a2:2b:6a:
                    6d:c3:ce:b4:cb:ab:7c:2a:be:22:51:19:63:a2:e7:
                    2d:27:e1:74:bd:ca:b6:a1:4b:0f:7b:8f:f2:a3:7a:
                    5c:9f:76:89:d9:50:51:0c:7d:2b:f2:69:2c:14:7f:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B6:2C:7D:E1:4A:F3:51:42:C4:8E:11:82:93:AB:80:B6:A6:81:EA
            X509v3 Authority Key Identifier:
                keyid:BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/323830343a363231633a3a2f33322d3438203d3e20323639323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:621c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:87:60:40:bd:19:b0:a5:c1:c5:79:fd:fe:59:c3:30:b6:d8:
         b9:6d:df:03:04:cf:02:7f:b4:e2:38:29:ce:1b:8b:07:e3:32:
         cd:81:78:b1:24:bb:6a:dc:2a:66:2c:23:48:61:ab:b5:85:2f:
         64:77:c4:92:45:a4:ac:ee:46:d9:c3:42:ca:7b:04:52:af:f9:
         97:e5:f1:80:26:db:15:3e:14:c5:52:90:66:f8:60:4b:49:89:
         ce:2b:ea:70:14:83:e8:2a:a2:06:6e:6d:d4:aa:29:a4:a7:87:
         1d:9c:83:c2:b1:86:19:96:e8:75:20:76:90:ce:f7:ee:d1:7b:
         80:2c:b3:23:e3:39:31:06:18:54:15:d7:d3:83:15:c0:a8:a1:
         0c:b0:d1:95:ba:89:1f:d2:af:55:51:73:95:76:8d:c0:e5:3b:
         39:a1:66:bf:73:13:8a:69:38:38:75:61:11:8c:6d:6f:5d:77:
         3d:11:19:78:68:dd:df:18:d4:49:22:91:87:f3:1c:ba:ee:db:
         6c:7c:c5:37:26:ab:8a:a6:0e:13:32:6a:56:21:99:8e:1e:9d:
         d8:2f:27:af:e5:37:b5:18:9b:8b:cd:b6:f9:fe:21:56:67:d6:
         d0:7f:39:cd:ee:dc:c6:06:b1:4c:b0:d5:00:94:55:4d:35:28:
         c0:65:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org