Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa
File:                     323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (raw, json)
Hash identifier:          c2XOq923dt6NkzlB5Km84nnRuLnEvT58T8BGil3gOhM=
Subject key identifier:   0B:8E:17:93:C1:FB:CE:CB:F1:5B:8D:C5:FC:D2:B1:91:03:10:82:0D
Certificate issuer:       /CN=6EF2FC69E0EB1744BF74348AB043129CB1F6B435
Certificate serial:       6DCDBDAF8CD5A8B215E3986902C87F032A5A535E
Authority key identifier: 6E:F2:FC:69:E0:EB:17:44:BF:74:34:8A:B0:43:12:9C:B1:F6:B4:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa
Signing time:             Wed 17 Apr 2024 13:12:36 +0000
ROA not before:           Wed 17 Apr 2024 13:07:36 +0000
ROA not after:            Wed 16 Apr 2025 13:12:36 +0000
asID:                     267263
IP address blocks:        2804:4ac8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.crl
                          rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Jun 2024 09:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cd:bd:af:8c:d5:a8:b2:15:e3:98:69:02:c8:7f:03:2a:5a:53:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF2FC69E0EB1744BF74348AB043129CB1F6B435
        Validity
            Not Before: Apr 17 13:07:36 2024 GMT
            Not After : Apr 16 13:12:36 2025 GMT
        Subject: CN=0B8E1793C1FBCECBF15B8DC5FCD2B1910310820D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:b7:93:2d:a6:76:7b:2e:37:6c:ac:90:4d:
                    24:98:e9:7e:7e:e8:c6:c4:af:d3:ae:81:31:f7:b4:
                    88:3c:fd:e3:b6:6e:a5:5b:77:3d:e0:53:f1:dd:3a:
                    1a:08:15:44:0a:8b:13:31:f9:d7:8c:cd:7c:5c:ae:
                    c2:60:ce:22:29:a5:31:d0:41:9a:66:87:36:c1:38:
                    26:90:14:1c:f5:be:98:77:6d:be:2f:6f:dd:26:b9:
                    5b:54:b4:af:53:6b:ca:47:de:6f:4f:ee:da:06:5a:
                    07:1a:90:bf:a2:50:08:5a:77:8e:fd:92:df:67:5d:
                    5c:1f:a6:87:3d:a2:7d:91:e6:ba:7d:34:34:35:26:
                    d7:95:0e:79:1f:33:82:cb:a4:13:a3:6c:77:12:84:
                    9c:22:f7:ba:7e:6b:68:77:a4:86:02:c5:77:23:49:
                    42:7f:42:68:3b:14:be:2b:d1:c2:d0:45:27:52:11:
                    dc:23:5b:6b:a8:18:4b:90:39:6b:b0:78:51:0f:62:
                    47:06:15:c0:f4:a7:e9:f5:92:eb:c7:83:02:f5:63:
                    28:23:0c:8c:dd:7c:4e:5d:93:db:06:c4:65:b6:3d:
                    f9:d2:4b:54:ba:55:6a:0e:59:bb:79:aa:27:b4:4d:
                    f7:1f:c0:8f:80:86:29:b7:cb:7d:94:ca:87:81:dd:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:17:93:C1:FB:CE:CB:F1:5B:8D:C5:FC:D2:B1:91:03:10:82:0D
            X509v3 Authority Key Identifier:
                keyid:6E:F2:FC:69:E0:EB:17:44:BF:74:34:8A:B0:43:12:9C:B1:F6:B4:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:d7:8d:d8:77:4e:69:2b:39:73:b2:8b:cc:ef:11:44:68:01:
         e9:96:75:f7:0a:ac:10:a8:b3:7b:60:85:52:19:60:fd:40:6f:
         3a:a5:b6:dd:85:f7:7d:10:84:8d:fa:46:c7:c7:2c:8f:17:d0:
         cd:c5:fa:ed:5b:44:17:40:10:3d:9d:1d:47:3e:cd:81:35:3b:
         a8:f1:e7:f1:91:3e:8d:36:5e:65:34:ba:66:2c:76:ee:2d:22:
         91:4d:e6:b9:60:20:5f:b8:cf:fa:e4:7c:4c:3c:f3:57:86:14:
         0d:29:19:b7:9b:cc:dc:f2:f3:70:9c:59:e2:d3:51:0c:55:84:
         c7:98:76:fc:8e:59:9a:70:19:b7:8d:ff:a1:c8:93:82:56:7b:
         95:8a:f9:a4:40:c0:29:dc:69:a5:54:02:ce:e2:e0:71:13:c8:
         54:57:10:c5:7f:19:23:5a:0d:e3:be:94:62:c0:2b:e8:76:f5:
         15:99:32:25:ae:81:84:6c:e7:0d:21:cc:9d:4b:ed:1c:11:d2:
         0f:15:36:3f:08:a0:2c:4b:2a:94:be:44:b8:35:b4:8f:cf:89:
         eb:4d:54:c4:2a:fd:48:f0:d8:ed:5c:fa:aa:22:a7:b9:fb:41:
         f6:e1:45:99:0b:96:36:6c:ff:cd:92:86:ca:6b:38:9a:44:0b:
         37:56:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 13:47:07 2024 by rpki-client on console-fra.rpki-client.org