Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          oCQKMGdofUVJq5jYCdniSZWjZs8N0cn8QpMgTJeIb+c=
Subject key identifier:   8F:EA:D0:B0:62:33:51:29:57:A9:B2:3B:4D:AD:68:1F:86:CA:1F:3C
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       3ACD394668F36458C94DA439D9EDCD0EFD5BF4C6
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:00 +0000
ROA not before:           Thu 04 Apr 2024 08:37:00 +0000
ROA not after:            Thu 03 Apr 2025 08:42:00 +0000
asID:                     268296
IP address blocks:        2804:4efc:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cd:39:46:68:f3:64:58:c9:4d:a4:39:d9:ed:cd:0e:fd:5b:f4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:00 2024 GMT
            Not After : Apr  3 08:42:00 2025 GMT
        Subject: CN=8FEAD0B06233512957A9B23B4DAD681F86CA1F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:d7:e3:d3:e1:df:00:ba:07:58:aa:a0:8e:
                    c2:62:6c:f1:15:08:5c:98:2f:8f:ad:fa:e6:2c:9c:
                    63:6c:3a:28:51:bc:55:0a:57:a4:a9:5d:86:2e:93:
                    08:98:09:ca:f9:16:90:08:9e:b2:95:b4:3a:6e:70:
                    9c:07:52:96:0a:e5:80:c2:78:29:49:29:1c:24:02:
                    5c:70:48:cc:de:55:58:83:81:81:c1:e6:34:78:ee:
                    c4:73:a2:93:e2:0b:ea:85:db:f7:51:38:0c:ce:26:
                    43:bf:e7:46:a5:30:2c:5f:7a:37:06:9f:02:70:bb:
                    1c:16:77:dd:e0:49:c2:0a:c1:13:e4:e5:14:cd:fb:
                    c0:43:e5:4d:69:57:ab:36:0f:a2:2e:56:09:48:e5:
                    a9:ee:14:5f:55:70:8b:63:b1:48:18:04:7b:28:d4:
                    66:d4:07:49:55:a0:73:21:12:74:02:fb:4a:50:c6:
                    bd:bc:82:85:f0:8b:cf:9b:3c:8f:25:18:ce:db:be:
                    8c:35:e4:e8:9a:88:a4:b9:62:5e:89:dc:b6:00:d9:
                    33:03:27:20:ab:35:a7:71:84:c9:ba:dd:eb:be:02:
                    d6:04:a1:c2:53:23:62:1c:de:2c:8c:e4:27:48:4e:
                    57:2c:4f:75:ab:39:79:af:6d:c1:6e:d6:e1:4d:e3:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EA:D0:B0:62:33:51:29:57:A9:B2:3B:4D:AD:68:1F:86:CA:1F:3C
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:15:1e:60:36:bd:ea:7a:bb:05:d4:7d:9e:31:06:af:37:
         34:15:45:53:94:f9:ad:16:dc:24:43:f8:cd:f9:13:ea:99:c3:
         bd:3c:bd:9b:85:b7:af:65:2d:80:ac:8b:cb:27:7e:89:d1:0a:
         34:01:54:43:75:75:7b:5f:9c:ec:66:97:32:de:2f:c9:69:96:
         20:91:36:bd:e6:96:dd:79:14:c7:9c:48:64:74:96:34:5c:cc:
         c8:d8:e5:a4:60:94:4c:e6:da:0e:1f:05:ea:03:fb:29:ee:26:
         d1:b5:6d:ce:11:db:e9:4c:d6:3b:2f:ce:d4:41:a1:89:a7:14:
         9d:7d:d8:56:35:f0:ba:1e:a0:bc:e3:fe:c0:4f:27:40:48:87:
         a7:eb:bb:21:5d:57:26:c9:2b:92:ca:d1:b9:c6:d4:34:ae:4a:
         b7:c2:da:cf:53:ea:af:d2:06:22:e5:8d:c4:d6:1a:4b:9f:c5:
         27:87:6a:1b:a1:60:b3:a7:a1:0f:8a:ea:f4:16:82:ac:39:7a:
         87:a3:db:28:08:cd:d4:0d:28:44:38:b6:d8:0a:ee:88:b6:e7:
         17:ac:62:04:c7:31:25:ff:8c:61:b1:a3:25:80:da:2f:2d:68:
         5e:c7:dc:3b:96:48:a2:b0:7c:58:be:f4:12:a5:91:b5:a3:15:
         b6:e0:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org