Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa
File:                     323830343a336136343a3a2f33322d3332203d3e20323636303836.roa (raw, json)
Hash identifier:          pa/4mbM/6g/50CSULJcbZNIPjR5hLpFn+mWMY2ykf6U=
Subject key identifier:   1E:C7:DC:5D:5E:5D:E8:D1:E6:7F:75:A6:FD:9E:80:F0:75:44:49:EC
Certificate issuer:       /CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
Certificate serial:       70D42C53F3649A4C30D776C1421EABBD71C35EC9
Authority key identifier: 6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa
Signing time:             Thu 20 Jun 2024 15:43:16 +0000
ROA not before:           Thu 20 Jun 2024 15:38:16 +0000
ROA not after:            Thu 19 Jun 2025 15:43:16 +0000
asID:                     266086
IP address blocks:        2804:3a64::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d4:2c:53:f3:64:9a:4c:30:d7:76:c1:42:1e:ab:bd:71:c3:5e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
        Validity
            Not Before: Jun 20 15:38:16 2024 GMT
            Not After : Jun 19 15:43:16 2025 GMT
        Subject: CN=1EC7DC5D5E5DE8D1E67F75A6FD9E80F0754449EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:87:2a:93:90:e0:69:17:04:31:c9:b6:92:a1:
                    2e:fe:be:bb:f2:c8:38:01:64:9b:bf:61:ab:db:7a:
                    bc:65:17:bd:75:3b:46:4a:bf:29:4d:5c:b0:25:45:
                    21:4e:33:74:d4:76:c5:6b:99:de:01:d3:4c:50:9a:
                    e2:f7:50:10:4c:07:7a:80:fd:3a:ae:42:1d:b8:fb:
                    7d:2c:cd:97:d9:4c:79:ad:ef:93:07:49:2e:a1:a2:
                    b0:4c:6a:14:1f:b4:96:1b:67:85:f9:76:bd:b1:e8:
                    56:ff:c2:8a:45:d7:1e:1c:ab:d4:39:1f:96:db:9c:
                    14:07:02:b0:96:86:62:3d:8f:b6:f1:90:17:b1:3a:
                    85:c2:bf:95:c5:bf:b8:64:03:31:be:3b:c7:da:9f:
                    87:2d:27:f7:49:0a:5b:15:d9:bf:a6:db:94:78:f1:
                    91:99:c1:5f:2d:93:e6:eb:dc:64:84:67:b0:58:10:
                    68:19:d4:e9:9f:7c:d6:35:4e:27:fc:e7:d5:c3:d9:
                    fb:bc:57:84:f3:26:0a:99:c4:66:db:d4:27:11:4f:
                    1b:ea:12:97:a4:aa:85:bf:54:18:1f:5f:d6:b4:d0:
                    c0:2f:a2:69:98:17:c4:61:29:c7:6d:c2:08:fe:15:
                    10:b1:c7:0a:7b:f5:bc:e2:63:a0:a1:df:54:de:c0:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:DC:5D:5E:5D:E8:D1:E6:7F:75:A6:FD:9E:80:F0:75:44:49:EC
            X509v3 Authority Key Identifier:
                keyid:6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:44:7c:ec:2a:f6:b4:35:96:41:04:d3:be:30:1f:d8:a2:
         16:6a:07:e7:9d:5e:9e:1f:1c:33:c2:63:87:6e:23:1f:ee:25:
         a3:cb:4d:d2:36:14:f0:71:2f:4f:cc:24:e3:05:d4:83:1f:9e:
         be:44:a6:0f:90:86:48:4b:b3:21:4b:6c:26:1c:2b:28:ca:4e:
         d4:42:7d:44:76:05:51:61:4d:cf:a0:ec:3a:a1:c3:4f:07:4c:
         ac:17:18:4a:36:be:00:77:13:df:68:d7:80:9d:fc:4b:f8:dd:
         33:d4:3c:08:f6:13:d4:fa:67:bd:5c:f3:86:18:b8:a6:41:8d:
         51:89:e0:6a:38:2d:ef:c9:24:7b:82:50:eb:92:f5:b5:6a:d4:
         33:37:59:d6:5a:ce:41:9f:86:d8:c7:31:20:14:1a:86:ad:41:
         0e:6d:38:a8:bf:6d:65:c3:b5:cb:79:df:83:fb:90:8e:63:b5:
         77:c8:8a:07:23:74:ea:68:94:d5:ec:4e:fa:01:84:25:65:7b:
         74:89:ea:3c:87:7e:ee:80:e3:fd:7c:1f:74:e1:74:d1:60:a9:
         05:a3:8b:6a:57:0b:f9:68:37:80:14:e9:04:dd:d5:df:09:68:
         22:7c:09:53:2c:3a:c8:5f:8e:1e:cc:a3:eb:e9:b0:c8:bc:ad:
         14:71:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:07 2024 by rpki-client on console-ams.rpki-client.org