Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a653030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a653030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          oIgerX23qAV/07Yck4MOJ42GAvWk9ceVbHe+2aO6mxA=
Subject key identifier:   03:C6:E3:C6:2E:00:3E:A6:74:F0:6B:DC:2E:A7:31:1C:68:42:17:DA
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       08EAE2C076FF0701036AEAEF7ADD881480609822
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a653030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:02 +0000
ROA not before:           Thu 04 Apr 2024 08:37:02 +0000
ROA not after:            Thu 03 Apr 2025 08:42:02 +0000
asID:                     268296
IP address blocks:        2804:4efc:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ea:e2:c0:76:ff:07:01:03:6a:ea:ef:7a:dd:88:14:80:60:98:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:02 2024 GMT
            Not After : Apr  3 08:42:02 2025 GMT
        Subject: CN=03C6E3C62E003EA674F06BDC2EA7311C684217DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:4a:7b:5a:b3:b1:85:c5:4c:02:8e:6c:46:
                    fb:bb:13:35:0f:60:04:00:35:dd:ae:8b:ba:c5:07:
                    17:fb:4e:44:1d:dc:2c:84:9e:ce:aa:68:d9:7b:80:
                    29:64:06:96:f9:bb:e8:4b:60:9c:f9:97:4b:a3:3c:
                    e2:6f:6d:f7:32:bc:6d:ee:ae:23:81:a8:e9:21:cf:
                    53:03:92:49:20:b6:ea:90:be:1a:1b:84:d8:fc:85:
                    c8:14:e5:47:75:6c:fd:da:a6:f9:1a:fc:71:31:0a:
                    b5:0d:18:85:56:95:15:65:1f:ab:cc:a8:a8:cb:0a:
                    f9:45:4c:2a:fe:fc:30:9b:82:40:55:8b:fe:a8:bd:
                    78:7f:a8:a6:f2:a8:24:2c:ad:a6:40:7c:88:65:15:
                    84:a3:a2:9f:46:04:2c:e4:95:b6:61:81:da:48:c6:
                    b3:1a:79:58:8b:d9:64:82:3a:a9:8b:60:e4:30:3b:
                    b7:52:6d:c7:b9:85:07:29:45:1c:55:61:14:cf:9f:
                    ce:93:ca:c7:5f:81:43:fd:bc:5b:77:c9:3c:aa:f4:
                    c3:05:ce:e1:ae:2c:38:f4:82:7b:9c:71:4a:72:b7:
                    41:7c:4e:bc:59:18:f2:ad:67:57:9c:2a:9f:80:5e:
                    6f:ad:6f:f9:2d:fa:e5:1c:b4:ae:3f:47:23:a9:20:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C6:E3:C6:2E:00:3E:A6:74:F0:6B:DC:2E:A7:31:1C:68:42:17:DA
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a653030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         59:46:0d:fe:41:93:1d:2a:15:84:69:58:5c:54:4c:2b:b9:01:
         04:2b:d2:cf:86:47:e1:f4:93:f7:32:69:45:0e:fb:19:17:3b:
         d5:55:ad:a3:b2:45:1d:db:41:c1:8d:e7:3e:19:bc:5f:b7:b0:
         e4:b0:95:3a:5d:67:0a:66:8c:dd:25:e7:2d:90:f4:55:de:ee:
         2c:17:24:ed:c8:92:e0:cd:e8:0d:7a:25:60:a0:24:20:8d:2c:
         04:f2:e5:8c:6e:a9:e9:3f:ce:fe:35:14:8b:b9:69:88:b5:2f:
         b4:33:12:35:30:c2:29:37:ca:65:13:2c:94:99:f7:1d:04:9b:
         c7:b2:25:e7:34:7c:12:df:e4:6a:72:ff:e9:d5:21:19:e5:7b:
         e8:e7:17:b7:ec:a7:cb:65:42:98:a2:53:36:61:9a:81:6c:02:
         48:ed:3c:ac:89:58:0f:dd:73:9b:8b:5c:65:a4:ed:31:f2:9a:
         76:9b:51:8c:6b:d5:a3:64:f5:9c:4a:ba:4d:e4:43:bc:10:b4:
         63:05:2b:e7:73:15:55:31:6e:41:8e:1b:20:6b:3c:3b:e9:f5:
         f0:0d:fd:f4:22:e3:74:e0:a5:56:cc:5e:39:23:d7:fd:c0:17:
         ae:f8:bb:c7:4a:5a:0a:b8:30:21:86:d1:8a:ed:7c:4c:d3:51:
         45:ab:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:03 2024 by rpki-client on console-fra.rpki-client.org