Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a3a2f33322d3332203d3e20323636363130.roa
File:                     323830343a336561303a3a2f33322d3332203d3e20323636363130.roa (raw, json)
Hash identifier:          aVa4DYbVN+0HRfACKlGXNvhTQGcg9cz2YOEh7HDRhqc=
Subject key identifier:   13:33:9A:E6:52:9C:18:86:63:11:18:BB:C0:F5:54:3E:3C:EC:ED:DF
Certificate issuer:       /CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
Certificate serial:       049C11F129544E8EA0B2C8586D2C654215835C65
Authority key identifier: 6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a3a2f33322d3332203d3e20323636363130.roa
Signing time:             Thu 04 Apr 2024 08:59:10 +0000
ROA not before:           Thu 04 Apr 2024 08:54:10 +0000
ROA not after:            Thu 03 Apr 2025 08:59:10 +0000
asID:                     266610
IP address blocks:        2804:3ea0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9c:11:f1:29:54:4e:8e:a0:b2:c8:58:6d:2c:65:42:15:83:5c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
        Validity
            Not Before: Apr  4 08:54:10 2024 GMT
            Not After : Apr  3 08:59:10 2025 GMT
        Subject: CN=13339AE6529C1886631118BBC0F5543E3CECEDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:dc:ab:ba:ca:48:0e:1f:b3:06:36:83:0c:
                    0c:44:8b:9c:5e:bf:33:27:6c:60:34:de:ce:54:4e:
                    21:2c:16:0c:82:2a:c7:f8:5e:9b:24:19:5a:15:5b:
                    ac:27:b7:ec:a7:9c:86:bb:37:65:24:90:08:43:b6:
                    ac:39:7e:a1:67:b6:a8:16:b3:2e:51:6e:48:db:57:
                    c5:2b:fe:27:f9:64:79:69:65:55:db:03:0f:11:a9:
                    e9:cb:45:b7:41:fb:d7:d4:24:2e:8d:7f:30:6b:54:
                    b0:9b:84:4b:66:37:54:0c:91:5a:54:04:5a:5d:06:
                    a4:e0:3e:8c:ad:01:ea:8f:c5:54:85:7a:c3:28:fe:
                    bb:69:8a:f4:a5:1d:11:48:dd:a9:27:98:ec:ee:64:
                    04:ec:ee:2d:48:ba:6a:fb:ae:e1:36:bd:11:2d:1d:
                    2b:cd:24:6d:df:d7:a4:98:df:1e:ff:6d:4f:2b:d3:
                    da:e2:d1:55:52:ab:4b:48:ba:dd:ef:8a:31:27:f0:
                    68:3b:b4:c0:66:66:7c:79:87:58:82:1e:88:a3:ae:
                    f2:0f:fc:24:f3:1e:db:e9:97:28:4a:76:37:ee:75:
                    39:75:60:ec:cc:50:12:e2:35:0f:3e:41:96:e7:be:
                    71:0e:b1:15:fb:92:5a:76:cc:fb:65:85:8c:d2:c2:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:33:9A:E6:52:9C:18:86:63:11:18:BB:C0:F5:54:3E:3C:EC:ED:DF
            X509v3 Authority Key Identifier:
                keyid:6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a3a2f33322d3332203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:24:47:d8:15:a0:89:92:74:25:72:e3:bd:70:1a:c0:94:
         7f:65:0b:4d:7c:c2:14:29:bb:4e:10:a3:30:70:a4:a9:37:6b:
         20:d7:00:ab:d5:11:cb:67:72:40:b0:87:4e:86:23:e5:16:b8:
         22:5a:78:be:14:95:4e:18:3c:04:e9:f0:c0:fc:34:d9:b2:73:
         ac:11:17:62:61:e8:b4:0b:6d:a1:2f:51:91:f4:6c:34:1f:a7:
         52:f7:3e:d0:1f:e8:d9:85:cf:c4:88:21:1a:cd:f4:61:7e:ab:
         25:02:e5:ae:65:39:ea:5f:0a:6f:8c:c0:90:0f:7d:8c:e9:a1:
         f2:c0:82:b8:03:64:9e:47:df:bf:7c:24:59:4a:96:d4:39:cc:
         5e:6f:b1:46:cc:6a:e8:3a:f4:0d:93:c5:aa:c7:e0:d5:58:56:
         f2:29:e6:d5:9e:ed:3b:62:42:88:74:d4:7d:59:20:c4:61:96:
         3f:26:26:8c:39:00:86:af:69:9b:25:34:1b:0c:ec:12:a5:33:
         12:ae:aa:da:3b:11:e4:c5:c7:40:2c:d8:e8:b4:50:1b:c3:bb:
         e4:03:90:4a:4b:4e:1f:1f:83:ce:c4:3c:50:a7:29:96:c3:68:
         2f:79:e2:ce:09:fb:a9:50:4a:fa:a8:a6:73:de:3d:4f:fb:bb:
         c5:03:89:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org