Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa
File:                     323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa (raw, json)
Hash identifier:          aaUSRO0BHLsM+7zCzPgolwFSUIbZWATkzFhA6Y7OANc=
Subject key identifier:   94:6E:C2:F8:F2:41:D6:0A:31:33:C3:50:D3:6D:73:F7:D6:2C:2F:64
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       7681630A189FE122AEE5E12B1AD3DC2C1340646F
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa
Signing time:             Wed 03 Apr 2024 21:27:54 +0000
ROA not before:           Wed 03 Apr 2024 21:22:54 +0000
ROA not after:            Wed 02 Apr 2025 21:27:54 +0000
asID:                     61951
IP address blocks:        2804:18c0:1900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:81:63:0a:18:9f:e1:22:ae:e5:e1:2b:1a:d3:dc:2c:13:40:64:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Apr  3 21:22:54 2024 GMT
            Not After : Apr  2 21:27:54 2025 GMT
        Subject: CN=946EC2F8F241D60A3133C350D36D73F7D62C2F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:2a:7a:7c:46:8d:48:21:12:c6:8c:b2:17:
                    ab:57:cf:ce:30:62:63:68:e6:b7:c7:30:1b:57:74:
                    ca:54:a7:98:20:6c:fc:b7:0d:ef:99:72:de:a4:b0:
                    08:1a:25:18:c1:1e:3a:49:0e:35:11:3b:d5:eb:4b:
                    f9:ca:31:31:ed:b7:1e:8b:5c:3c:06:2c:7d:3f:fa:
                    02:5e:b1:60:64:7c:98:fa:f8:47:a6:91:78:08:29:
                    eb:c1:d6:46:16:a1:13:62:00:1a:ef:c4:a5:a2:51:
                    e7:fb:d3:43:e3:fc:32:7a:ec:e1:2b:62:21:1d:5c:
                    2b:b5:d3:ef:37:ae:c8:62:1b:1d:ac:7f:98:1f:49:
                    17:4c:09:a9:da:9e:ba:e9:ce:54:ef:9a:8e:d0:19:
                    65:c6:bb:19:a0:89:53:5d:54:2e:43:89:ea:87:3d:
                    5a:25:26:af:25:b6:82:90:d1:31:3b:7a:16:f7:a9:
                    34:50:3e:e2:01:b7:15:02:c1:7e:77:1f:4f:b9:2a:
                    3f:67:9d:c5:b7:6b:ba:1a:de:21:ae:ba:44:dd:a6:
                    65:ae:09:32:c6:ec:56:d9:b9:6c:bc:af:06:0f:17:
                    86:3f:d9:e0:ad:d5:66:c1:96:61:a1:a7:61:f8:b4:
                    55:c1:f4:50:95:66:8f:ed:e1:fe:8e:55:a1:57:cc:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6E:C2:F8:F2:41:D6:0A:31:33:C3:50:D3:6D:73:F7:D6:2C:2F:64
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:54:19:8e:c1:6a:1d:94:97:f2:09:52:d6:8c:16:fd:15:b1:
         72:6f:6d:6c:7a:dd:c0:22:ea:00:80:94:3a:82:db:53:8e:a3:
         b2:b2:df:e0:31:76:ca:6e:5f:f9:07:70:93:ec:31:d3:d9:57:
         cc:42:69:a2:e2:4a:f8:8b:9a:0b:c1:bd:1d:ab:6b:98:f1:45:
         76:e8:7c:4b:a7:16:c8:66:6d:7a:ea:88:3b:f7:e8:3e:59:35:
         c7:07:df:af:86:82:8f:b2:7a:f4:5c:43:ad:e2:55:fc:98:8c:
         af:c2:d8:fc:3b:6d:ab:5a:56:64:6f:2a:03:62:e3:66:c4:a6:
         e8:fa:b7:39:a4:3b:5e:89:55:a2:1c:b6:91:e4:60:4c:d4:54:
         4c:75:bf:87:09:cf:e7:68:db:4c:c0:ce:94:91:48:4e:e8:a0:
         52:d4:a8:6a:7e:63:5d:7d:d6:8c:55:fd:56:05:aa:3e:17:6b:
         af:c7:56:f2:a0:28:03:80:97:fb:13:e1:59:28:82:fc:e0:74:
         f1:d5:c7:a0:27:cd:56:16:e4:57:56:e9:7c:7a:df:79:d0:12:
         09:01:99:b0:11:70:e0:ef:b7:2f:33:85:45:df:e4:8b:bc:b4:
         f5:07:8c:e0:34:83:33:d5:db:16:2b:05:09:ab:74:c2:e3:1a:
         4c:c0:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org