Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3a2f33322d313238203d3e20323730363232.roa
File:                     323830343a366564383a3a2f33322d313238203d3e20323730363232.roa (raw, json)
Hash identifier:          CFNNKW2grSFS1rLyKYKJJ1WGkAWyATLKda+7vQdysLE=
Subject key identifier:   A8:5D:B5:46:30:D2:8A:62:5A:DA:D3:FE:7D:C2:80:1E:4B:4C:05:AC
Certificate issuer:       /CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
Certificate serial:       5B083883B60167A846616520BF84D55BD2FC683B
Authority key identifier: 6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3a2f33322d313238203d3e20323730363232.roa
Signing time:             Fri 13 Sep 2024 17:59:23 +0000
ROA not before:           Fri 13 Sep 2024 17:54:23 +0000
ROA not after:            Fri 12 Sep 2025 17:59:23 +0000
asID:                     270622
IP address blocks:        2804:6ed8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl
                          rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:08:38:83:b6:01:67:a8:46:61:65:20:bf:84:d5:5b:d2:fc:68:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
        Validity
            Not Before: Sep 13 17:54:23 2024 GMT
            Not After : Sep 12 17:59:23 2025 GMT
        Subject: CN=A85DB54630D28A625ADAD3FE7DC2801E4B4C05AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:b1:b7:a0:81:92:ba:60:74:55:b0:c6:98:
                    2b:f5:a5:ec:d7:4f:95:9f:01:33:68:b9:86:4d:27:
                    05:0a:59:31:81:bb:2d:37:51:0b:21:ac:bd:c5:d1:
                    02:3b:3a:64:09:bd:48:e2:a0:78:7e:c1:42:e9:56:
                    ef:ea:96:05:ad:c7:97:fa:04:67:55:db:c7:d1:2c:
                    aa:ee:72:05:db:4d:a4:ad:93:a1:58:a2:0e:6d:2b:
                    dd:95:ec:d5:76:fe:27:c1:a5:fe:b5:54:65:a0:0b:
                    e9:bf:fe:e4:ff:93:ed:7c:b4:97:55:0f:60:0d:4b:
                    41:66:34:73:51:82:74:44:d0:4b:cb:19:dd:8c:9c:
                    38:59:c4:ab:42:4d:f3:79:77:8e:31:3e:78:12:bf:
                    40:75:22:c3:fa:33:18:f3:b2:65:f9:07:87:ff:b9:
                    0c:52:6f:6e:6a:d2:4f:9b:e2:52:d0:c7:63:85:d9:
                    04:22:ef:95:2a:59:c7:f9:9e:93:26:bf:15:40:ce:
                    44:89:aa:72:8c:90:f4:87:71:f5:54:4d:46:51:97:
                    eb:b5:2d:f5:90:ab:64:56:a8:76:34:8d:2c:8f:ef:
                    b0:9e:9c:2d:55:31:f5:42:27:5d:9b:c1:8d:5a:e2:
                    21:3a:46:71:71:78:51:2c:55:2b:f7:dd:19:51:e1:
                    f9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5D:B5:46:30:D2:8A:62:5A:DA:D3:FE:7D:C2:80:1E:4B:4C:05:AC
            X509v3 Authority Key Identifier:
                keyid:6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3a2f33322d313238203d3e20323730363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:c1:dd:0d:e4:76:ab:a8:67:cc:15:9c:95:89:c9:9b:36:43:
         c7:e8:2b:58:90:02:0b:55:d4:d6:29:5d:96:f9:63:9b:01:e9:
         b8:14:18:5c:5b:04:93:85:55:0d:c7:90:a5:ac:ea:55:cb:92:
         a6:92:42:d0:80:8e:68:8c:e7:0d:3c:aa:af:d7:fe:f7:f8:74:
         69:4f:44:d9:4a:07:c4:ae:62:aa:31:91:d3:8d:da:b5:fe:aa:
         e3:00:41:b8:ce:f9:85:9e:47:77:a2:df:b4:9b:5f:98:5a:16:
         fe:be:9d:55:91:e6:f8:0c:2a:c9:83:17:1c:0c:17:9c:2e:c4:
         f7:c8:86:07:01:31:8f:fa:c4:63:b1:5a:6b:c3:f5:8b:44:43:
         9d:73:17:fc:db:26:9a:20:01:f0:ee:34:cb:e2:4e:dc:c5:c7:
         82:84:3e:ab:2b:8b:b1:61:70:dc:1b:52:2b:90:46:ec:af:fd:
         c0:ff:b7:76:b6:e2:e1:07:89:5a:cd:51:ed:3c:73:c5:43:ef:
         ff:bd:b1:e2:6d:94:aa:42:ce:2c:21:04:a7:d2:53:7c:2d:01:
         f0:8c:50:0c:47:50:8e:11:77:72:11:88:19:b5:ca:bf:eb:38:
         c5:87:5a:81:56:67:08:16:90:68:39:8c:f1:65:de:c1:85:8a:
         63:22:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:57 2024 by rpki-client on console-fra.rpki-client.org