Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/323830343a363632383a3a2f33322d3332203d3e20323639353338.roa
File:                     323830343a363632383a3a2f33322d3332203d3e20323639353338.roa (raw, json)
Hash identifier:          SoThhRjDmwDU/Tjr5xuyvrmHzmFKrgoJCgkyj+rPwgw=
Subject key identifier:   04:9B:5D:F3:02:D1:A7:01:D6:66:BE:D7:4D:DC:59:76:EA:AC:A2:A1
Certificate issuer:       /CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
Certificate serial:       3A129A60093336D65F41904444D6D7A09BAE7595
Authority key identifier: 6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/323830343a363632383a3a2f33322d3332203d3e20323639353338.roa
Signing time:             Thu 21 Nov 2024 14:39:05 +0000
ROA not before:           Thu 21 Nov 2024 14:34:05 +0000
ROA not after:            Thu 20 Nov 2025 14:39:05 +0000
asID:                     269538
IP address blocks:        2804:6628::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl
                          rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:12:9a:60:09:33:36:d6:5f:41:90:44:44:d6:d7:a0:9b:ae:75:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
        Validity
            Not Before: Nov 21 14:34:05 2024 GMT
            Not After : Nov 20 14:39:05 2025 GMT
        Subject: CN=049B5DF302D1A701D666BED74DDC5976EAACA2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:1f:80:51:53:70:05:30:09:d2:18:02:a5:
                    c9:19:6d:87:d3:13:19:c5:f4:3c:a7:d8:5b:af:a7:
                    3e:b9:5e:99:11:7f:13:eb:81:99:2b:8f:13:f2:4a:
                    bb:b6:cb:01:34:2e:92:ec:2a:4b:d3:43:33:82:6d:
                    6c:4e:11:8d:f7:43:d9:d9:0d:85:77:9c:0a:3a:c4:
                    7e:37:fd:7b:37:3b:0a:f1:1f:2d:3f:ae:b4:91:8f:
                    ac:1b:97:6f:9a:c7:1e:3a:3d:8c:c4:c3:9a:de:54:
                    4f:28:db:d3:49:b6:23:7c:6f:8d:7c:17:da:86:5f:
                    c2:89:e9:4f:57:d3:3c:eb:f6:d0:7b:39:5e:be:70:
                    77:3c:08:ba:33:1e:91:74:30:9f:13:18:bc:c6:52:
                    c5:dc:38:24:8c:0a:27:a1:a7:d3:03:9f:45:4c:cf:
                    74:e4:ce:23:fe:32:9b:62:8a:4e:48:7b:e1:6d:89:
                    ad:cd:cc:5f:ff:0d:6e:7d:64:a6:c4:f5:e8:33:c6:
                    ad:ba:34:40:5c:51:a5:c5:3a:df:92:61:5e:f8:16:
                    c5:03:c2:2b:77:c7:9d:42:7f:04:d1:fc:11:32:df:
                    7c:ff:43:e1:9e:21:a3:1e:20:04:64:6d:b4:e4:f6:
                    df:4e:43:85:2c:57:6a:29:0d:e0:7a:ed:bc:6d:90:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:5D:F3:02:D1:A7:01:D6:66:BE:D7:4D:DC:59:76:EA:AC:A2:A1
            X509v3 Authority Key Identifier:
                keyid:6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/323830343a363632383a3a2f33322d3332203d3e20323639353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6628::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:42:76:f7:a8:c5:96:4f:5a:a1:f6:eb:d3:e3:c6:8d:b6:
         b1:51:4c:50:7e:11:9b:2e:35:3f:45:17:ec:bd:c0:ec:54:a7:
         8b:10:64:73:86:bc:7c:fa:95:66:87:4b:17:c9:c6:f4:38:a5:
         aa:cb:c9:7a:9e:c7:e3:8a:0a:39:01:ff:4b:4e:52:ce:ed:0d:
         d0:b2:3e:c5:9c:b2:fa:c4:61:b3:be:10:21:01:80:42:83:07:
         b7:5d:fd:9d:6e:09:1a:f6:69:5d:f4:d8:b8:10:ec:19:40:47:
         57:d0:57:be:29:84:58:81:33:96:d8:ce:19:28:88:2d:a1:a1:
         e5:b2:ff:f2:b6:52:b3:ec:ce:36:02:7a:a3:a6:48:4b:2d:95:
         95:e2:be:f8:00:99:bd:cc:98:c5:d6:45:7b:d4:fb:ed:77:1d:
         0f:8c:7d:81:dc:ad:31:c5:9b:18:8e:85:9e:09:ae:cd:94:d7:
         4a:96:d6:66:b4:c4:1c:fe:ba:56:72:44:9d:02:c7:b3:10:7d:
         82:03:d1:4c:5b:bd:3f:5f:6a:c1:86:85:e1:19:06:78:c2:59:
         07:9b:f8:46:fa:bd:ad:a6:1a:ac:a7:78:06:d5:ac:3e:9b:73:
         2b:81:b7:a8:7c:cd:76:f0:4d:8a:00:5b:e8:e2:0b:72:1a:54:
         cb:26:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:03 2024 by rpki-client on console-fra.rpki-client.org