Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa
File:                     323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa (raw, json)
Hash identifier:          t9vNXXo2YpJBgQBFqQUin72tMOkFGXUCvFP6crqAbR4=
Subject key identifier:   AE:0D:55:53:2C:E4:24:AE:8D:18:40:2E:72:2D:B4:04:67:01:DE:F1
Certificate issuer:       /CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
Certificate serial:       1DD646369767A94E49C036529AF52767F3219EC3
Authority key identifier: 7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa
Signing time:             Fri 31 May 2024 13:45:54 +0000
ROA not before:           Fri 31 May 2024 13:40:54 +0000
ROA not after:            Fri 30 May 2025 13:45:54 +0000
asID:                     268303
IP address blocks:        2804:4f18:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl
                          rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d6:46:36:97:67:a9:4e:49:c0:36:52:9a:f5:27:67:f3:21:9e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
        Validity
            Not Before: May 31 13:40:54 2024 GMT
            Not After : May 30 13:45:54 2025 GMT
        Subject: CN=AE0D55532CE424AE8D18402E722DB4046701DEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:46:be:22:11:90:3b:17:27:0f:39:9b:54:
                    2b:70:a5:08:d4:a2:8e:2b:2c:2e:3a:77:2d:77:0e:
                    ec:b1:d2:79:08:96:a8:1c:b8:05:2e:8d:80:0a:0d:
                    ae:ad:76:52:a4:76:dd:ed:26:07:db:8c:3d:0c:c8:
                    cf:b5:d4:74:37:d1:18:8a:4d:68:7f:23:d6:6a:f2:
                    bb:4a:8e:4f:47:7d:e2:3d:58:03:31:10:7e:01:d2:
                    b7:0e:bf:9c:77:d4:ab:08:d9:34:b2:b4:e3:38:2a:
                    5e:20:d2:ec:3a:89:73:f9:64:2e:8a:59:bc:9d:e9:
                    82:cf:1e:97:55:84:e9:7c:44:5e:7f:74:d5:cf:e3:
                    af:a4:9e:a4:7d:86:c2:5e:b7:cb:71:7b:2d:c8:92:
                    ad:a0:9c:25:78:71:d0:c2:8d:71:99:3b:fc:d5:73:
                    c9:08:77:23:4c:25:87:96:54:59:bb:f8:b3:2b:25:
                    a0:87:8f:00:d1:cc:b5:32:bb:90:df:4b:8c:55:e5:
                    12:85:40:04:bd:5e:53:5d:b7:e4:57:19:f7:15:bc:
                    03:11:06:4c:7a:93:6a:39:5c:df:ac:bf:e5:11:5b:
                    64:a6:f4:05:f5:be:8b:7d:41:a3:eb:7a:bb:26:60:
                    98:7a:9f:9d:9a:2d:3c:02:87:36:bd:13:73:09:3c:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:55:53:2C:E4:24:AE:8D:18:40:2E:72:2D:B4:04:67:01:DE:F1
            X509v3 Authority Key Identifier:
                keyid:7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a323030303a3a2f33362d3336203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f18:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:a1:f6:82:a7:77:6f:86:79:b4:3f:b1:3f:7d:17:d6:6c:a2:
         0f:8a:a4:4e:81:11:79:97:c3:a4:24:22:2d:f2:49:c2:64:a7:
         eb:3e:56:48:bb:74:bb:e8:bd:08:13:d0:15:9b:8b:80:be:a0:
         ef:4b:9f:cd:b5:e6:73:b6:59:42:da:a4:b5:16:16:cc:5a:aa:
         48:82:b9:5d:89:4d:56:c2:78:f2:44:73:2e:9b:73:21:2e:2b:
         92:cc:9d:c6:d8:fc:60:cf:21:2b:20:f8:a5:ea:d6:b5:42:7c:
         06:f8:e1:61:0b:b5:15:9a:d3:3a:f9:de:c3:fa:92:b9:48:30:
         3e:1f:c0:ab:79:9c:22:c5:dd:9c:6e:7b:ea:be:c6:55:e9:99:
         14:8c:eb:ff:e3:66:58:dd:d0:c3:ce:5c:75:9c:9e:17:bd:f0:
         4e:6f:3d:d6:8e:c0:27:fc:da:e0:bf:01:e9:13:5c:c7:25:6b:
         12:d4:a7:c6:0b:ec:f7:9e:d7:d9:12:64:8c:97:db:d7:f5:db:
         8f:59:f2:6d:f3:58:93:32:d3:ab:5a:32:d7:5d:63:5c:1f:8d:
         78:94:2d:80:75:89:8f:b9:a9:48:f2:41:df:6f:45:ff:6c:d5:
         c4:a7:2c:4b:7c:35:79:1e:a5:c0:4f:3b:19:31:36:7e:e0:ae:
         d3:03:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 10:51:39 2024 by rpki-client on console-fra.rpki-client.org