Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          VzLBnTiYD2ckhPdtPUk3oeigs1INtXw9EoAVMzDtt3s=
Subject key identifier:   E6:A6:35:14:2D:1D:69:1B:09:E0:40:5D:31:F8:51:58:F9:4B:C3:4A
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       2233FACEA1ECA4D4474C6C181A75E4CD3836771E
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:55 +0000
ROA not before:           Thu 04 Apr 2024 07:23:55 +0000
ROA not after:            Thu 03 Apr 2025 07:28:55 +0000
asID:                     263146
IP address blocks:        2804:1778:6000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:33:fa:ce:a1:ec:a4:d4:47:4c:6c:18:1a:75:e4:cd:38:36:77:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:55 2024 GMT
            Not After : Apr  3 07:28:55 2025 GMT
        Subject: CN=E6A635142D1D691B09E0405D31F85158F94BC34A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:dc:98:6b:fc:af:71:36:6e:a4:56:2d:f1:
                    48:f4:83:ec:31:e4:d8:a6:eb:0c:6d:db:d0:f9:a2:
                    5f:54:b9:6f:95:a8:72:04:b2:5a:0d:d8:58:8f:e9:
                    c4:b4:1e:c6:46:33:d8:62:29:87:93:2a:dc:18:68:
                    fb:c0:cf:c3:c8:bb:cc:df:76:f6:8b:a0:39:3d:89:
                    ba:18:8e:f9:90:14:73:7e:04:65:8f:76:a4:8b:eb:
                    d6:fe:fa:f8:99:fb:14:be:9b:77:d1:17:9c:e6:9e:
                    a9:83:72:1c:c7:aa:b9:f5:9c:db:3d:5b:b4:00:1e:
                    87:b7:f7:4d:3d:ee:a5:42:2a:36:0d:27:8e:53:14:
                    3d:e1:86:46:8e:c5:b3:a9:8c:36:0b:03:38:aa:bf:
                    b1:5b:14:3c:3a:9b:fb:7a:94:da:0a:4e:8c:5c:78:
                    00:7d:85:95:2c:ea:b7:7b:b3:0d:91:9a:2c:9d:88:
                    37:06:0a:7f:1b:ea:3b:73:64:80:9c:70:92:c0:bd:
                    9c:34:1b:3d:a2:03:8a:74:21:60:8d:5e:c0:21:0b:
                    19:c3:c3:e3:30:76:43:84:95:25:26:2e:76:1b:09:
                    1f:b7:e7:b8:f0:c2:c4:18:28:a5:ef:83:ab:5b:92:
                    9e:91:50:1a:04:0f:ac:17:b6:ff:8e:f1:b7:dd:c4:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A6:35:14:2D:1D:69:1B:09:E0:40:5D:31:F8:51:58:F9:4B:C3:4A
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:13:7d:c6:3a:7f:9f:c4:c3:fa:41:f0:e8:59:3f:ba:ad:
         af:50:31:b3:32:f0:6f:ce:28:6d:f1:7e:0f:fb:ab:f9:3f:d0:
         be:a2:d4:25:6a:08:ca:54:02:c2:ac:89:8f:f7:db:b1:a7:63:
         7b:83:ff:a0:ba:57:dc:e1:6e:4b:b0:62:62:12:22:22:2b:37:
         07:3f:17:e6:b1:60:ec:5d:36:71:49:74:9b:34:04:4a:c8:62:
         04:c8:13:ee:f1:55:ac:ca:35:cf:84:95:f6:77:a6:ec:a0:4f:
         d5:5c:3c:10:a0:16:b3:04:ee:d7:cd:cb:93:67:58:58:23:95:
         90:6b:5a:3a:b3:10:a4:78:9a:db:02:6b:2d:52:a3:3d:e6:05:
         d7:d0:7c:74:fb:23:1c:c8:29:34:4e:b9:d1:c2:a8:54:5c:d5:
         c2:23:0f:0a:92:54:67:0b:62:e4:be:ff:e2:e0:b3:10:99:ae:
         3a:ad:35:b5:af:2d:b1:a8:8c:b4:63:60:04:14:ff:1e:96:88:
         78:38:b7:ca:32:ac:8c:d5:89:8a:15:09:f2:9b:56:95:21:71:
         7a:2f:e4:cb:47:cf:5a:df:00:2e:8e:4b:ac:93:a8:38:e5:d9:
         de:6f:8b:2e:a6:14:ba:83:1f:5f:e6:75:e8:ee:fd:0e:35:55:
         96:cf:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org