Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          zL0UazdDx7YAO2OhC6ItTJRzg173WPiawpW9S386q8U=
Subject key identifier:   27:50:27:44:D7:58:83:CE:A0:1C:F8:C2:2C:ED:A3:F3:4A:09:57:61
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       1E6B3F4F097B1958BD87D9FCD4C96A9397A2BE28
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:01 +0000
ROA not before:           Thu 04 Apr 2024 08:37:01 +0000
ROA not after:            Thu 03 Apr 2025 08:42:01 +0000
asID:                     268296
IP address blocks:        2804:4efc:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6b:3f:4f:09:7b:19:58:bd:87:d9:fc:d4:c9:6a:93:97:a2:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:01 2024 GMT
            Not After : Apr  3 08:42:01 2025 GMT
        Subject: CN=27502744D75883CEA01CF8C22CEDA3F34A095761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:80:09:43:47:b8:95:4a:6a:c4:e9:f5:23:
                    cb:df:d8:d1:86:95:c2:00:10:74:56:0a:fa:fa:b6:
                    fc:1d:d7:94:9d:09:ba:fd:3c:39:ce:7a:22:7e:bb:
                    b0:80:d3:56:d9:7b:11:4e:49:5c:30:42:68:56:bc:
                    15:6d:3f:65:eb:6d:24:f3:b9:a5:3b:b8:d3:84:17:
                    e2:3d:3b:e1:f9:dd:1d:39:bb:5d:5b:5a:f9:d1:4c:
                    22:fd:58:a8:31:5d:79:e2:76:86:2c:8a:68:92:17:
                    28:50:66:41:53:64:6f:71:40:62:08:6e:3f:ee:82:
                    e6:8f:a2:4d:d8:91:f6:dd:a7:5f:0f:be:ca:53:b6:
                    c0:4b:4d:3a:6e:0a:f2:3e:2f:e2:61:10:d2:5a:6c:
                    fc:d3:9e:ae:dc:b2:90:c7:47:6f:76:d3:f2:67:c7:
                    b5:8a:66:a4:c1:41:47:82:3c:f3:c7:dc:9c:39:06:
                    3c:c5:05:11:cd:36:ee:fb:25:87:ea:dc:8a:99:ac:
                    e8:af:df:1b:c0:61:49:10:37:51:16:58:fa:6e:a9:
                    ce:27:15:7b:7d:20:87:fa:af:2e:94:ca:ec:66:a2:
                    0f:44:ab:a0:17:79:9c:ff:c6:92:85:69:9d:3f:f7:
                    d9:16:37:8e:55:05:b6:5a:8e:cc:db:27:04:8a:3a:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:50:27:44:D7:58:83:CE:A0:1C:F8:C2:2C:ED:A3:F3:4A:09:57:61
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:74:42:28:fb:97:29:c2:71:ca:bd:3d:35:23:ea:4d:38:
         db:86:b0:7e:53:d1:68:5e:f0:33:9d:56:fd:9d:6d:84:b8:35:
         28:5a:fc:de:33:d7:92:54:e3:4e:1b:e3:01:f2:a5:42:56:6c:
         0c:e7:2d:cb:47:0a:a5:b3:b4:c8:22:4f:2e:25:ff:fd:3a:a3:
         be:37:42:e3:cd:76:64:e4:36:d4:dd:29:21:62:5e:db:47:57:
         ae:3f:fe:40:55:fe:27:64:d1:5e:36:21:26:52:50:77:e1:76:
         7b:11:be:d8:a2:52:a6:9c:ec:b3:97:9d:af:e9:78:ae:40:e3:
         c0:0c:5c:6c:7d:d0:0a:c2:f4:7b:71:d9:be:ef:6f:62:6f:e3:
         db:fb:2a:d7:46:6e:df:83:fd:b2:c8:87:cf:d5:85:7e:0c:2a:
         07:55:3a:51:37:e9:79:7f:b8:81:24:2f:c8:f3:4c:89:2d:c9:
         9b:3d:c1:ba:46:a4:cf:15:91:f2:8a:98:44:35:28:a5:9b:e2:
         b6:47:3e:7e:9f:0a:0d:03:d2:5e:29:fa:f7:7e:9f:03:df:2f:
         e5:b3:69:db:f6:a2:1a:84:ca:72:8d:96:6b:ba:ba:75:04:6b:
         1a:c7:92:b6:9c:45:4a:83:c5:d8:a7:b1:b0:0b:11:84:fc:09:
         68:d8:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org