Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33342d3334203d3e20323636363233.roa
File:                     323830343a336564343a3a2f33342d3334203d3e20323636363233.roa (raw, json)
Hash identifier:          XpYYkyakuOoSSzhV0MwrBkCOseQOzn7FTKcdlp7YlR0=
Subject key identifier:   C4:DB:98:5F:65:10:E5:7B:9C:CD:71:9A:97:DE:5F:CC:4D:6F:74:BE
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       749F4D1155BCCCC6377DF22912E2D49A9BBB5A0C
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33342d3334203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:49 +0000
ROA not before:           Wed 03 Apr 2024 18:26:49 +0000
ROA not after:            Wed 02 Apr 2025 18:31:49 +0000
asID:                     266623
IP address blocks:        2804:3ed4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9f:4d:11:55:bc:cc:c6:37:7d:f2:29:12:e2:d4:9a:9b:bb:5a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:49 2024 GMT
            Not After : Apr  2 18:31:49 2025 GMT
        Subject: CN=C4DB985F6510E57B9CCD719A97DE5FCC4D6F74BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:42:a7:2f:99:fe:9a:c0:23:cb:c2:b0:4c:
                    a4:79:a6:b8:7d:a9:98:45:8a:14:6a:7d:0c:91:23:
                    46:70:d6:a8:46:79:bb:29:59:70:76:60:1a:c0:72:
                    74:c8:98:08:28:b4:df:67:81:75:57:fa:7f:74:be:
                    e2:12:49:3c:12:00:66:fe:e0:43:8d:c5:19:fd:da:
                    d3:c8:ee:96:71:77:d8:8a:f6:0b:b0:12:ad:09:fb:
                    df:c2:87:c6:1e:fd:55:f4:ad:91:15:f5:11:4d:7d:
                    8e:33:73:42:28:4e:b8:46:de:22:b1:a8:ae:10:9a:
                    1e:f8:86:52:92:1c:f5:c6:43:24:3d:70:81:d3:fe:
                    a4:ab:d4:25:dd:0a:ea:cf:d3:5d:14:a6:15:39:76:
                    09:c0:c8:64:96:6f:9c:b7:83:67:3b:21:c5:95:39:
                    5e:00:96:19:45:4f:b5:c1:bf:55:4f:1b:c5:75:f9:
                    0a:c0:9a:29:12:c2:ae:d2:67:e3:93:a9:09:36:d7:
                    f5:d8:ec:69:f1:f9:05:30:d3:a2:46:fb:54:b9:1b:
                    69:09:40:a8:59:3f:0b:9b:5b:f7:50:81:5a:47:c0:
                    ff:51:7c:4d:9c:0a:56:d1:66:7c:22:2b:a7:fc:57:
                    0e:80:28:b6:01:37:01:8f:c4:68:83:de:f0:23:ec:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DB:98:5F:65:10:E5:7B:9C:CD:71:9A:97:DE:5F:CC:4D:6F:74:BE
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33342d3334203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:af:c5:66:b2:78:68:9d:c8:c2:07:8f:97:cb:0f:5a:45:b6:
         d2:be:22:3f:cf:96:15:34:bf:15:53:52:03:fb:6f:1a:84:49:
         51:3d:68:5a:bc:19:60:49:a1:2b:ae:da:25:e9:62:d5:16:a2:
         31:fc:b0:c9:6e:00:ac:68:4a:b5:68:01:4c:2a:b4:95:e7:d4:
         86:32:2f:fd:43:e4:8b:e4:af:d8:48:cb:e9:0f:4d:21:b0:b4:
         f5:b9:d2:b6:49:37:ae:da:21:d9:6b:83:7a:ad:b1:46:c9:ed:
         02:bc:20:40:a4:c9:2b:f2:62:af:77:59:71:6f:f1:c5:46:f1:
         7f:05:6a:7b:69:0e:81:30:c6:9e:03:4c:ad:be:7c:b8:7a:13:
         9d:f5:0b:38:7c:cc:44:db:cf:05:06:8f:b7:73:76:c5:7b:69:
         56:d8:fa:08:ec:90:2f:5c:1f:1b:88:ee:a6:37:97:73:d6:2f:
         aa:21:de:53:be:a3:fd:04:5c:3c:17:5e:25:b6:2b:34:b7:ad:
         e9:57:93:76:e1:9a:c2:f6:27:34:f4:8b:6e:0f:81:3d:c7:fa:
         4a:8f:8f:32:fd:29:61:1f:d0:37:82:fe:00:4c:96:60:50:54:
         9a:e4:a3:89:4b:b8:67:b5:26:98:42:fb:a0:fd:c7:2c:a6:af:
         3f:13:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org