Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/323830343a316536343a3a2f3332203d3e20323634343236.roa
File:                     323830343a316536343a3a2f3332203d3e20323634343236.roa (raw, json)
Hash identifier:          8nfy7FlhyxzjBsyd/w2TrrUNIqj/LZoCMpzQxtRNUig=
Subject key identifier:   02:27:15:86:63:5D:94:06:BC:39:DE:1C:8F:C0:45:14:EB:AB:4C:0C
Certificate issuer:       /CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
Certificate serial:       6C4AEF489357FB966526A74013A132391D490E06
Authority key identifier: 6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/323830343a316536343a3a2f3332203d3e20323634343236.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     264426
IP address blocks:        2804:1e64::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl
                          rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4a:ef:48:93:57:fb:96:65:26:a7:40:13:a1:32:39:1d:49:0e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:79:4b:0c:0f:6f:08:1f:9a:b1:87:37:47:
                    62:ee:e9:86:5d:d4:f5:53:85:42:7b:aa:90:77:57:
                    20:9a:79:0b:4a:4e:9a:2f:a0:b6:30:1b:77:73:f5:
                    ae:d5:98:4d:31:8d:45:8e:89:42:85:29:b7:9d:8b:
                    88:c1:f5:65:71:2a:f2:7f:c8:45:50:7c:85:7f:84:
                    fd:57:2d:52:0b:96:34:96:0a:95:ea:8c:a5:90:77:
                    e6:23:96:b8:5e:7f:68:d9:89:73:d0:2a:4c:3e:16:
                    af:71:86:24:a4:53:13:bf:88:98:dc:e7:fb:0b:23:
                    b4:2d:fe:47:21:d8:db:6e:17:04:bd:64:80:c8:59:
                    4c:98:a8:eb:ab:16:b2:46:64:ef:17:fa:70:7f:a1:
                    9e:aa:61:94:8d:f3:00:a7:97:f3:87:0d:cf:8a:0e:
                    1f:62:f4:42:42:df:cb:e0:73:01:a9:22:2f:a7:74:
                    77:61:d8:cc:f5:81:ca:a8:1d:c2:07:c8:60:2f:59:
                    85:eb:f9:fd:a7:8e:15:74:56:d1:d0:22:e2:22:3c:
                    6e:f6:a5:53:f8:c7:e4:1b:7c:32:53:c5:95:73:b1:
                    81:b7:08:c6:11:7a:1b:a6:82:74:13:6a:2c:28:2b:
                    84:ab:42:78:46:de:ee:54:2e:f1:90:40:1a:0d:66:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:27:15:86:63:5D:94:06:BC:39:DE:1C:8F:C0:45:14:EB:AB:4C:0C
            X509v3 Authority Key Identifier:
                keyid:6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/323830343a316536343a3a2f3332203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:41:d6:83:ed:ba:6c:f3:de:9c:1a:0f:e0:58:06:65:b8:0d:
         0d:b0:96:da:f4:3f:33:45:f2:5d:19:60:01:3e:14:ce:c2:47:
         41:9f:3f:88:5f:99:ae:7c:50:32:e2:dc:bf:18:5f:35:e9:09:
         65:ed:30:f0:81:5e:a0:ce:81:ed:7e:ef:33:f9:90:81:36:11:
         db:ae:f9:36:3c:96:e8:3a:ad:c9:d1:a8:e5:5c:f6:9d:4d:a5:
         ec:bc:10:5c:c8:c2:50:54:d9:df:d1:79:16:22:fa:88:94:79:
         c5:ab:9d:67:cb:80:f8:48:70:7a:30:f1:7b:59:16:1f:14:92:
         e6:73:96:c2:57:0f:a4:02:75:6f:b9:fd:e0:ce:1d:b7:c5:b5:
         6d:15:87:6b:3a:75:54:58:df:af:67:03:fb:70:ab:6d:c7:3a:
         82:ab:50:a3:be:44:06:65:c9:35:fc:67:63:7b:86:02:f3:b9:
         e0:a9:68:79:9d:24:d1:20:22:56:52:56:75:9b:af:38:0a:cd:
         46:47:fb:43:3f:f4:ad:3c:16:45:0e:a0:53:e4:d9:5a:91:7d:
         32:9f:f7:00:9d:51:0f:c0:6d:fe:72:bd:13:38:ef:cd:5f:22:
         b4:7f:7c:82:5d:74:fd:a3:4a:25:44:b6:11:ed:98:a4:41:8e:
         9a:b1:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:52 2024 by rpki-client on console-ams.rpki-client.org