Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3a2f34302d3430203d3e20323730363532.roa
File:                     323830343a366635303a3a2f34302d3430203d3e20323730363532.roa (raw, json)
Hash identifier:          RS3siwTfafy09WbQfiSCnQ5gE8W2thvCSn5qT6GgXL4=
Subject key identifier:   23:6F:A0:EB:94:D4:9B:82:2D:27:F1:E9:9E:5A:3C:9C:A7:33:C7:C2
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       7D55430C1CE345D741E852E0A850208DDE2CC7D4
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3a2f34302d3430203d3e20323730363532.roa
Signing time:             Wed 03 Apr 2024 22:21:42 +0000
ROA not before:           Wed 03 Apr 2024 22:16:42 +0000
ROA not after:            Wed 02 Apr 2025 22:21:42 +0000
asID:                     270652
IP address blocks:        2804:6f50::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:55:43:0c:1c:e3:45:d7:41:e8:52:e0:a8:50:20:8d:de:2c:c7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Apr  3 22:16:42 2024 GMT
            Not After : Apr  2 22:21:42 2025 GMT
        Subject: CN=236FA0EB94D49B822D27F1E99E5A3C9CA733C7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:04:a1:d4:62:97:07:ec:2b:76:68:26:7e:
                    29:a7:12:24:9b:ea:9e:79:6e:c5:1a:88:a0:dd:9b:
                    d2:88:25:ae:59:a6:28:29:8c:92:50:4c:42:65:5d:
                    53:7e:22:7b:73:b9:d2:cf:96:0e:09:58:9a:ef:fa:
                    60:97:7b:b1:19:af:d1:81:3a:16:52:7a:13:c2:b2:
                    c6:51:01:7b:e6:0e:8b:8f:e8:c5:bd:26:4c:98:63:
                    89:13:ec:e2:45:09:3d:25:39:41:99:6e:06:02:f3:
                    82:43:6f:83:f6:89:ee:3c:62:b7:e5:f0:66:73:46:
                    ec:c9:54:5e:50:61:40:fb:02:88:a4:c0:7d:97:19:
                    05:b3:22:05:08:67:b0:7a:fc:86:ab:75:8b:08:86:
                    1d:bc:21:ed:8b:19:9f:43:49:65:8e:a7:30:8c:84:
                    7b:38:70:26:d7:5c:82:05:56:46:f5:41:6f:ec:db:
                    11:31:03:3c:54:29:44:d6:79:84:5b:86:1c:da:a4:
                    98:3a:30:81:f3:2f:13:46:07:c4:3c:54:90:dd:bb:
                    f2:4c:cf:ee:0f:4f:31:33:3d:89:73:37:e9:7e:78:
                    0f:31:b0:82:43:b6:f7:87:d2:a6:11:bf:87:cf:13:
                    79:29:7a:e6:04:f3:88:d3:f2:5b:cc:70:28:2c:59:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:A0:EB:94:D4:9B:82:2D:27:F1:E9:9E:5A:3C:9C:A7:33:C7:C2
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3a2f34302d3430203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f50::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:19:98:b9:35:4e:3d:0b:3e:54:02:f2:34:43:96:e6:db:06:
         27:cf:e9:8d:fa:e3:6a:33:27:aa:0e:91:24:34:ee:9f:91:12:
         d1:74:8a:aa:3b:84:76:98:bd:0f:9c:14:5c:94:df:49:62:cd:
         49:41:8f:b2:0b:45:2c:05:49:de:ec:a1:49:8c:01:5d:9e:55:
         37:48:11:0e:0f:05:b7:05:17:5a:d6:15:91:4a:ae:82:07:be:
         2c:92:cd:18:27:2c:eb:c6:28:94:5e:76:ea:c7:72:ff:28:5c:
         75:7c:ee:ba:a6:65:91:62:a0:2e:08:72:ac:b7:c4:b9:f0:c4:
         c0:b1:61:8a:02:f0:a4:48:4c:ce:35:40:19:b4:7f:4d:c7:fa:
         11:af:98:19:cd:5c:1d:bf:d5:1a:22:44:93:6f:8c:98:21:88:
         d6:82:6f:72:4c:52:35:51:22:ba:b2:6b:af:f6:de:9e:91:85:
         ba:f2:c4:73:d3:4a:23:86:6e:13:8b:06:ca:42:94:31:8e:c8:
         cc:b7:d0:cb:ca:12:9e:17:b5:2a:64:71:a7:c1:7f:1e:78:96:
         f1:b1:fa:72:02:59:12:3d:3a:b3:28:28:82:84:eb:52:78:f0:
         6c:8c:69:c3:47:6c:14:75:e9:0a:87:30:54:d1:2d:56:41:e8:
         dc:05:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org