Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          qnNpqn0DjfOVzY+FC+0M4+FmztZiX3vATsqdIMq939g=
Subject key identifier:   C4:1F:FB:65:8B:55:E8:DF:50:DB:11:67:F6:10:F3:9B:AA:7C:1D:C2
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       21485564FEB67549717FC7C2559D5A851051CDE0
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:02 +0000
ROA not before:           Thu 04 Apr 2024 08:37:02 +0000
ROA not after:            Thu 03 Apr 2025 08:42:02 +0000
asID:                     268296
IP address blocks:        2804:4efc:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:48:55:64:fe:b6:75:49:71:7f:c7:c2:55:9d:5a:85:10:51:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:02 2024 GMT
            Not After : Apr  3 08:42:02 2025 GMT
        Subject: CN=C41FFB658B55E8DF50DB1167F610F39BAA7C1DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:ec:f4:31:ed:7f:29:7b:75:6a:9b:73:b8:
                    02:dd:90:cb:55:f3:21:e0:17:42:eb:50:5f:65:da:
                    1b:57:8e:10:88:b3:cc:df:dd:df:54:32:d9:a5:f5:
                    a9:96:70:30:d2:79:e9:79:c5:e3:7b:2b:40:d0:b4:
                    d3:55:6a:c1:d6:4b:fc:64:e3:cb:0e:36:e4:40:a2:
                    44:bf:4b:23:fa:30:8d:e7:6b:38:37:a3:2f:f9:ea:
                    9e:05:6c:a7:d9:b5:93:47:0a:c9:78:9a:8a:17:0c:
                    49:59:87:75:41:f0:9b:8c:08:1f:2c:b4:0e:d4:1c:
                    a2:e8:69:5a:bb:48:02:82:ed:6a:90:b4:3e:93:fb:
                    08:03:f6:f6:f8:b6:2d:9f:a7:44:5e:2f:45:cb:df:
                    10:db:00:87:98:a4:da:f6:92:b1:e9:a5:ef:b5:2d:
                    8b:2a:7c:30:0b:ee:e8:d5:5f:53:84:a9:90:c0:5b:
                    1d:48:26:46:d1:fa:3b:2d:cc:93:4c:05:dc:f6:31:
                    43:67:c2:01:09:5d:a1:21:4d:35:6b:60:b2:2f:24:
                    23:93:98:bc:49:7a:ea:0d:63:bf:05:5e:47:db:ff:
                    d8:56:aa:fb:00:a9:02:b3:64:47:ec:d5:ed:21:25:
                    1f:10:79:8c:16:c1:1c:3f:d0:70:d6:99:f6:ef:f8:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1F:FB:65:8B:55:E8:DF:50:DB:11:67:F6:10:F3:9B:AA:7C:1D:C2
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a373030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c8:66:fa:0a:1f:0f:de:70:50:b6:35:df:00:9e:d2:37:50:9f:
         f4:7b:b6:bd:90:e9:3b:45:44:53:57:42:56:d4:52:23:1c:ef:
         95:82:a0:4a:4b:88:e0:22:9e:e7:93:82:3d:0b:ec:3a:d6:2d:
         0e:50:02:ad:80:1d:db:56:31:47:d4:0d:41:7f:b8:f1:07:26:
         93:35:59:d8:f0:5f:94:d5:62:4d:62:a3:d7:ca:23:eb:0f:db:
         55:f4:12:be:4b:44:38:7f:4e:3c:d1:1e:5b:8d:1f:ef:5f:13:
         e5:d3:8c:cf:88:eb:90:f1:4c:fa:b4:ca:0d:18:1f:75:c0:8c:
         bc:5e:56:d3:db:5c:db:06:97:e4:fb:88:9d:f8:dc:4b:34:3d:
         e9:7b:66:22:53:39:84:a0:73:31:13:e3:ca:84:14:29:e6:bf:
         e4:51:cb:cc:d5:f2:98:ae:3a:0f:70:f4:75:c7:d0:e8:e8:a7:
         6d:5e:29:c1:06:e1:aa:5f:55:fc:62:b1:49:56:5d:58:bd:1d:
         1d:32:b1:e4:a2:04:be:46:11:69:a9:d7:0e:c2:ee:7b:fa:7a:
         e1:c8:38:2b:92:24:02:b9:b5:71:61:5b:d1:bf:a3:36:e8:f3:
         a4:7c:69:89:ea:33:b3:09:18:59:82:4b:ef:f2:9d:1b:6c:5f:
         2b:3c:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 12:52:22 2024 by rpki-client on console-ams.rpki-client.org