Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa
File:                     323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa (raw, json)
Hash identifier:          YyrqtoTeimY8IrChFSfyJm2XBSno8Fkn6xCl9DUE6Ls=
Subject key identifier:   36:0F:62:5A:1E:B5:F3:38:29:46:2B:BC:BF:8E:63:F2:83:37:97:18
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       94A80E9CA0AE0CFC4203F90B6DD68388545E9E
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa
Signing time:             Wed 03 Apr 2024 22:21:42 +0000
ROA not before:           Wed 03 Apr 2024 22:16:42 +0000
ROA not after:            Wed 02 Apr 2025 22:21:42 +0000
asID:                     270652
IP address blocks:        2804:6f50:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            94:a8:0e:9c:a0:ae:0c:fc:42:03:f9:0b:6d:d6:83:88:54:5e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Apr  3 22:16:42 2024 GMT
            Not After : Apr  2 22:21:42 2025 GMT
        Subject: CN=360F625A1EB5F33829462BBCBF8E63F283379718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:5d:5e:7b:b8:66:3a:7a:be:04:6c:d6:56:
                    c0:3f:c6:a5:a6:a0:53:96:f3:75:c1:9a:b9:85:8f:
                    5d:c9:ee:29:62:93:31:02:e4:50:b4:5e:be:3e:6c:
                    e6:45:8c:8b:47:38:6e:77:e5:bf:0a:bd:65:cb:b8:
                    1d:4a:c5:ef:19:2f:4a:70:d9:6d:1c:8f:56:86:a6:
                    9c:b7:5c:0c:7f:73:ef:64:74:ee:2b:fd:c5:01:9f:
                    3d:7c:0e:80:49:06:57:41:7b:f3:6e:cf:85:16:d2:
                    c7:4d:ab:72:17:19:ee:a0:58:79:82:51:73:ff:ac:
                    48:9f:4b:e4:21:d7:ef:da:09:96:85:85:fa:14:ad:
                    ab:96:ad:9f:94:b0:07:03:47:80:c1:a0:cb:8d:19:
                    e9:d0:4d:8e:31:2d:7e:56:9b:b5:91:06:81:ab:0c:
                    59:23:54:72:b3:21:4f:0b:f2:c0:2b:82:15:35:ba:
                    ff:84:0d:3b:fe:d4:4a:f6:eb:3c:28:40:d8:02:a0:
                    0f:89:6e:07:7b:41:7a:7f:ba:89:c0:de:0d:d9:df:
                    4a:8f:f6:38:b3:a9:36:4b:dc:64:d7:82:f9:4d:b3:
                    20:2c:78:14:85:86:df:69:31:85:ce:a7:0b:2b:4b:
                    72:7e:db:56:3f:86:69:c3:76:b3:36:2c:f2:e5:4d:
                    f8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0F:62:5A:1E:B5:F3:38:29:46:2B:BC:BF:8E:63:F2:83:37:97:18
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f50:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:74:11:35:a0:80:8f:8c:4c:24:6c:78:19:0b:61:e6:16:e2:
         b4:07:6b:06:e7:d3:fb:2f:bf:2e:2a:f6:18:bc:05:fc:c8:89:
         d8:e1:cc:26:4b:0c:7e:50:ad:5f:aa:62:a5:a1:37:74:45:2f:
         e0:ab:cd:15:0d:8a:4a:fb:a9:a6:81:d5:9e:8f:1c:e0:ee:0b:
         e9:16:f0:7a:0a:c9:5c:03:13:9d:4c:b2:60:4e:d9:2c:a0:de:
         79:40:3f:1c:6c:c8:90:72:59:8d:1f:2c:fe:42:9d:2e:7e:93:
         1b:52:75:9f:59:d8:f4:d9:1c:7c:34:a0:10:41:85:cb:fd:7e:
         d6:f8:ae:a1:09:7b:2a:a3:ba:71:c7:ab:8a:55:40:95:64:d9:
         4c:c1:f8:78:6c:b2:54:b7:38:56:e2:42:84:4a:b9:69:1e:23:
         71:33:75:17:9c:c0:b6:9e:45:5c:21:37:c5:f8:56:47:45:91:
         e7:8b:81:ab:66:a2:57:50:37:55:76:53:24:d2:70:a2:fd:61:
         be:61:c4:f3:be:c0:2c:25:90:44:87:a3:58:c1:3e:ee:e9:1b:
         0e:cc:84:ff:8e:35:68:08:2a:f2:91:9f:da:1c:17:4d:cb:a2:
         ec:2e:57:3c:43:d5:ec:32:a9:53:e5:73:1a:56:34:c7:8e:18:
         61:fe:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org