Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa
File:                     323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa (raw, json)
Hash identifier:          cCYu6BeaOCOqgSa8HHrgkdGBTk3z8eEwXR/FC1SGxHg=
Subject key identifier:   B9:06:D8:45:D2:BE:56:A7:A3:60:C3:15:3C:D9:01:DA:52:43:A1:66
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       30FA9BD2F28BCE20671E4C0212C53FF6726FC07F
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa
Signing time:             Wed 03 Apr 2024 21:27:55 +0000
ROA not before:           Wed 03 Apr 2024 21:22:55 +0000
ROA not after:            Wed 02 Apr 2025 21:27:55 +0000
asID:                     61951
IP address blocks:        2804:18c0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fa:9b:d2:f2:8b:ce:20:67:1e:4c:02:12:c5:3f:f6:72:6f:c0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Apr  3 21:22:55 2024 GMT
            Not After : Apr  2 21:27:55 2025 GMT
        Subject: CN=B906D845D2BE56A7A360C3153CD901DA5243A166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:52:05:3c:4e:fe:c0:21:7e:74:98:84:73:
                    3b:4a:aa:05:f9:68:7d:bc:ac:72:0e:0d:9e:5d:c2:
                    94:5f:2e:a2:2e:db:c8:99:26:26:bd:0e:58:8d:ba:
                    06:b4:52:28:29:33:a3:91:15:e2:a7:82:21:90:1a:
                    3d:bf:a2:2d:9d:7c:d6:57:81:e1:3d:2a:54:6c:e3:
                    a7:36:bd:bf:c7:f1:14:81:1a:f2:c7:64:17:23:1f:
                    03:92:c0:a4:40:1e:38:61:e2:79:e5:81:c6:98:fc:
                    82:d8:ee:ce:05:b8:85:cb:95:5e:c8:f3:9f:c7:7f:
                    cf:50:cd:f7:2c:e2:6c:a2:ec:c5:c3:3d:48:4e:c7:
                    4c:41:f8:55:a0:8e:34:4a:10:32:6f:c2:e0:b7:df:
                    8b:9f:e0:f4:36:9a:80:06:e3:0e:3d:17:8d:8a:32:
                    fe:80:4a:4c:a1:0d:41:ee:bc:a5:62:1e:fd:aa:92:
                    e3:ef:49:95:ce:0f:09:01:5a:ff:da:9e:7b:77:9f:
                    94:ce:d4:ce:0a:41:1f:fa:49:df:6c:56:10:35:2b:
                    f1:47:23:1c:6c:62:8d:2f:ab:d6:a3:b4:11:fa:df:
                    58:8f:6f:3f:3a:d7:16:5f:f8:df:a9:1c:ec:b1:a1:
                    b0:1e:97:82:55:e1:f0:04:e7:64:61:2d:6f:8d:7c:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:06:D8:45:D2:BE:56:A7:A3:60:C3:15:3C:D9:01:DA:52:43:A1:66
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:00:53:46:7c:da:8b:b1:de:2b:73:42:ee:c2:f8:67:9b:b3:
         21:ca:0e:dd:17:a6:a0:79:88:56:fd:84:27:90:72:53:fd:3d:
         50:d5:12:00:33:9a:9d:2e:a0:8f:52:34:6f:ea:55:18:64:a9:
         06:be:3a:72:94:ab:cd:60:b1:2b:b8:47:5f:3e:d4:33:39:4e:
         8a:cf:a7:5c:9f:2b:25:35:f9:ad:32:eb:67:03:ae:55:6d:bd:
         a1:36:8d:ff:34:7b:d0:95:ce:90:b2:b4:ec:59:13:38:e7:d4:
         3f:3f:8c:59:c1:72:5d:24:f8:d3:e8:9a:9f:19:db:e5:e8:8d:
         62:e0:1e:8c:ae:91:1e:4a:51:05:31:db:51:f8:10:b0:7c:0a:
         4b:be:a5:4e:76:a6:d9:63:61:d5:6f:0d:76:57:f5:75:8c:19:
         42:46:c6:d9:a1:3d:f5:13:45:7b:08:8f:b6:99:44:09:29:ce:
         a0:f3:c3:33:26:ef:49:41:b7:94:f9:45:06:26:dc:a8:2e:ef:
         68:92:78:e1:b6:dd:32:e0:8e:b0:61:a8:8f:c2:8c:2d:e8:e4:
         d9:e5:87:55:03:74:b3:16:36:29:fd:03:3d:e9:51:c5:a9:91:
         74:65:7d:f4:d5:2b:31:7e:36:d1:b1:5c:8f:6e:ff:6d:2b:e3:
         ba:61:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org