Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/323830343a363534303a3a2f33322d3336203d3e20323639343738.roa
File:                     323830343a363534303a3a2f33322d3336203d3e20323639343738.roa (raw, json)
Hash identifier:          NxjEmvLgwewSiS6yrJQpkEcTTCRbofgxJjL1q8pYISc=
Subject key identifier:   6D:E1:57:71:F1:8A:55:15:83:50:26:5B:60:58:4A:33:B6:6A:54:1B
Certificate issuer:       /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Certificate serial:       20F81E696A4627C1A7B8346A3E67A13F82E2108C
Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/323830343a363534303a3a2f33322d3336203d3e20323639343738.roa
Signing time:             Wed 03 Apr 2024 18:30:27 +0000
ROA not before:           Wed 03 Apr 2024 18:25:27 +0000
ROA not after:            Wed 02 Apr 2025 18:30:27 +0000
asID:                     269478
IP address blocks:        2804:6540::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl
                          rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f8:1e:69:6a:46:27:c1:a7:b8:34:6a:3e:67:a1:3f:82:e2:10:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
        Validity
            Not Before: Apr  3 18:25:27 2024 GMT
            Not After : Apr  2 18:30:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:f7:03:df:1f:15:20:6c:4f:f1:f8:32:d8:
                    d6:2e:4e:bb:8a:fc:4a:2f:ad:b9:9a:a1:9a:b7:1a:
                    29:7c:6b:25:d2:ba:ac:f9:59:0f:12:4d:11:58:3b:
                    81:d7:55:d2:0a:86:23:33:7c:07:13:1b:ea:bc:db:
                    e0:4c:8d:a0:06:fd:95:71:2e:f5:72:07:16:c2:bf:
                    b6:98:83:fe:c5:ad:2b:95:74:ba:72:3b:13:ec:81:
                    9c:59:13:d7:ad:d6:84:19:d6:3d:fb:13:58:b8:3e:
                    25:81:9e:ad:da:14:fb:86:33:0e:e3:84:b4:3b:fa:
                    80:80:20:54:18:69:7b:b5:9b:71:ac:29:8d:53:61:
                    bb:9e:b8:e8:00:d2:9c:c3:d3:cb:a6:71:38:95:13:
                    48:44:db:af:3f:7b:c2:a1:bf:f7:c9:d8:11:e0:28:
                    86:3a:cf:fd:b1:1d:f6:79:84:44:82:9b:7a:49:1d:
                    9d:5b:28:c7:46:28:a7:c1:97:ad:63:54:11:3a:fd:
                    4b:c5:8a:e9:a0:70:d1:f5:4d:fc:9d:3f:1d:26:c7:
                    b4:96:17:82:ae:50:6c:05:6a:62:c2:96:11:7e:d2:
                    70:47:51:a6:c3:2b:2b:9e:e3:21:85:97:9e:e6:a6:
                    3a:d3:d5:31:f4:49:a4:c4:23:b7:f8:41:e9:1e:66:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E1:57:71:F1:8A:55:15:83:50:26:5B:60:58:4A:33:B6:6A:54:1B
            X509v3 Authority Key Identifier:
                keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/323830343a363534303a3a2f33322d3336203d3e20323639343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6540::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:16:2a:7e:30:93:6e:88:e2:57:32:cc:74:f2:61:ab:91:8e:
         83:df:70:a8:16:52:39:e3:59:0d:52:bf:5b:69:98:0c:e3:f2:
         db:e7:d8:bc:0f:fa:40:8a:29:d4:95:c0:0f:50:86:a3:46:50:
         6a:54:45:94:eb:0a:04:80:c2:12:8d:0d:3c:3d:1a:a9:40:bd:
         2b:9c:37:e5:4d:73:27:50:08:ae:78:95:cb:d3:70:e4:c4:e3:
         ea:00:0e:58:0a:bc:2c:2c:8d:e9:0e:75:95:04:47:e8:1e:96:
         bf:10:c7:a6:85:0d:47:1b:c9:a8:24:8e:78:5c:08:e6:55:b2:
         51:a2:4a:8c:bd:93:9b:7d:56:14:b6:39:46:8f:54:50:55:d7:
         37:bb:32:95:64:ff:cf:d7:d9:58:9e:00:26:5a:84:e3:73:94:
         1c:15:8c:da:44:b7:67:84:bf:7b:76:ce:3a:7b:15:c5:fa:10:
         39:35:79:13:69:ee:b8:e4:1d:95:6e:04:ed:5b:99:01:35:4e:
         8d:07:a7:1d:8e:66:2a:45:1b:c6:1a:d2:83:72:5f:a3:bf:ee:
         d0:6f:c9:dd:4d:2b:3a:1a:65:ac:84:d1:e7:1f:2b:4c:47:00:
         49:04:b7:24:49:72:ad:d9:14:aa:59:4e:c8:7f:0d:6a:99:93:
         08:49:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:41 2024 by rpki-client on console-fra.rpki-client.org