Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a313030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a313030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          4UV3rVpUm/xKMjqFxnHuahl+erjHBHeh/6fhp6kIE/s=
Subject key identifier:   7B:20:E4:46:BD:0D:B2:7C:7C:EB:F5:19:4B:7B:87:40:75:99:93:EF
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       77ADB96C644FDECF0DF6284CA16B662245CD05CB
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a313030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:02 +0000
ROA not before:           Thu 04 Apr 2024 08:37:02 +0000
ROA not after:            Thu 03 Apr 2025 08:42:02 +0000
asID:                     268296
IP address blocks:        2804:4efc:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:b9:6c:64:4f:de:cf:0d:f6:28:4c:a1:6b:66:22:45:cd:05:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:02 2024 GMT
            Not After : Apr  3 08:42:02 2025 GMT
        Subject: CN=7B20E446BD0DB27C7CEBF5194B7B8740759993EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:a4:38:d6:57:8b:16:0a:99:c5:fc:05:c5:
                    5a:6c:f5:03:34:c7:db:ac:90:c9:a2:04:bd:1f:fb:
                    86:f3:0e:61:cf:43:21:54:ed:9e:34:05:83:ab:97:
                    6c:57:e3:87:ef:1b:8c:ff:a9:13:20:a5:69:2e:65:
                    b7:56:f8:96:c3:38:a4:27:ca:a4:5a:93:91:28:d7:
                    cc:f5:09:2e:49:63:b5:35:97:a1:8c:d8:6a:a2:e7:
                    8f:f6:36:d5:7c:d9:85:70:b4:8c:34:fc:fa:f6:d0:
                    36:32:80:bb:dd:8c:18:e5:eb:04:19:62:b9:d7:a6:
                    19:1d:fc:c8:a5:95:56:51:39:7a:a7:8b:10:e4:34:
                    a4:11:e2:93:65:fb:11:e4:a9:bf:ee:50:1a:d5:69:
                    78:df:76:be:67:d6:8d:94:27:1a:c8:21:38:39:42:
                    2e:10:ec:71:99:96:eb:c6:76:38:a5:c6:7c:5c:c9:
                    d5:f2:39:35:d2:87:2c:4e:9c:2b:37:44:d0:8a:6d:
                    8d:58:ed:45:3d:1c:9c:5e:00:01:c5:fe:a4:2b:06:
                    01:85:cd:49:94:e2:40:c7:c7:5e:fa:8a:ff:89:c4:
                    86:6b:a7:aa:6b:64:6d:62:3f:38:cb:f9:bc:6b:d6:
                    b3:a1:a4:44:5f:8a:c4:b1:21:e3:5d:49:56:5c:35:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:E4:46:BD:0D:B2:7C:7C:EB:F5:19:4B:7B:87:40:75:99:93:EF
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a313030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:9c:ad:63:96:20:00:e2:3e:b9:19:c7:bf:4d:ce:25:d9:48:
         88:e2:0f:d8:d8:62:09:a5:1b:66:23:85:d9:4b:d0:62:9b:59:
         a7:53:1d:23:d4:bb:3e:37:b1:95:58:da:81:d6:d6:60:d4:23:
         33:a3:85:b0:41:4e:21:5b:64:58:0e:42:c4:9b:9e:f4:68:32:
         88:40:98:2b:59:d6:09:5b:44:f3:ab:b1:54:f3:1d:ba:44:e4:
         f5:b7:58:a9:44:8d:9d:60:4a:84:10:d6:70:f5:70:da:39:16:
         ce:51:ef:1c:6b:16:80:50:8b:17:e5:b8:31:a7:13:ea:13:5e:
         76:43:da:33:c8:c8:4a:09:b3:0f:96:48:37:11:0e:a3:19:e3:
         1a:e9:b7:df:8f:56:1b:ac:f3:72:51:df:fa:27:87:67:09:b7:
         6f:57:4b:81:b2:e5:84:aa:d2:9b:d4:3d:52:9b:77:c2:b6:ff:
         ed:b5:ab:30:ef:fc:c7:ab:b9:7b:ab:c6:18:76:9e:2a:46:6f:
         14:1e:33:ae:d3:96:a2:0b:6a:08:16:16:1a:b1:e6:94:bb:48:
         c8:31:ce:c8:34:84:9b:89:d6:4d:15:66:cd:7a:db:c2:c3:40:
         11:3e:b3:8a:7f:10:a5:14:6c:3d:c6:be:3c:80:88:6c:91:86:
         e2:0e:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org