Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa
File:                     323830343a6636633a3a2f33322d3438203d3e20323633303039.roa (raw, json)
Hash identifier:          VNPKNfsfWrmG97RMu2ioDnnBY7Z1LEwWsRSfud4rleU=
Subject key identifier:   C7:34:C7:B2:F9:47:0F:41:C9:09:A5:6A:A1:87:0E:71:DA:59:26:68
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       6E896338911404979779804445718BCBC8A5C850
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     263009
IP address blocks:        2804:f6c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:89:63:38:91:14:04:97:97:79:80:44:45:71:8b:cb:c8:a5:c8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:70:78:83:9a:2e:df:5e:fe:2d:70:fd:d8:
                    c9:c6:81:0b:a2:e8:61:0c:93:ad:ae:29:2f:9c:cf:
                    0f:65:0f:d1:d9:fb:98:ee:5d:17:31:ac:2e:c2:76:
                    16:d6:01:c8:d9:d3:1f:89:bd:d6:1b:b0:e7:32:68:
                    78:7f:d1:73:7d:a5:9d:58:70:7f:89:88:b7:62:b6:
                    2f:6f:f2:7e:99:5b:ce:ef:70:f9:61:a3:28:69:d7:
                    55:5b:45:fa:ba:81:55:69:bb:04:44:e5:99:33:b6:
                    08:9c:f8:64:fc:3a:c4:50:2b:15:aa:42:2f:79:bb:
                    11:c9:06:72:19:98:bb:80:43:cf:4e:40:a6:98:b8:
                    6b:55:d2:4e:fc:2e:62:33:2d:31:78:e9:b6:ea:44:
                    7f:42:9c:53:fa:1f:9c:1c:13:0c:b7:47:5f:c6:ba:
                    8a:8f:83:80:8e:02:09:3a:a8:1d:be:d6:b6:ee:0d:
                    98:d9:ff:f9:0a:6f:2c:95:6a:8a:24:56:c6:cb:99:
                    a2:79:2e:23:a3:40:60:04:0e:8d:20:ec:b1:d8:ba:
                    08:0c:70:6e:08:08:0c:5f:38:56:cb:af:48:71:67:
                    f2:f6:4a:18:5d:be:64:d3:6c:16:cc:4c:19:45:24:
                    50:97:85:b7:3d:25:86:29:0c:05:a1:ab:07:3c:8b:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:34:C7:B2:F9:47:0F:41:C9:09:A5:6A:A1:87:0E:71:DA:59:26:68
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:0b:49:7c:4e:cf:3f:ee:38:b1:9e:68:1e:b2:4d:f4:a8:43:
         e2:ad:ec:8a:f9:74:26:22:e0:13:8f:4f:90:48:30:8d:ff:5a:
         31:57:34:e1:e1:79:c7:d8:87:86:31:d5:f4:5b:b2:e6:c6:7f:
         c8:89:0e:10:1d:53:42:4a:67:ef:33:bc:19:36:7e:b9:f5:20:
         9b:70:e1:3f:f8:34:2e:f6:5b:4c:7b:61:11:e8:3f:37:cf:0e:
         49:73:35:5f:40:62:5f:ab:5a:27:38:0f:bb:06:5a:5f:f0:ce:
         5b:17:48:20:12:ae:9d:32:d7:cc:0d:d5:be:82:a6:ad:97:8e:
         aa:10:f8:79:98:55:1a:72:16:a5:81:c3:02:5d:d8:c0:f5:f6:
         44:8e:da:f2:b3:03:16:3a:e3:dc:3d:c9:16:68:4a:08:d5:c5:
         1b:e6:08:2b:cf:d7:f8:35:77:3b:91:be:3f:9d:58:da:06:70:
         db:d4:9f:92:c4:db:5b:43:fb:ec:8b:e6:6f:8e:01:42:cf:95:
         ba:61:47:20:a4:68:41:37:a3:01:31:28:54:dc:1c:e0:2b:08:
         4c:30:c5:a9:fa:a3:16:ee:b1:ae:7b:d2:cd:30:ef:bd:68:78:
         32:0c:46:d7:d7:4a:f8:b1:35:a3:3c:61:ab:ab:b5:de:af:03:
         35:6a:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:36 2024 by rpki-client on console-ams.rpki-client.org