Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
File:                     323830343a3133383a3a2f33322d3337203d3e203131343332.roa (raw, json)
Hash identifier:          iLjiZiG3ddzgl7bWD6ble9YgFY4gbegKJ20qhD5O1jA=
Subject key identifier:   F3:F8:E2:D6:B8:37:2C:2A:F0:BC:26:5C:23:CE:60:B8:54:04:95:BE
Certificate issuer:       /CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Certificate serial:       40F306905D54373FD1C082B999BC46FA8FBBCE6A
Authority key identifier: D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
Signing time:             Thu 04 Apr 2024 15:41:15 +0000
ROA not before:           Thu 04 Apr 2024 15:36:15 +0000
ROA not after:            Thu 03 Apr 2025 15:41:15 +0000
asID:                     11432
IP address blocks:        2804:138::/32 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f3:06:90:5d:54:37:3f:d1:c0:82:b9:99:bc:46:fa:8f:bb:ce:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
        Validity
            Not Before: Apr  4 15:36:15 2024 GMT
            Not After : Apr  3 15:41:15 2025 GMT
        Subject: CN=F3F8E2D6B8372C2AF0BC265C23CE60B8540495BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:6e:26:7f:89:c7:a7:c4:2d:ac:57:28:fa:
                    ca:4d:76:41:0a:14:12:57:1c:44:01:42:3d:a1:95:
                    8b:58:5b:45:69:cd:50:c0:7b:bb:76:82:7e:d0:a9:
                    8a:18:59:8b:74:de:0a:09:1f:48:79:67:31:d7:71:
                    10:eb:bf:05:90:0b:b1:d5:63:6a:7f:b9:b3:69:7f:
                    44:70:0a:15:0d:a6:70:89:10:59:5d:9b:3a:84:cf:
                    3c:65:1c:59:0e:ae:3b:ea:60:47:e8:2a:b3:4d:e6:
                    64:91:9d:ab:11:8b:fe:b0:b7:3c:39:fe:0b:a9:05:
                    00:46:9a:9e:0c:21:23:16:5a:88:59:f9:83:5a:3f:
                    71:3a:d8:81:d8:91:04:fe:dd:8f:db:30:e1:5e:d1:
                    38:c5:06:5c:94:5e:a9:a1:3a:e3:38:1f:c9:d9:ae:
                    dd:f3:8d:0f:a1:ad:c0:2d:48:7f:d1:a3:35:a3:97:
                    84:e5:78:b1:48:4c:cb:94:75:77:11:16:e3:6b:eb:
                    cf:ba:21:d3:8a:55:f5:cc:5c:ca:71:00:32:08:19:
                    0b:ec:09:66:91:2d:d3:77:e0:88:df:3a:c7:f2:d8:
                    6f:1f:4d:ab:1f:b8:19:d4:cc:f7:05:80:77:7a:2f:
                    b6:69:3d:34:a4:d9:66:72:83:a6:bf:61:a5:0f:3f:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F8:E2:D6:B8:37:2C:2A:F0:BC:26:5C:23:CE:60:B8:54:04:95:BE
            X509v3 Authority Key Identifier:
                keyid:D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:138::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:78:de:66:4f:3d:5a:86:73:1f:dd:0e:45:56:d4:dd:09:85:
         38:e6:fe:4c:d8:9d:05:18:95:15:b2:ec:03:c7:11:09:23:a1:
         6c:38:23:c3:62:a7:56:59:82:b3:d5:24:81:c4:70:ba:08:cc:
         e1:fc:a6:42:6f:2c:d8:56:f2:e4:e6:40:81:54:99:19:f8:16:
         85:6b:41:b5:2f:17:b7:c9:5b:b6:bc:72:95:db:1e:5f:3f:b7:
         50:00:78:43:62:eb:87:82:e4:13:ef:c6:a5:b4:cf:58:62:2a:
         94:43:41:b5:3b:57:33:b0:25:39:2f:cb:f7:b2:42:29:fb:37:
         34:30:e2:3f:56:25:e3:98:d0:2a:66:f8:e7:8a:1b:b4:70:c3:
         67:f3:93:a4:36:83:69:e1:55:21:45:50:7e:27:41:c4:50:3a:
         c2:14:6d:c7:1c:c1:c1:e8:3b:5d:9e:9a:88:f7:42:c1:b1:4b:
         c7:6a:f6:8e:a1:33:20:36:3d:95:ae:84:1e:d5:56:aa:02:29:
         d4:47:86:48:f3:eb:3a:75:73:1c:44:c0:96:fb:4c:16:8c:c0:
         52:3a:53:e8:1a:6b:13:90:7f:65:c0:ec:14:e7:4f:4c:57:74:
         c8:89:5d:c8:04:74:b0:99:48:6b:1f:aa:80:c3:e6:ef:b0:ab:
         19:f7:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:57 2024 by rpki-client on console-ams.rpki-client.org