Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/323830343a326466343a3a2f33322d3438203d3e20323635333134.roa
File:                     323830343a326466343a3a2f33322d3438203d3e20323635333134.roa (raw, json)
Hash identifier:          1ucmUe6Yj4jDoC3eHIRST24eXXKytV90mWb8+diRJlo=
Subject key identifier:   E3:84:E4:6D:3A:D8:A6:51:7E:CD:5B:86:EB:46:8A:09:51:96:68:DC
Certificate issuer:       /CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
Certificate serial:       08280CA46A0672F0F3B3AA4318DCA3F21EC6FDB8
Authority key identifier: 6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/323830343a326466343a3a2f33322d3438203d3e20323635333134.roa
Signing time:             Wed 15 May 2024 14:59:56 +0000
ROA not before:           Wed 15 May 2024 14:54:56 +0000
ROA not after:            Wed 14 May 2025 14:59:56 +0000
asID:                     265314
IP address blocks:        2804:2df4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl
                          rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:28:0c:a4:6a:06:72:f0:f3:b3:aa:43:18:dc:a3:f2:1e:c6:fd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
        Validity
            Not Before: May 15 14:54:56 2024 GMT
            Not After : May 14 14:59:56 2025 GMT
        Subject: CN=E384E46D3AD8A6517ECD5B86EB468A09519668DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:ae:23:71:f3:02:ca:fd:97:54:60:18:26:
                    12:65:3f:93:ef:5c:b4:3d:91:ea:df:ed:48:d4:4c:
                    f0:a0:04:19:85:ce:b4:37:4e:35:d6:11:bf:a2:9c:
                    f5:b3:51:09:d3:2f:2c:6f:42:18:bf:e8:cb:b2:52:
                    13:0d:2e:4d:d7:a5:a7:9e:7e:d7:dd:38:12:40:a8:
                    f0:f1:49:84:e8:18:81:bd:68:89:d4:d6:1f:aa:01:
                    81:4c:77:50:9e:4e:e0:16:2a:34:fa:41:07:4c:85:
                    da:b6:ce:91:8e:df:17:f2:d2:d9:da:47:4c:26:8c:
                    8b:29:13:2d:6c:ae:bd:c2:04:23:48:9f:dd:1f:5a:
                    b6:38:5f:9a:5e:f9:c1:05:4d:bc:82:2a:c7:a2:aa:
                    39:50:a7:bd:7e:d0:75:b6:22:9c:c1:85:d0:48:39:
                    df:93:76:55:9a:2e:35:dd:8c:d6:80:27:54:c1:6a:
                    4e:97:1e:d3:4d:88:77:b7:ec:92:2c:bb:5e:e5:8a:
                    99:90:0f:5d:3e:e4:f5:87:75:15:99:81:0e:94:bf:
                    f3:1c:98:05:a1:02:81:47:11:fa:99:69:50:b7:c2:
                    18:67:20:84:4e:4e:ad:d1:d1:38:59:95:d0:6c:36:
                    82:96:d8:f7:74:15:f5:b3:03:a0:aa:a6:fa:0b:30:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:84:E4:6D:3A:D8:A6:51:7E:CD:5B:86:EB:46:8A:09:51:96:68:DC
            X509v3 Authority Key Identifier:
                keyid:6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/323830343a326466343a3a2f33322d3438203d3e20323635333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:2e:20:31:6a:2c:c7:28:84:b3:87:5d:66:9e:b0:48:1f:
         c0:fe:c1:43:12:b0:cb:1f:70:42:2c:6d:81:30:c3:10:3f:55:
         a7:22:0a:66:86:51:de:06:93:0c:1d:73:fa:66:06:d0:70:b7:
         cb:73:cd:4f:ca:74:bb:bc:be:10:31:b9:6c:14:50:4b:68:7b:
         69:4c:92:b1:63:4a:ee:3b:f0:1f:03:c2:f1:98:58:0c:a5:f8:
         90:a7:38:74:1f:92:a2:ce:87:2a:47:22:e2:59:f6:8a:14:23:
         c6:70:8e:b7:d3:6a:08:8a:d1:40:d5:79:3a:94:a7:25:63:e7:
         cf:2e:b0:08:27:a4:d7:45:36:9d:52:25:eb:0b:e9:6a:b2:72:
         58:8f:18:6c:da:5d:9b:c7:65:b1:4e:23:32:2f:65:7c:26:87:
         32:1f:c3:1c:20:51:e0:28:4d:dd:02:10:f0:23:5f:50:42:cf:
         bc:ea:ba:84:b6:17:67:4e:dc:5d:11:67:18:26:2d:f4:3c:10:
         64:1f:12:8b:bc:e2:49:15:0a:93:2b:23:ad:dc:7f:89:95:73:
         ff:c7:85:72:f1:af:a6:2e:e7:01:67:19:39:10:f7:6a:ce:39:
         a1:da:e7:78:10:46:d7:ec:9d:79:2c:2b:b2:bb:be:91:28:c6:
         69:08:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org