Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
File:                     323830343a313133343a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier:          SHbMAXdhvhol+BFUxOEEgKMDr3n+/FBe8n1HfoLxwmI=
Subject key identifier:   CC:D3:4C:38:F7:5E:7C:44:F7:85:6C:72:01:44:00:D2:25:DD:DA:70
Certificate issuer:       /CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
Certificate serial:       6BE159E0281AB813F014D7C9741A51BDB48A14ED
Authority key identifier: 6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:30 +0000
ROA not before:           Mon 08 Apr 2024 20:06:30 +0000
ROA not after:            Mon 07 Apr 2025 20:11:30 +0000
asID:                     263665
IP address blocks:        2804:1134::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e1:59:e0:28:1a:b8:13:f0:14:d7:c9:74:1a:51:bd:b4:8a:14:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
        Validity
            Not Before: Apr  8 20:06:30 2024 GMT
            Not After : Apr  7 20:11:30 2025 GMT
        Subject: CN=CCD34C38F75E7C44F7856C72014400D225DDDA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:11:17:20:b2:f4:eb:ce:af:ef:75:f5:1e:
                    39:63:24:17:9e:5c:d7:77:f4:9b:8c:d7:e5:13:68:
                    13:21:f0:65:87:1c:b1:ef:54:d5:15:c0:31:9d:20:
                    ad:55:79:79:44:1d:ea:65:ff:94:20:c9:23:fe:60:
                    68:da:54:46:ba:5f:7e:03:d4:64:2d:f7:bd:5b:9b:
                    3e:40:d3:3f:32:01:35:fa:13:5a:ad:fc:4e:87:99:
                    91:b8:53:bb:98:32:cd:d8:d6:6d:f7:e1:2b:de:00:
                    d8:71:35:bc:6f:6f:1c:fa:8e:41:6a:32:dc:87:a2:
                    b7:17:66:7c:a3:a7:10:44:85:96:5d:6d:c9:4f:82:
                    59:5e:af:fb:d3:7b:b8:87:6c:95:7e:98:93:bb:33:
                    0b:03:d3:0e:5c:d1:e2:78:3c:c1:c8:aa:21:8c:12:
                    21:1a:72:ab:b1:6b:24:59:f0:c6:92:fd:5b:0d:5f:
                    79:ff:b6:64:d4:0d:cb:6a:bd:f8:85:4d:ff:a6:15:
                    65:77:51:47:17:4d:0c:ba:74:a8:4f:48:65:8b:a1:
                    88:fe:85:17:73:b5:bf:46:53:d8:52:d9:58:20:36:
                    8e:27:12:a4:cb:85:36:d1:64:6d:dc:b7:d9:cb:34:
                    4f:cc:ba:8a:e1:bb:85:ca:7d:df:9a:d2:77:e8:f6:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D3:4C:38:F7:5E:7C:44:F7:85:6C:72:01:44:00:D2:25:DD:DA:70
            X509v3 Authority Key Identifier:
                keyid:6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1134::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:17:cd:c4:88:92:5c:2d:47:0d:36:74:94:b7:ca:9f:f4:90:
         c1:30:63:e3:d9:23:de:d7:0a:9b:b7:e7:82:10:da:12:e4:43:
         c9:09:b6:0e:c1:ef:da:48:50:7a:89:71:38:61:1d:21:c3:34:
         13:59:f9:5c:22:e1:65:19:39:a0:99:ac:5b:f3:c7:a1:ee:cd:
         9e:e0:5a:4d:bb:e8:f8:bb:c2:f4:6f:ea:7c:64:31:e8:de:c1:
         61:d1:6a:5d:35:06:9c:bc:82:57:a5:51:98:fd:f2:1d:61:32:
         a6:ba:6f:ad:37:9b:e1:47:89:68:3c:c4:16:83:5d:6d:45:10:
         29:03:e9:a0:7b:88:77:56:14:c4:c5:1a:35:09:70:7e:3d:3c:
         fe:f0:1a:60:b6:ba:55:98:22:0f:00:27:94:a7:dc:dc:6e:d2:
         5e:c8:9e:3b:42:03:4d:a5:61:73:2e:38:a0:98:0a:d6:b3:07:
         57:bc:34:1d:ff:72:7d:f2:2e:04:3e:9d:3c:e5:8d:f4:8d:4f:
         6a:e4:ad:3c:67:e8:85:df:b1:7a:88:ff:fa:de:11:cd:dc:59:
         6b:84:03:d5:83:f1:cc:06:5b:60:97:71:6a:f3:5e:f5:c6:38:
         01:1a:a1:5d:9b:c0:0d:1f:59:be:39:e2:52:a4:41:ab:9b:23:
         e9:6a:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:26 2024 by rpki-client on console-fra.rpki-client.org