Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa
File:                     323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa (raw, json)
Hash identifier:          CAQHdYX9ZFdSuJdZdvtnVr/fkOQfijUsA+1DTojImtM=
Subject key identifier:   F9:46:47:69:C6:D0:26:5B:A3:57:1F:45:25:79:D9:E1:40:C3:01:2D
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       66218DA12E9D460E10CDE781B5528F7D69F75BC9
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     266320
IP address blocks:        2804:3600:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:21:8d:a1:2e:9d:46:0e:10:cd:e7:81:b5:52:8f:7d:69:f7:5b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=F9464769C6D0265BA3571F452579D9E140C3012D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:b1:ce:54:33:a2:b5:5a:ba:04:74:55:b2:
                    28:9a:69:b7:73:4a:c2:41:9d:05:9f:96:6d:1f:b8:
                    1c:88:32:ee:e0:ae:b9:08:bf:34:5e:0e:d0:df:6b:
                    28:6f:8a:54:c2:d0:13:c1:0f:32:91:d3:52:da:1d:
                    7c:b6:c3:6e:63:5c:b7:ff:e7:e0:4a:f4:ef:0d:53:
                    82:b3:d9:07:bf:72:3f:82:01:7b:8c:20:dc:5e:b1:
                    3d:e7:d6:2e:56:87:f2:06:f6:5b:c4:73:dd:8a:6b:
                    20:48:ed:70:cc:ba:6b:51:db:2a:2b:97:8c:44:11:
                    fd:6a:e0:03:b7:bb:63:a0:d5:28:e5:e2:6d:17:67:
                    5d:50:49:a9:bd:85:64:e9:61:bb:d2:66:b5:ff:04:
                    7a:b2:42:21:d6:8f:e6:f7:c4:a1:01:38:03:96:5e:
                    d1:bf:8a:b7:4a:80:54:fd:23:07:b6:73:2f:16:58:
                    f7:28:e6:d1:fc:d8:61:bb:c4:97:1f:2a:dd:d9:39:
                    2f:81:13:71:00:dd:ce:55:30:cc:7e:e5:b6:f1:65:
                    fa:e2:3c:1f:22:a4:d8:15:86:35:4d:98:e9:b0:1f:
                    68:c2:99:28:d3:f3:5a:71:ba:b7:69:89:4f:9c:5f:
                    0c:cd:c2:91:fe:96:4e:28:34:7c:8b:3f:52:56:bf:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:46:47:69:C6:D0:26:5B:A3:57:1F:45:25:79:D9:E1:40:C3:01:2D
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:e6:17:b3:fb:e8:91:88:8a:60:af:de:58:dc:3d:dc:47:f7:
         60:be:82:34:48:82:98:ab:31:65:c5:59:ce:31:1c:a4:53:51:
         75:7b:d8:28:19:27:45:21:0c:53:61:57:23:44:a7:cf:b5:6f:
         15:53:89:fd:f9:8c:75:27:07:87:8a:00:7d:82:92:a5:83:da:
         33:e8:18:a1:f4:82:c2:c7:71:5a:3d:f2:4d:8a:4c:5f:a8:f3:
         0b:dd:44:4d:19:02:1d:a3:02:9e:4f:1f:da:6f:de:e0:fe:d6:
         93:f9:76:58:82:5e:fe:bd:20:92:b8:21:b8:cd:7b:48:72:73:
         7d:7e:a9:83:44:65:4b:92:ef:d8:74:ef:01:1e:9d:55:dd:ae:
         f6:64:ca:d5:30:c8:4e:9d:4a:31:8b:ab:92:8f:7c:d8:df:96:
         4d:44:cc:3b:0d:3d:f9:02:70:b4:f4:c8:a4:79:4b:49:7e:2d:
         4a:78:ec:a0:b2:8b:3d:14:84:6d:6a:f2:df:f2:ea:dd:7b:ae:
         f7:98:85:64:2b:11:f4:38:aa:f8:92:40:0d:eb:59:21:c5:f7:
         72:1e:c2:3f:b4:da:67:e2:04:a4:eb:2c:a3:71:5e:98:3c:76:
         f2:15:08:e5:ab:fb:1c:94:89:b5:21:ee:34:b8:df:e9:1c:90:
         6c:28:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org