Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a3a2f3336203d3e20323636333338.roa
File:                     323830343a333634343a3a2f3336203d3e20323636333338.roa (raw, json)
Hash identifier:          +NQSlVo2FSxTaoPHGhTJ0ULfYy525SsxQTilvLssLoM=
Subject key identifier:   E1:4B:AB:17:41:38:38:16:EC:EE:9B:F4:74:74:D5:38:6A:0A:36:3F
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       60A603D279DE4CB0BAC69A8689926FE90F23018A
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a3a2f3336203d3e20323636333338.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266338
IP address blocks:        2804:3644::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl
                          rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a6:03:d2:79:de:4c:b0:ba:c6:9a:86:89:92:6f:e9:0f:23:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:88:28:27:54:ed:cc:53:91:3c:af:97:12:
                    ae:a0:f5:a7:94:b7:c7:82:c5:dd:55:59:2c:8c:de:
                    c7:48:a6:f8:6d:27:6e:d8:f5:09:91:f9:7b:17:61:
                    c9:53:26:3e:88:ff:69:2f:36:c5:f2:89:ed:eb:05:
                    ba:d5:eb:e9:02:b4:b4:5d:b6:74:0f:8a:65:71:a1:
                    82:81:6c:33:a1:f0:db:2d:26:80:c5:c7:56:46:b7:
                    3d:0b:eb:b4:58:08:a2:6f:ab:c4:6b:8d:92:e7:ca:
                    4e:0d:8d:d9:41:b4:9d:6c:78:ce:cc:a1:33:50:8f:
                    1c:b9:76:77:b0:ae:b0:b8:bc:75:67:ec:f9:4f:ce:
                    5e:7a:f6:c5:f7:a8:03:4d:c1:92:eb:7d:7a:07:a1:
                    82:05:01:0f:6e:dd:88:a5:a5:a0:35:2d:81:27:e6:
                    dd:3a:4f:cf:89:43:e8:8e:39:3b:29:5f:25:90:13:
                    cf:17:99:c6:ce:4e:73:a7:d5:1b:a5:c5:88:1e:c8:
                    f2:fc:b3:7e:7a:d5:a1:29:56:3c:9b:9e:29:39:cb:
                    d7:17:14:75:9b:e7:b7:c9:0a:35:1d:2e:e4:a3:be:
                    9c:1a:84:24:af:c2:44:54:14:a6:9e:0f:06:7a:05:
                    53:3b:41:55:96:3f:da:81:d3:7f:8b:b9:9e:78:5a:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4B:AB:17:41:38:38:16:EC:EE:9B:F4:74:74:D5:38:6A:0A:36:3F
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a3a2f3336203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3644::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:61:b0:a3:18:f5:46:83:d8:4f:d0:2c:de:f2:6a:23:c1:6e:
         54:7a:e0:ae:2b:b1:b9:8e:32:3e:c1:08:4d:ad:80:65:1c:b0:
         fc:68:93:f7:e3:87:53:01:7e:5b:d7:3e:a3:9d:ae:48:6e:7a:
         4c:68:58:2e:be:b5:76:a0:4e:d4:54:d6:d4:81:83:08:0d:35:
         50:65:72:68:00:0e:d0:2d:f7:3c:6c:d6:0a:4c:3d:2c:1a:ee:
         93:37:fb:45:4c:68:2d:f9:37:43:ea:de:84:ab:cc:81:eb:08:
         46:5f:5c:4c:88:ff:ae:0f:d9:55:8f:d0:f0:56:b2:b8:f7:86:
         a2:ad:e8:76:24:3d:d9:f5:5d:ca:43:6c:d0:47:0c:80:8c:70:
         ba:83:4d:60:8f:e6:bd:56:e1:3e:1c:d8:61:4a:7f:42:ee:6f:
         1d:a7:fb:85:a3:f0:80:2d:50:98:00:62:80:89:3b:4a:b1:cc:
         bd:80:74:51:2a:0b:e4:6b:70:26:21:97:9d:cf:ec:31:60:93:
         43:4e:91:60:d8:25:37:bf:8b:07:75:6c:a9:05:50:ec:7f:5b:
         f0:a6:e4:46:2a:6d:03:1c:c3:a7:b7:ab:b3:a8:b6:fe:b3:1f:
         66:5f:83:49:27:07:fd:ba:88:19:a6:3a:30:19:e3:f8:ee:8e:
         7f:5b:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org