Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a613030303a3a2f34382d3438203d3e20323638363338.roa
File:                     323830343a353434343a613030303a3a2f34382d3438203d3e20323638363338.roa (raw, json)
Hash identifier:          KuZWbxX4twMqLQH9o/kXrTZmJCC8ltHdXRV4Gs4s0R8=
Subject key identifier:   3B:95:4F:45:C3:3A:4C:1E:44:68:E7:77:C5:41:DF:4B:F8:90:E2:F2
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       365FF62351D2019013F6A1DFD97EEC20FF17378E
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a613030303a3a2f34382d3438203d3e20323638363338.roa
Signing time:             Thu 04 Apr 2024 14:01:13 +0000
ROA not before:           Thu 04 Apr 2024 13:56:13 +0000
ROA not after:            Thu 03 Apr 2025 14:01:13 +0000
asID:                     268638
IP address blocks:        2804:5444:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl
                          rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5f:f6:23:51:d2:01:90:13:f6:a1:df:d9:7e:ec:20:ff:17:37:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Apr  4 13:56:13 2024 GMT
            Not After : Apr  3 14:01:13 2025 GMT
        Subject: CN=3B954F45C33A4C1E4468E777C541DF4BF890E2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:87:4b:1b:aa:60:d0:b4:8c:69:c1:eb:52:
                    0f:ff:ca:9f:8c:e8:7a:fc:ac:24:13:9e:12:8c:ef:
                    24:cc:6a:89:ff:79:63:83:f2:b8:be:fb:97:da:ba:
                    1a:0f:ef:8f:f3:9b:8c:f7:f7:9c:a3:f3:48:2b:1e:
                    6f:06:d6:08:80:e5:b0:2f:41:a6:01:9e:05:a1:58:
                    7e:c1:51:7b:f3:68:28:0a:86:4f:48:9b:9f:8d:2d:
                    a4:7e:d8:1b:60:04:0e:42:4d:2a:82:af:8d:8f:11:
                    ef:1d:e5:5d:78:f1:68:c8:4a:2f:f6:63:a2:17:a9:
                    ff:00:81:85:1f:14:02:40:1b:96:96:e9:10:35:6e:
                    82:95:65:a1:f9:7c:31:25:c3:7d:aa:54:c3:47:47:
                    da:2b:e8:4c:26:a0:8c:ce:bf:a4:cb:fc:7d:86:80:
                    4f:02:ad:4f:a1:98:fa:f2:5c:a1:24:cb:55:56:0e:
                    02:6e:e2:43:be:45:c9:10:86:86:05:12:1a:c5:94:
                    63:78:67:ce:36:a4:d1:b6:b8:51:f3:8f:54:58:fe:
                    d2:c3:b7:72:1c:b7:ad:00:8d:bf:a1:ba:4d:33:aa:
                    57:b0:08:56:60:a4:f6:f0:db:3b:b4:48:0e:1e:d6:
                    de:65:a7:ab:01:de:db:87:da:80:c0:f3:97:05:51:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:95:4F:45:C3:3A:4C:1E:44:68:E7:77:C5:41:DF:4B:F8:90:E2:F2
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a613030303a3a2f34382d3438203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:a7:c4:1b:86:ca:24:1b:5f:d3:0a:a6:de:7d:f2:ea:2f:
         a9:ea:b5:c4:0c:71:48:2f:cc:b7:db:d0:a5:1c:ea:4e:5d:36:
         44:75:cd:72:64:14:0e:ce:35:29:80:ac:c1:56:d4:70:5c:39:
         d9:28:7d:d0:83:42:1f:90:ae:cf:a9:76:f8:80:9d:00:db:3b:
         c7:bb:fb:c3:3e:c7:5d:38:b9:f9:a7:63:95:ea:07:6b:43:9d:
         ed:2d:e3:e8:43:8a:d6:26:04:b4:5f:64:7b:18:66:23:92:b0:
         12:14:4b:8b:62:fe:42:c9:db:4d:b4:40:c3:54:e6:17:fa:f5:
         63:e7:17:7b:af:32:e2:21:98:4b:90:45:28:80:16:a0:11:fe:
         c8:ab:5f:18:ce:64:35:5a:34:5f:77:32:cc:a4:10:d6:02:5b:
         72:12:5b:5f:ed:c2:f6:4b:98:9e:fb:41:14:56:b6:d6:0d:cc:
         15:46:60:b4:73:b5:83:31:31:d7:38:20:8f:70:9d:1a:38:97:
         c9:af:c7:2f:63:80:d6:47:16:31:05:c4:3b:bb:bb:25:07:76:
         30:08:dc:c5:e1:ff:a1:4e:ef:6f:af:98:23:bb:33:b0:c4:a6:
         0c:1a:6b:cf:fc:db:87:d9:ff:ae:9b:ce:ee:93:91:7e:8c:dd:
         55:bd:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org