Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/1/323830343a323336343a3a2f33322d3438203d3e20323634313539.roa
File:                     323830343a323336343a3a2f33322d3438203d3e20323634313539.roa (raw, json)
Hash identifier:          Z57sxS/h8M6G93/ltvdeeMA0MiOt9IL+f7m5ass0ugY=
Subject key identifier:   31:56:FF:E4:81:19:8A:AE:16:CC:3D:B9:59:14:00:C4:2A:A3:D0:85
Certificate issuer:       /CN=6F00212F251CD5036CABDC8CD4C4252C00B16A8B
Certificate serial:       169B2A4F7D8484552F121831521218E5C05B2067
Authority key identifier: 6F:00:21:2F:25:1C:D5:03:6C:AB:DC:8C:D4:C4:25:2C:00:B1:6A:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F00212F251CD5036CABDC8CD4C4252C00B16A8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/1/323830343a323336343a3a2f33322d3438203d3e20323634313539.roa
Signing time:             Fri 05 Apr 2024 05:02:57 +0000
ROA not before:           Fri 05 Apr 2024 04:57:57 +0000
ROA not after:            Fri 04 Apr 2025 05:02:57 +0000
asID:                     264159
IP address blocks:        2804:2364::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/1/6F00212F251CD5036CABDC8CD4C4252C00B16A8B.crl
                          rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/1/6F00212F251CD5036CABDC8CD4C4252C00B16A8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F00212F251CD5036CABDC8CD4C4252C00B16A8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9b:2a:4f:7d:84:84:55:2f:12:18:31:52:12:18:e5:c0:5b:20:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F00212F251CD5036CABDC8CD4C4252C00B16A8B
        Validity
            Not Before: Apr  5 04:57:57 2024 GMT
            Not After : Apr  4 05:02:57 2025 GMT
        Subject: CN=3156FFE481198AAE16CC3DB9591400C42AA3D085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:7e:f8:f3:f0:92:e6:26:8b:0e:e2:b7:f6:
                    a1:a5:8c:6c:d5:5c:65:14:75:d1:d3:5a:40:01:e2:
                    00:bb:66:95:a7:33:36:a7:6e:70:8d:03:6c:82:5d:
                    a2:2b:53:32:db:52:c4:88:c3:82:25:28:11:2b:84:
                    6e:a1:5c:63:7d:35:60:14:eb:a2:1b:64:85:95:8f:
                    e8:3c:6e:34:3c:a1:a7:dc:02:05:63:7e:57:00:18:
                    7e:0c:13:12:3a:5f:a9:c2:74:86:86:48:49:af:9e:
                    c9:77:3e:b5:41:bb:24:b8:15:53:42:74:1d:10:35:
                    a3:86:02:6c:13:cb:fe:f0:b1:05:84:dc:ec:85:45:
                    c3:22:c4:e3:aa:6e:cb:cb:f0:0c:60:66:ce:89:0d:
                    40:c2:60:d9:3b:78:01:86:4c:7e:1a:ad:32:90:29:
                    a0:3d:8e:d2:8b:9d:88:d2:65:4a:93:91:b4:d7:e9:
                    33:0a:29:b2:2b:0d:8c:ee:f3:28:e7:12:b9:f7:52:
                    0d:cc:48:f0:33:95:f6:06:f1:e2:28:d6:fe:bd:8a:
                    52:0a:3b:38:40:2c:b7:fc:40:12:5b:03:48:ca:34:
                    fe:a6:2b:97:ca:7e:5b:49:9b:8f:d5:b9:15:18:e7:
                    e0:89:f5:c1:0b:06:6c:fa:47:b3:a6:4c:42:ef:c1:
                    5d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:56:FF:E4:81:19:8A:AE:16:CC:3D:B9:59:14:00:C4:2A:A3:D0:85
            X509v3 Authority Key Identifier:
                keyid:6F:00:21:2F:25:1C:D5:03:6C:AB:DC:8C:D4:C4:25:2C:00:B1:6A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/1/6F00212F251CD5036CABDC8CD4C4252C00B16A8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F00212F251CD5036CABDC8CD4C4252C00B16A8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/1/323830343a323336343a3a2f33322d3438203d3e20323634313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2364::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:48:5a:79:72:a1:35:a3:76:51:e6:e9:3f:21:3b:8d:4c:
         f2:6f:ca:a6:69:a9:ee:53:37:58:47:7b:e2:36:93:31:d0:85:
         88:a7:74:c4:2e:b1:cf:41:fe:9a:c3:cc:6d:c2:4a:01:ac:90:
         58:a6:36:7d:a9:c3:a6:cc:42:54:61:f3:c5:0f:cb:05:80:c5:
         77:b2:47:3e:cc:6d:c7:cc:9c:91:1c:7e:94:f1:a5:17:c1:78:
         01:f4:21:a1:9b:22:ba:d1:41:f3:22:f8:2c:bb:af:67:96:b1:
         e3:9b:bf:48:7e:ac:f5:ec:50:ba:d6:28:e1:3a:3f:ce:3f:b7:
         fa:bc:aa:d8:6e:8a:ef:55:b5:3d:fc:cd:34:1a:94:4c:55:29:
         b6:30:0e:4a:27:09:2c:8b:73:97:a5:12:ce:dd:ed:4f:8c:71:
         ff:cb:2d:8b:89:1b:2e:cf:7a:7d:92:ec:4f:5d:9e:bd:9d:44:
         e1:eb:0c:21:b7:fb:95:d4:de:5f:ab:ac:ce:0e:f0:fe:01:9f:
         e4:72:f8:d1:51:19:e8:72:ce:6e:b6:44:66:c6:ff:b4:a8:fd:
         26:c6:d0:00:69:67:69:02:30:f5:ef:67:4a:2f:14:c6:b2:50:
         9a:4a:f8:c4:80:df:e8:d0:7e:a3:f1:7b:ee:f2:77:b8:28:8c:
         f1:ca:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:03 2024 by rpki-client on console-fra.rpki-client.org