Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa
File:                     323830343a373232383a3a2f33322d3332203d3e20323730383336.roa (raw, json)
Hash identifier:          /aFWsqEbmaHUZJK2z6obMDcuSXKS3xNzU3mhZTeouzY=
Subject key identifier:   6D:12:83:49:4A:22:0B:38:4E:A5:14:96:E0:85:40:2F:94:DA:1D:AD
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       6FF9F075474F4B6FC5390FF57AFC3BAD161CA5BB
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa
Signing time:             Wed 03 Apr 2024 18:32:08 +0000
ROA not before:           Wed 03 Apr 2024 18:27:08 +0000
ROA not after:            Wed 02 Apr 2025 18:32:08 +0000
asID:                     270836
IP address blocks:        2804:7228::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f9:f0:75:47:4f:4b:6f:c5:39:0f:f5:7a:fc:3b:ad:16:1c:a5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Apr  3 18:27:08 2024 GMT
            Not After : Apr  2 18:32:08 2025 GMT
        Subject: CN=6D1283494A220B384EA51496E085402F94DA1DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:8d:d5:ad:f8:22:29:ee:33:b6:d4:ad:17:
                    01:b6:9d:eb:97:7f:df:6c:42:78:b5:b1:68:c0:41:
                    28:d6:2f:db:8e:0d:93:a9:13:6d:68:d9:ca:b6:ce:
                    48:b2:69:b3:ab:d4:63:56:d0:bb:00:28:f5:80:4b:
                    f0:76:fb:32:1d:f1:c8:93:c5:e8:d6:ab:1d:20:33:
                    1c:60:c0:ed:5d:41:87:c8:99:fb:a1:27:3f:91:eb:
                    ff:70:34:7b:76:a8:01:99:a4:f5:bb:73:7e:76:71:
                    d9:da:06:aa:8c:0e:39:5f:62:5b:ec:9e:f9:ec:07:
                    19:65:51:0d:3a:a7:7e:1c:b8:d0:bc:d3:06:6d:67:
                    24:ad:38:e8:25:0e:d0:f7:72:9c:8f:75:68:f4:71:
                    7a:9a:3d:35:94:40:3f:b0:6b:aa:14:73:48:af:43:
                    db:1f:3a:8b:95:ae:61:3a:4e:a5:a3:77:ce:9b:2f:
                    7b:21:73:fe:54:05:c5:e2:80:fb:13:1e:5f:25:3a:
                    69:6b:c4:23:81:d8:05:37:72:8b:49:b3:ed:3e:47:
                    31:e3:a7:e4:68:a8:71:d1:6a:87:04:a6:53:f4:30:
                    38:64:fb:3e:05:f3:07:cd:d7:72:6c:4b:72:db:84:
                    bc:12:e1:a2:dd:e5:0c:d2:6a:4f:ed:bd:eb:ca:b3:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:83:49:4A:22:0B:38:4E:A5:14:96:E0:85:40:2F:94:DA:1D:AD
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7228::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:5a:7f:f6:9b:0f:09:70:3e:78:c1:c8:cc:c8:4c:7f:79:
         ba:9a:cb:73:ea:a4:d2:40:df:b2:97:f1:ba:49:bd:69:24:46:
         a5:02:f6:02:46:be:cc:70:53:e0:40:37:e1:65:af:7b:de:d5:
         8c:df:38:1d:e7:01:25:ca:11:bf:97:46:79:0e:b1:25:f6:73:
         b3:1c:93:97:67:b7:37:fd:38:72:cd:91:f4:58:41:8c:f5:1f:
         77:1e:b4:6a:32:5d:a6:9c:bb:ed:33:b7:99:c4:da:70:53:e9:
         84:e8:a9:e1:fd:5b:81:a9:2b:c3:ec:31:69:67:b6:cd:1c:79:
         b2:a7:46:4c:28:8a:d2:fc:fe:7c:7f:8a:fc:f3:e4:c2:94:2e:
         25:ac:06:52:9e:5d:e2:86:c6:9d:a4:d5:e7:9c:2e:6e:80:e0:
         8b:01:23:7a:40:db:9d:a5:6f:36:4c:92:10:f1:4f:57:0c:5e:
         d7:ef:0f:9d:10:1c:74:03:be:76:1d:c6:ea:26:38:fe:11:32:
         94:46:cb:5f:46:c6:bf:60:f7:9a:bb:75:21:8b:c0:cb:54:78:
         eb:0c:6d:03:58:b1:0c:4b:c3:41:74:ae:09:75:a0:61:18:4d:
         7a:05:8d:ce:be:47:fb:2f:4d:90:c9:96:17:0d:82:4b:55:06:
         21:ec:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:08 2024 by rpki-client on console-fra.rpki-client.org