Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          X3UpPgfR5DqJ9ghq6HbcMq85q34/IAw2fsGGVXnh9Bc=
Subject key identifier:   09:37:BA:AA:14:02:51:ED:8E:98:48:2B:9B:C7:BC:A5:64:0D:27:60
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       6836351D0E2C6049489FA762C044CC3E3B849AA4
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:00 +0000
ROA not before:           Thu 04 Apr 2024 08:37:00 +0000
ROA not after:            Thu 03 Apr 2025 08:42:00 +0000
asID:                     268296
IP address blocks:        2804:4efc:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:36:35:1d:0e:2c:60:49:48:9f:a7:62:c0:44:cc:3e:3b:84:9a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:00 2024 GMT
            Not After : Apr  3 08:42:00 2025 GMT
        Subject: CN=0937BAAA140251ED8E98482B9BC7BCA5640D2760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:32:3f:6b:e6:e2:e9:26:55:59:7d:2d:07:
                    78:ec:bb:07:64:34:b1:94:cc:f1:76:73:56:1b:4a:
                    bf:f5:6e:65:ef:06:f0:8e:cb:b3:00:6f:22:c2:eb:
                    33:8a:b9:00:6f:53:34:1e:e3:11:8a:fb:6e:24:f5:
                    21:63:ac:7a:72:0c:64:98:6d:ce:57:e9:e9:55:25:
                    46:d8:d5:f3:0e:78:7b:ff:c0:7f:63:6f:f1:c4:1f:
                    b2:3f:53:7e:08:7e:56:0a:ad:ab:4e:de:83:cf:4d:
                    ef:cc:21:fd:e8:5b:b9:16:bc:30:cb:95:91:af:70:
                    b0:2e:13:63:1a:ec:6a:8c:2b:50:02:be:8e:66:9a:
                    15:3b:59:7d:50:9e:67:eb:5a:8f:21:63:5e:ef:5d:
                    51:91:cc:2c:b8:27:f0:3a:b3:c0:c9:72:74:2a:2a:
                    90:c7:b1:26:71:c8:ca:83:62:65:af:00:8b:7f:14:
                    c3:d0:37:0e:ce:44:2f:8d:66:9c:96:c0:7e:f5:52:
                    c4:a9:52:43:32:d8:5b:d8:95:35:b8:bd:58:a1:d3:
                    1c:d9:b2:46:af:44:4c:a4:a4:59:9b:81:77:40:62:
                    87:05:f3:7a:fc:99:c4:fc:9b:81:bd:97:2a:ed:03:
                    12:4f:50:d9:d5:61:02:51:5c:67:96:9a:2e:f1:b2:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:37:BA:AA:14:02:51:ED:8E:98:48:2B:9B:C7:BC:A5:64:0D:27:60
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b8:cd:e6:76:84:3c:07:d3:e3:b0:2e:49:d9:17:35:31:21:93:
         10:0e:73:f0:f8:96:13:71:cd:a3:97:65:e2:f5:7a:9f:73:cd:
         00:2a:ec:98:10:bc:00:e1:35:b4:68:2c:c2:6b:cb:3d:2c:d8:
         39:b0:1b:31:ce:ab:d3:14:25:68:95:63:f5:bc:af:93:a7:b4:
         f4:58:ff:47:5e:aa:7f:0b:bb:6c:04:53:d8:08:7c:8d:be:81:
         89:9c:1a:b8:2b:a0:15:9a:c6:c9:a1:fc:aa:9a:73:8e:cf:06:
         2e:25:e4:a7:b4:df:38:d5:9e:3f:92:38:ef:9b:f8:b0:34:7e:
         96:51:06:6e:a1:80:a6:6d:ed:a4:52:30:08:ec:2f:14:8f:4b:
         a2:06:8c:ae:bb:55:b7:48:e3:a1:51:1f:d1:7a:27:15:bf:66:
         fd:f2:20:25:93:89:17:bc:80:3e:0d:9a:0f:80:fd:09:d4:de:
         d9:9f:65:72:66:00:86:7d:c1:f6:a4:2d:44:df:d3:16:75:93:
         cb:c1:a2:5f:0d:3d:98:68:96:1d:f4:54:ec:d8:41:83:74:b5:
         1a:54:ba:10:f3:9e:d4:c3:72:3e:26:19:11:2f:90:ee:37:3f:
         22:35:10:e8:b0:dc:68:3e:e3:be:46:3f:34:2a:09:34:dd:68:
         5b:ac:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org