Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa
File:                     323830343a333635343a3a2f33322d3332203d3e20323636333432.roa (raw, json)
Hash identifier:          gGSbAmn2ScJHXZgx3nkMnPf1WbAMfCpQCKIyk8g5OHY=
Subject key identifier:   35:95:A3:44:0C:F6:C0:E4:72:74:E8:B5:F2:A7:39:EF:09:A4:A3:64
Certificate issuer:       /CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
Certificate serial:       0B4D854F3CA46B01A19EF7F40CD62233F6AD09AA
Authority key identifier: F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa
Signing time:             Wed 19 Jun 2024 19:24:46 +0000
ROA not before:           Wed 19 Jun 2024 19:19:46 +0000
ROA not after:            Wed 18 Jun 2025 19:24:46 +0000
asID:                     266342
IP address blocks:        2804:3654::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4d:85:4f:3c:a4:6b:01:a1:9e:f7:f4:0c:d6:22:33:f6:ad:09:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
        Validity
            Not Before: Jun 19 19:19:46 2024 GMT
            Not After : Jun 18 19:24:46 2025 GMT
        Subject: CN=3595A3440CF6C0E47274E8B5F2A739EF09A4A364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:a4:95:04:aa:ee:d7:b6:ac:25:da:7d:04:
                    71:cd:c1:71:19:54:25:5b:d0:fd:1a:ca:dd:c7:95:
                    b9:42:37:c6:fe:f7:23:2e:81:49:a0:a8:9f:83:47:
                    a0:f9:80:28:83:9d:c2:90:72:25:80:5d:2c:13:34:
                    d8:03:13:62:64:f0:4c:e6:d3:e4:2d:dd:f1:40:38:
                    ec:af:44:12:94:49:7d:8b:7f:99:fc:f0:64:9b:7f:
                    bd:b7:d3:db:58:53:c9:09:4a:e1:ff:f4:5b:05:79:
                    98:64:b5:df:f9:8d:04:e6:6a:8f:c6:9a:5c:90:32:
                    d5:f1:30:5a:bb:7e:cb:da:2e:31:65:8d:fd:bc:36:
                    b4:61:7b:59:90:06:34:c6:8d:35:69:e6:77:cb:53:
                    b6:da:44:f9:f5:20:36:08:ce:be:3b:67:da:a2:46:
                    d4:1b:c7:b8:da:9d:2b:8b:f0:5a:0a:49:28:86:01:
                    92:5a:5f:89:9c:cb:4c:3b:d3:2f:3e:b4:ec:84:98:
                    6b:8c:0a:c5:ce:4b:53:99:1c:e3:93:59:f5:48:47:
                    eb:38:7c:b0:df:38:3d:7f:38:56:83:e2:98:ba:6f:
                    c8:36:00:18:8b:b7:9d:4f:9e:c9:93:2d:ea:bd:91:
                    14:f2:ec:3a:e8:f1:87:74:d6:1a:33:ff:ba:20:92:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:95:A3:44:0C:F6:C0:E4:72:74:E8:B5:F2:A7:39:EF:09:A4:A3:64
            X509v3 Authority Key Identifier:
                keyid:F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3654::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:48:f2:77:30:33:81:c6:09:b0:3e:f3:ee:52:89:2f:e0:32:
         2a:b5:cb:07:d9:41:00:63:ad:ff:8a:71:39:86:56:e6:b5:65:
         c5:ed:2d:23:b9:cc:be:b2:b3:d6:ff:e5:1a:8d:f4:c7:5c:84:
         25:a1:af:8e:c0:75:1a:4a:b7:26:a7:51:b0:79:21:ba:6e:ee:
         25:6f:61:58:d9:c1:f2:5a:23:5a:3c:b1:23:b6:20:f0:c7:87:
         73:2e:ed:0d:bd:48:a6:92:71:d8:06:3e:4e:ad:49:3e:78:04:
         f0:e0:33:84:15:21:22:76:76:b3:c2:f1:b0:2e:7e:96:d3:91:
         03:e4:69:b2:ad:c7:57:e1:40:88:34:59:bf:68:a3:07:27:3e:
         ab:f0:0d:f8:ae:62:ff:6d:fa:25:00:e8:72:c2:e4:f6:23:7a:
         0f:74:87:ba:fb:28:9e:47:fc:f8:df:aa:cc:5f:af:4b:28:96:
         47:2f:4c:25:3f:38:f7:36:33:1e:ef:68:a2:75:d2:a3:88:28:
         72:2a:c7:ae:95:6e:ef:18:b7:f0:80:e9:ed:9b:c4:46:3b:28:
         00:5d:bd:77:3a:5d:24:f2:92:88:54:5b:48:8f:e9:f2:86:60:
         c7:3b:ce:26:f8:1c:30:64:e7:53:fb:c7:3d:d1:dd:4b:3d:c0:
         db:5f:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:56 2024 by rpki-client on console-fra.rpki-client.org