Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          HRtmVP6lmpoTsVNq/rXGmuD+9H/RmBt0NrlOiDkKEKA=
Subject key identifier:   BA:26:4E:26:A6:07:D1:55:7D:56:B2:30:DE:2F:B7:3D:A7:7F:4F:85
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       468D1868B9BE8A3942EEF2DA22CAB0B75A1E4F2F
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     266623
IP address blocks:        2804:3ed4:30aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:18:68:b9:be:8a:39:42:ee:f2:da:22:ca:b0:b7:5a:1e:4f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject: CN=BA264E26A607D1557D56B230DE2FB73DA77F4F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:54:47:2a:c4:e0:6d:e0:fc:44:e1:d5:19:
                    f5:11:65:f7:ea:c4:c8:4b:d0:e8:82:ff:0b:61:a1:
                    22:90:b8:58:8d:e0:f0:f1:76:7d:fb:d7:96:f7:e7:
                    10:c3:b9:55:93:4f:a4:e2:1b:09:8b:b2:db:64:95:
                    dd:6a:6c:ca:49:9a:f6:e7:69:e0:75:d3:07:69:ab:
                    e5:71:e7:16:ce:80:12:b2:6d:68:83:24:00:3b:f9:
                    ec:ce:2e:5b:5d:6c:6f:c6:ab:91:6f:35:57:67:c3:
                    f6:8a:34:7a:cf:fd:9e:0b:2e:0f:68:13:e9:f3:94:
                    a4:4a:3f:02:1c:ba:d1:34:5f:d7:b8:ac:ff:24:69:
                    bf:4e:ae:50:0e:3f:fa:88:b0:6a:c9:39:7f:72:5c:
                    3b:8d:ad:49:df:8c:95:c7:9f:a3:ad:f6:91:a2:d2:
                    06:db:a8:b9:b7:5b:39:7c:b5:96:5d:c3:34:a8:95:
                    8c:86:84:62:15:56:d5:f5:39:02:ce:89:99:f6:0d:
                    0a:c3:0a:98:96:21:24:0a:04:ac:3c:95:cf:52:ff:
                    ef:b5:64:9d:e0:c1:cc:47:db:9a:26:de:d2:86:14:
                    fc:31:f2:fd:2e:a9:f6:d6:e3:2f:aa:ee:1f:2d:c8:
                    0b:06:4c:49:d9:4d:c8:ee:c6:2e:9b:61:eb:99:98:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:26:4E:26:A6:07:D1:55:7D:56:B2:30:DE:2F:B7:3D:A7:7F:4F:85
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:30aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:ae:f1:d0:5e:e3:ad:73:b4:84:a8:1e:08:b0:37:09:0a:
         6f:68:e3:34:95:d0:98:ae:4e:eb:70:f0:13:7f:f9:a1:be:87:
         06:7f:ad:db:ee:3f:89:08:f4:01:8c:1a:fa:d4:71:d4:1a:c9:
         5a:38:c4:bb:c6:cd:48:99:95:df:a7:7b:ef:20:88:f4:6b:58:
         11:81:cd:41:80:50:75:f4:33:36:a8:e7:ad:23:9b:fb:4e:15:
         76:29:13:ba:40:ac:09:77:6d:93:f1:69:6b:c7:f4:49:06:c8:
         72:6c:0c:ef:d7:ef:bc:37:1a:15:17:2b:2f:4f:b5:59:55:e4:
         a0:62:68:8b:8c:0c:c4:d0:18:71:c4:68:6d:d4:8f:af:f8:46:
         aa:59:13:62:2b:c7:b7:a5:fa:2c:84:a0:75:24:6f:cb:8e:9c:
         b2:be:5b:3c:2d:8c:5b:b3:ef:72:87:7d:3c:fb:c7:e3:4f:de:
         d3:3d:d4:fe:62:c2:df:17:83:db:00:ee:21:d0:54:24:32:36:
         43:c0:63:40:ea:e9:37:3e:10:3f:97:2d:08:4f:ed:ff:59:86:
         62:34:51:1a:5a:3a:31:07:83:af:af:0b:86:ae:a1:10:7c:79:
         31:c5:88:5a:9f:ba:07:c5:52:84:e3:86:79:cd:f6:12:83:c8:
         19:58:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org