Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa
File:                     323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (raw, json)
Hash identifier:          TV60F90sQodx2n6kQJsN8Ms9JLOP8hQUNbiowybKdGY=
Subject key identifier:   FE:6D:D8:EB:5E:E2:A4:DC:EB:5F:0C:7A:49:62:C9:70:82:75:33:89
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       61C3C704B4C2728303E4D0A55E44C1AA395711F1
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa
Signing time:             Thu 04 Apr 2024 17:33:58 +0000
ROA not before:           Thu 04 Apr 2024 17:28:58 +0000
ROA not after:            Thu 03 Apr 2025 17:33:58 +0000
asID:                     264596
IP address blocks:        2804:222c:200::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c3:c7:04:b4:c2:72:83:03:e4:d0:a5:5e:44:c1:aa:39:57:11:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Apr  4 17:28:58 2024 GMT
            Not After : Apr  3 17:33:58 2025 GMT
        Subject: CN=FE6DD8EB5EE2A4DCEB5F0C7A4962C97082753389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:a5:ad:5d:d2:5d:2a:17:94:9f:36:2f:ff:
                    b3:d6:c8:22:f0:01:c1:e6:38:04:68:e4:3e:f3:33:
                    c7:69:7b:3c:95:98:1f:0c:05:d2:90:e9:9e:b1:f8:
                    23:51:72:7f:e1:b4:18:17:23:3b:9f:e1:1b:d4:76:
                    c1:ce:2b:f9:b6:b5:a8:10:ae:99:db:b6:98:2a:c0:
                    be:82:88:15:98:f7:b8:46:8d:b5:b9:7d:66:ad:dd:
                    ec:27:c2:7e:a1:8a:c3:7e:76:ab:a3:1d:40:84:85:
                    73:25:d7:67:b6:ff:b3:59:31:52:c3:bf:87:b9:3c:
                    e5:f9:51:dd:a1:30:9a:3b:b1:2b:4d:6a:80:f8:b8:
                    9e:51:1a:02:43:33:c5:58:39:b1:81:3e:d4:fd:b2:
                    f3:d7:67:d5:10:7c:0e:6a:7b:ed:7b:65:7c:46:c9:
                    a8:ed:b7:d9:57:4e:b7:d4:bd:20:5a:b6:15:ed:f0:
                    d7:b0:7c:11:87:53:d7:ee:6b:a5:ad:d7:24:6b:a1:
                    bc:58:e8:6c:38:94:5f:6e:2a:ac:d8:bb:b5:73:fd:
                    bc:9c:07:d7:ea:dc:34:a0:89:cd:b7:5a:08:fe:77:
                    d2:48:f2:85:29:6a:ad:2a:a7:3e:9e:de:a8:98:13:
                    3a:51:c6:00:09:da:b3:ec:36:f1:40:6c:0c:d6:19:
                    6f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6D:D8:EB:5E:E2:A4:DC:EB:5F:0C:7A:49:62:C9:70:82:75:33:89
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:222c:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:9d:2a:ab:09:9a:6c:a9:4c:9b:f4:61:1e:b5:8a:60:20:
         e5:1b:fe:c6:d7:43:68:7d:79:b3:4d:92:eb:18:fc:2e:11:63:
         14:f5:74:fc:63:fa:59:d3:16:80:8e:b4:48:47:43:49:8f:f9:
         cc:68:5b:57:4b:6c:c0:0d:6c:2f:7d:f8:e2:f5:93:4b:cf:7e:
         a2:f2:a3:01:a5:6c:3b:d8:de:5a:64:ef:5a:4d:29:4a:ce:50:
         70:1c:a3:ef:7c:1f:57:34:e6:0d:e0:7b:87:db:bf:e8:ab:1b:
         24:b4:19:ca:86:a5:72:40:42:42:8a:b9:be:84:7a:3b:b8:ff:
         a8:e5:03:35:36:66:3a:38:5d:3e:09:a8:50:a3:8a:43:86:37:
         c8:52:74:75:52:ea:da:75:45:50:91:15:1c:15:b9:d4:5a:3c:
         a1:73:79:76:56:dc:cb:bf:cc:1f:33:57:e7:23:23:ff:6d:06:
         ee:67:c6:a5:b0:a4:95:7e:92:8e:c2:04:26:fa:90:92:81:11:
         d0:e6:37:8e:87:09:07:21:4c:9e:f5:e6:8c:4c:74:30:df:8e:
         7d:cd:95:c5:e6:b1:15:04:3e:bb:59:f0:1c:0c:7b:fb:08:cd:
         cc:ca:12:a9:1f:bb:7f:66:32:a8:19:5d:9b:85:90:bc:b8:1b:
         7c:4f:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org