Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/323830343a333961303a653030303a3a2f33352d3335203d3e20323636303430.roa
File:                     323830343a333961303a653030303a3a2f33352d3335203d3e20323636303430.roa (raw, json)
Hash identifier:          gbe4A+u7JD5+WicU7rsk7RHfxsKESPmi0Pur+i50fQE=
Subject key identifier:   7A:60:F4:B8:B2:A7:A1:B6:32:80:F5:53:77:DB:A1:CF:1F:6E:1A:11
Certificate issuer:       /CN=D6816262B9EC51281AB7A20B7EE9D1462396264F
Certificate serial:       072614F8BBC7F9BFFBAFA9D08699D35E4B5C0773
Authority key identifier: D6:81:62:62:B9:EC:51:28:1A:B7:A2:0B:7E:E9:D1:46:23:96:26:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/323830343a333961303a653030303a3a2f33352d3335203d3e20323636303430.roa
Signing time:             Thu 04 Apr 2024 23:23:53 +0000
ROA not before:           Thu 04 Apr 2024 23:18:53 +0000
ROA not after:            Thu 03 Apr 2025 23:23:53 +0000
asID:                     266040
IP address blocks:        2804:39a0:e000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.crl
                          rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:26:14:f8:bb:c7:f9:bf:fb:af:a9:d0:86:99:d3:5e:4b:5c:07:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6816262B9EC51281AB7A20B7EE9D1462396264F
        Validity
            Not Before: Apr  4 23:18:53 2024 GMT
            Not After : Apr  3 23:23:53 2025 GMT
        Subject: CN=7A60F4B8B2A7A1B63280F55377DBA1CF1F6E1A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:45:5f:fc:d5:9b:a9:83:f3:c9:84:45:5b:
                    2a:ed:10:82:f7:1d:16:af:b8:61:22:e0:2f:22:45:
                    88:48:1e:7a:d0:7f:ab:36:d1:9f:f2:23:c7:bd:82:
                    ce:56:d3:6c:28:54:2d:f5:b8:97:6a:b3:23:30:72:
                    4c:34:52:d1:46:c0:21:52:89:ad:62:c6:47:93:dc:
                    d1:8e:a5:a7:f7:05:b5:05:7b:8c:36:71:b5:66:87:
                    86:f4:19:2b:c3:d0:48:dc:ea:c4:70:d4:b4:50:9b:
                    ff:ca:8e:9c:31:25:8f:3d:97:c1:89:9d:b8:67:98:
                    ac:a5:46:40:80:03:27:14:83:8a:9b:3b:6a:39:45:
                    af:16:65:97:a8:0c:80:d3:cc:c0:ce:40:1f:b7:fa:
                    bb:12:73:66:e8:8b:c3:21:7e:50:24:8b:a6:e9:e5:
                    2f:69:89:53:e8:99:bd:ba:c0:a7:49:7e:32:cb:7e:
                    32:3d:21:d9:c3:2f:f3:a4:9f:23:b1:93:62:3f:f9:
                    65:c9:38:41:ed:62:8e:e6:4e:ef:2e:8d:fb:43:2a:
                    e4:dd:3b:c9:8a:9e:f0:c4:36:50:76:4b:2a:42:65:
                    5d:1d:5e:6b:3e:a9:5b:67:44:cc:2d:12:74:11:a6:
                    a5:5b:50:e4:06:75:59:6d:b1:80:ab:35:62:db:46:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:60:F4:B8:B2:A7:A1:B6:32:80:F5:53:77:DB:A1:CF:1F:6E:1A:11
            X509v3 Authority Key Identifier:
                keyid:D6:81:62:62:B9:EC:51:28:1A:B7:A2:0B:7E:E9:D1:46:23:96:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/323830343a333961303a653030303a3a2f33352d3335203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39a0:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:a9:35:1e:ad:cc:6c:48:43:43:5c:f6:76:31:d1:f3:73:
         31:f4:3c:8f:5c:72:18:94:fb:a7:47:12:b5:d0:c1:0f:6d:a0:
         e1:6b:a7:f9:15:46:37:f3:df:67:b4:93:b7:84:59:fc:e5:48:
         7f:b9:7a:52:df:38:c6:30:d2:a6:88:8d:8b:f9:37:d7:2c:c1:
         dd:79:8b:7a:57:9b:89:e4:37:7f:c7:0d:c4:22:18:c5:31:b6:
         01:fd:98:5b:94:00:b5:ce:fd:c7:1c:28:38:61:3d:86:63:c2:
         ea:ec:b4:e2:a6:f9:4c:6f:ff:b1:7f:c5:05:bb:93:5f:4a:b6:
         a8:cf:ec:39:93:0b:1d:84:51:08:64:55:d4:94:8f:19:30:e6:
         14:0e:f8:b0:49:50:7c:73:a1:71:06:89:45:ef:97:d0:68:f6:
         39:67:a8:57:92:a2:88:6d:0c:b7:f3:72:68:9a:3a:8d:19:c7:
         f4:dd:29:b2:d1:42:69:5c:da:73:b5:dc:ad:96:0c:de:b8:4c:
         6a:07:04:9f:2a:3a:90:ee:69:4a:cd:6f:24:53:34:ff:a7:87:
         df:2a:4a:95:96:77:d0:74:27:ac:11:4b:5a:a6:90:08:6f:95:
         38:6e:02:11:d0:f1:00:f7:10:30:0e:b0:eb:d2:dd:52:6b:42:
         ba:d2:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:29 2024 by rpki-client on console-fra.rpki-client.org