Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa
File:                     323830343a363631343a3a2f33322d3332203d3e20323639353332.roa (raw, json)
Hash identifier:          khFX0Bf7S3GVpJBPAM/UJ5yE+vkKZR9dxzDf9fBxUKo=
Subject key identifier:   6A:95:8E:AB:35:73:9A:4B:80:42:F9:FE:23:9C:56:48:A6:66:ED:95
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       4D24CB360DC43427318C91D3641057EA1FCD6AF1
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     269532
IP address blocks:        2804:6614::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:24:cb:36:0d:c4:34:27:31:8c:91:d3:64:10:57:ea:1f:cd:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:56:05:cb:c0:ee:fa:ad:fd:74:69:32:0f:
                    cf:b3:4e:86:1e:7e:37:d8:32:9f:8d:6c:45:bb:a8:
                    c8:57:4b:35:bb:9d:9a:41:a7:a3:96:72:22:00:02:
                    4d:97:e7:18:e2:b8:5f:b3:7e:e2:17:6c:22:8e:ab:
                    98:f1:c9:86:cb:99:94:bf:41:ee:ff:be:7b:b3:68:
                    5f:03:16:04:41:30:a8:d8:85:73:e9:70:21:b0:bc:
                    53:df:86:f4:6a:59:a6:50:14:98:e0:a2:ea:47:a5:
                    f3:71:c1:8e:bb:ca:5a:3a:fa:eb:b5:42:7a:01:1c:
                    8b:b8:a4:7d:4b:7f:79:fb:24:fd:23:81:92:25:07:
                    dd:a0:48:51:28:c2:54:75:63:9c:42:1b:e5:df:05:
                    dd:4d:76:7e:cb:a5:4a:a3:02:43:f6:3b:5a:29:3e:
                    f2:69:19:1a:a5:2d:4b:a9:40:92:a5:dd:ad:e6:aa:
                    ae:53:99:7a:5a:10:e7:5e:ed:1d:5d:62:ea:31:3d:
                    cc:39:c0:5a:1f:6c:f5:ad:95:bb:b0:f4:62:67:11:
                    2c:ee:32:6f:3e:67:02:88:0f:2a:3c:5b:35:32:77:
                    f6:50:e9:1f:f7:15:2f:f8:6b:84:72:5b:f1:49:37:
                    f8:32:49:91:b1:1f:30:34:81:22:d2:28:02:11:e7:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:95:8E:AB:35:73:9A:4B:80:42:F9:FE:23:9C:56:48:A6:66:ED:95
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:6e:40:7c:1b:1b:c7:a5:3d:86:17:cb:22:43:18:46:36:d9:
         ac:97:32:b9:b4:e4:90:c5:71:7a:a4:0c:29:ae:ef:2d:e4:73:
         a3:22:f3:7e:37:71:1c:2c:2b:06:ac:94:ca:07:ca:62:98:6b:
         a6:b9:f3:54:86:55:31:73:31:01:a0:d1:15:5b:e3:7f:85:e6:
         a0:74:79:5a:a7:6f:91:2c:ba:77:42:b2:f4:51:22:48:89:7f:
         b7:55:f4:af:09:1c:68:cc:c5:ab:82:26:f1:c7:a8:aa:b7:aa:
         1b:71:80:1f:18:d3:a6:7a:20:a8:46:b9:ca:63:0a:45:db:dc:
         f0:e0:ac:3b:e2:39:c5:59:37:f0:29:65:aa:0d:4d:9d:83:a1:
         91:b4:a9:00:3a:b8:65:98:23:45:ce:82:37:8a:69:5f:d5:6e:
         d6:dc:5b:8a:78:77:29:13:d6:b7:cd:17:5c:4b:04:c1:5e:97:
         4c:c8:74:63:fa:c8:aa:8d:de:56:9c:fe:b4:ef:a8:5a:f0:cc:
         5f:81:8b:ec:2f:81:7f:13:fb:6e:a6:57:b1:46:71:04:2c:33:
         96:e4:7b:4e:10:07:f2:20:8b:e9:30:47:e6:e4:72:61:3e:f1:
         92:0d:72:4d:27:ed:d1:bf:d0:17:3d:e8:28:5b:1e:1d:f4:05:
         56:e1:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org