Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3a2f33362d3336203d3e20323633343231.roa
File:                     323830343a313630303a3a2f33362d3336203d3e20323633343231.roa (raw, json)
Hash identifier:          VNRXoZbzLoAYMO1y7rC2/BYaLJiPM5Zme1UyrlECMFQ=
Subject key identifier:   BE:76:81:6C:E0:86:CB:F4:0F:36:C2:C7:3C:EE:B9:1E:D7:ED:CB:E1
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       0EF6C7279FD6ABE4180CD85EA8A5607683707F3B
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3a2f33362d3336203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:47 +0000
ROA not before:           Thu 04 Apr 2024 07:39:47 +0000
ROA not after:            Thu 03 Apr 2025 07:44:47 +0000
asID:                     263421
IP address blocks:        2804:1600::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl
                          rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f6:c7:27:9f:d6:ab:e4:18:0c:d8:5e:a8:a5:60:76:83:70:7f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:47 2024 GMT
            Not After : Apr  3 07:44:47 2025 GMT
        Subject: CN=BE76816CE086CBF40F36C2C73CEEB91ED7EDCBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:f9:db:84:e4:8d:09:af:bf:89:ba:fa:41:
                    04:46:1e:f9:8d:cf:37:f6:3b:ad:a5:1f:5b:52:a7:
                    25:97:d9:6f:2f:bf:83:18:87:4c:c4:75:10:44:9b:
                    33:5c:4e:06:65:96:a2:b8:5e:20:5c:65:85:76:92:
                    f6:fc:7f:35:e2:8a:29:44:89:6b:f8:69:61:42:c7:
                    1d:fe:f2:98:b9:e2:2d:bf:23:47:70:aa:c9:40:9c:
                    81:57:b5:d7:22:3c:2b:21:7b:4d:1f:fc:c6:49:3e:
                    d0:d5:8f:25:03:53:46:75:20:75:fc:f3:e3:d2:fd:
                    a0:4f:4b:ad:42:d7:2f:1b:63:ef:a6:4a:fb:e1:f4:
                    36:db:3d:fe:0a:06:08:b1:72:ab:19:22:5d:e0:a0:
                    80:35:a8:45:65:01:2e:ca:79:78:ee:eb:da:30:91:
                    aa:89:9d:65:0b:cb:0f:f3:57:5e:65:8f:70:f2:ee:
                    15:5d:5e:f1:b0:ce:78:7a:57:51:a9:20:a9:2f:e5:
                    15:89:21:1d:bf:48:9d:8e:07:6d:ec:a4:08:3a:38:
                    e4:7b:1f:8c:e4:dd:90:91:ee:68:58:e4:33:2b:f8:
                    4e:c7:41:5c:7d:10:78:4d:be:f0:ab:ac:76:34:f8:
                    69:17:10:b2:67:e8:d5:9d:70:81:a2:f4:fe:4c:d9:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:76:81:6C:E0:86:CB:F4:0F:36:C2:C7:3C:EE:B9:1E:D7:ED:CB:E1
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3a2f33362d3336203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600::/36

    Signature Algorithm: sha256WithRSAEncryption
         71:d5:3f:cb:5c:75:ab:24:93:45:f0:45:29:1f:f4:db:aa:5c:
         40:b2:ee:18:81:48:10:9a:f0:b6:11:14:34:75:81:7f:e8:66:
         a6:ee:0c:f3:39:d1:0d:42:fd:cc:88:5c:bb:08:d3:86:0b:d7:
         dc:f4:47:93:c4:c7:b7:f0:56:e1:fe:a8:d8:b9:79:d4:a2:2c:
         9e:0f:83:ae:ce:86:49:1b:09:fd:ad:e2:87:8c:52:28:0d:cb:
         ed:52:16:33:e0:ac:ae:a3:d7:4a:fb:85:ec:93:f2:0b:2d:36:
         bb:ce:44:82:d0:e2:56:39:23:0d:3d:84:3d:d7:f1:84:84:06:
         55:17:c5:fc:2d:93:8d:a2:ff:c3:12:15:86:aa:f6:66:48:fa:
         6d:55:c7:0a:bd:01:d9:8b:fe:3c:59:f7:4f:62:19:45:86:89:
         f5:19:99:ba:80:38:74:39:c7:4f:3c:7b:c3:32:11:18:1c:e6:
         5d:8d:43:1c:95:a4:b5:5f:d3:aa:b6:d1:27:13:00:16:d9:4b:
         2a:2c:59:73:92:73:07:33:c8:87:c5:51:57:c2:10:55:d0:dd:
         96:43:54:a6:71:60:ea:43:11:bf:73:ca:6c:fe:f2:ad:9c:bc:
         04:d1:cd:3e:55:4f:ab:a8:76:36:ba:2a:30:64:a8:13:91:3f:
         42:d4:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:01 2024 by rpki-client on console-fra.rpki-client.org