Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373561613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a373561613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          S0+WUa0ssIBgetrrUypmE4YL5x3rEqpndgFhv45MAR0=
Subject key identifier:   87:5C:09:60:9D:7B:38:93:B2:C7:D1:2B:99:3B:EA:F9:7E:54:2D:88
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       4EF9A83E47BC4D1C6760BBEF70487055EB2851DE
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373561613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:49 +0000
ROA not before:           Wed 03 Apr 2024 18:26:49 +0000
ROA not after:            Wed 02 Apr 2025 18:31:49 +0000
asID:                     266623
IP address blocks:        2804:3ed4:75aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f9:a8:3e:47:bc:4d:1c:67:60:bb:ef:70:48:70:55:eb:28:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:49 2024 GMT
            Not After : Apr  2 18:31:49 2025 GMT
        Subject: CN=875C09609D7B3893B2C7D12B993BEAF97E542D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:a1:23:a8:e4:de:19:69:8a:f4:56:68:63:
                    db:64:b5:08:eb:0e:d5:b6:3d:36:26:17:73:4b:77:
                    b9:5f:1b:8f:c3:44:c9:a2:9e:76:9b:29:99:2a:0e:
                    71:8d:a2:1a:15:aa:ec:6b:5e:85:9b:3d:d2:98:8d:
                    63:1b:09:c8:08:36:74:34:c3:de:7e:98:86:b7:f7:
                    eb:fa:a1:88:5e:1e:cf:be:7b:47:5d:4b:36:98:19:
                    34:0c:bf:ef:a0:5f:69:d1:98:02:59:dd:16:07:36:
                    78:68:71:73:58:92:ff:76:0e:87:2f:ac:d6:d8:62:
                    ec:e0:2b:09:5b:7c:09:58:f0:cc:80:26:43:a2:e6:
                    bb:36:9f:c9:3a:32:c6:5b:bf:78:ff:db:da:fd:b4:
                    23:0e:ee:a5:c1:b9:44:08:88:d3:9b:3d:17:2c:5d:
                    cc:ec:25:5f:b6:52:ee:4b:7c:7d:aa:43:6b:c0:e7:
                    b8:ec:f9:72:d1:df:ac:c7:dd:57:e4:97:f4:eb:3b:
                    27:a8:24:da:fb:97:95:d0:cf:2b:92:22:cb:90:22:
                    45:69:67:6f:48:a7:e4:4a:fc:17:a6:c9:0a:91:f8:
                    52:eb:cf:9b:57:d2:18:6b:46:9c:42:b1:5c:33:e3:
                    ac:87:f6:66:d8:4e:ff:30:e3:d6:ca:23:2e:fb:bc:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5C:09:60:9D:7B:38:93:B2:C7:D1:2B:99:3B:EA:F9:7E:54:2D:88
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373561613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:75aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:82:41:3c:be:08:7f:5e:fa:95:82:df:12:7e:f6:8d:29:
         ef:49:11:ab:b0:f6:15:fe:26:5f:72:bb:9d:24:bb:0b:ea:0a:
         84:8c:7d:ad:f8:f1:cd:67:63:9d:8c:2e:30:ae:a0:2f:2c:5e:
         9c:b5:d3:b5:3a:c5:6f:7b:19:c8:de:cf:a8:d0:c2:87:e1:51:
         bc:a9:fd:ba:7b:1d:12:c0:99:28:74:a5:f5:ad:d3:ba:16:59:
         a1:ee:a9:ab:3e:5f:4d:1f:39:de:53:54:7f:8d:8f:6d:40:33:
         9c:8b:08:0b:7c:7a:b1:b1:8e:d4:61:bc:a4:a8:c1:c6:31:0b:
         71:fd:d0:f3:08:26:ba:cf:f1:9a:70:25:09:10:95:f9:e3:c9:
         bd:d0:d9:b9:e8:fc:53:ac:1b:a9:e3:1d:d9:10:4d:47:72:20:
         89:ac:87:2b:40:e1:44:21:dc:0d:2d:a9:f9:0a:d4:c3:b8:24:
         4d:04:c8:00:d4:b3:7f:5b:9d:77:c6:bf:fe:97:99:ef:a9:b9:
         f9:ed:98:da:e6:da:f1:d2:29:91:2d:0b:02:6a:ed:54:b1:29:
         a1:fe:08:a5:d9:94:a8:07:7c:ad:35:74:fc:85:17:4a:c9:40:
         c9:f5:a3:14:d9:62:9d:9d:6c:4e:20:1a:0d:b6:e0:af:43:42:
         40:d3:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org