Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/323830343a353638343a3a2f33322d3438203d3e20323638303036.roa
File:                     323830343a353638343a3a2f33322d3438203d3e20323638303036.roa (raw, json)
Hash identifier:          uDzWRD1E6iUrd70G5kaEQiiHKQ7Oydw/HL61O9EjmVI=
Subject key identifier:   C6:F7:90:C3:53:C4:2F:A8:BF:A8:51:D0:FB:3E:BD:CA:15:9A:12:2F
Certificate issuer:       /CN=B6CE529BBED623B9985268A3A37BCA33708CD99A
Certificate serial:       6C859EE083C5319F6E74F45E558092EC61C11300
Authority key identifier: B6:CE:52:9B:BE:D6:23:B9:98:52:68:A3:A3:7B:CA:33:70:8C:D9:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CE529BBED623B9985268A3A37BCA33708CD99A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/323830343a353638343a3a2f33322d3438203d3e20323638303036.roa
Signing time:             Thu 22 Aug 2024 13:49:56 +0000
ROA not before:           Thu 22 Aug 2024 13:44:56 +0000
ROA not after:            Thu 21 Aug 2025 13:49:56 +0000
asID:                     268006
IP address blocks:        2804:5684::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/B6CE529BBED623B9985268A3A37BCA33708CD99A.crl
                          rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/B6CE529BBED623B9985268A3A37BCA33708CD99A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CE529BBED623B9985268A3A37BCA33708CD99A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:85:9e:e0:83:c5:31:9f:6e:74:f4:5e:55:80:92:ec:61:c1:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CE529BBED623B9985268A3A37BCA33708CD99A
        Validity
            Not Before: Aug 22 13:44:56 2024 GMT
            Not After : Aug 21 13:49:56 2025 GMT
        Subject: CN=C6F790C353C42FA8BFA851D0FB3EBDCA159A122F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:f7:c9:5c:e1:e9:1f:18:34:6c:9c:13:d1:
                    7c:62:7f:fd:40:80:9f:80:1d:dc:e2:f2:d1:de:c9:
                    ce:dc:b2:fa:b8:40:13:b7:5a:3f:28:57:03:44:40:
                    6a:a4:f6:79:70:67:7a:58:df:a3:24:41:3b:d5:f7:
                    a6:70:42:13:92:82:55:00:e4:22:85:23:9f:2f:ed:
                    bd:5d:be:a9:82:1a:4d:bd:f9:f0:57:43:15:ed:6e:
                    f5:5c:f6:6c:ee:b3:90:d7:cd:b6:3e:78:94:f3:12:
                    4e:40:37:e4:f5:52:b9:14:25:de:2e:f9:30:ce:4b:
                    2f:00:e7:60:c8:53:f4:e4:82:0f:1d:e2:03:8b:51:
                    3a:48:77:aa:5b:c4:a2:ef:f7:32:de:9a:ec:87:77:
                    c9:b9:9a:45:48:8c:8a:46:ea:08:ba:d1:91:18:39:
                    f6:66:94:b4:c0:b7:09:c2:4b:0c:fd:3d:89:55:f1:
                    31:ab:f3:20:ee:29:8b:84:27:25:6d:47:11:ee:a4:
                    e4:d6:40:b3:84:d2:ca:34:b8:da:05:4e:91:68:49:
                    fd:7e:67:e0:6a:03:e3:1f:d0:7b:d5:ea:43:f9:d9:
                    04:f1:40:3c:59:fa:83:76:22:9e:f0:63:b7:0a:3c:
                    36:fd:c7:de:7a:47:cd:cc:df:68:b6:00:cc:ad:91:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:90:C3:53:C4:2F:A8:BF:A8:51:D0:FB:3E:BD:CA:15:9A:12:2F
            X509v3 Authority Key Identifier:
                keyid:B6:CE:52:9B:BE:D6:23:B9:98:52:68:A3:A3:7B:CA:33:70:8C:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/B6CE529BBED623B9985268A3A37BCA33708CD99A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CE529BBED623B9985268A3A37BCA33708CD99A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/323830343a353638343a3a2f33322d3438203d3e20323638303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5684::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:6b:30:ec:56:1e:0d:e1:52:43:89:80:b0:21:2c:1b:43:ff:
         1d:18:c8:f7:08:31:80:92:de:36:23:fb:1b:38:59:07:ec:7a:
         85:a0:85:f5:95:99:e0:45:36:3b:64:c1:ac:6f:84:c7:44:d3:
         d2:f7:0a:a8:bd:18:2e:60:a6:f2:51:e9:94:84:f1:23:a8:7a:
         5f:a0:aa:24:cb:d8:df:f7:b0:dd:35:93:08:5a:5b:e1:28:73:
         2e:e6:86:79:c6:b8:f8:3f:92:35:cb:0d:8c:27:29:fb:1d:4d:
         71:57:5e:9c:be:38:f7:97:52:30:ce:a2:bc:5a:ce:60:36:18:
         29:5b:83:28:f7:02:00:9e:68:da:0f:db:1d:50:07:e9:c5:d8:
         c2:a5:0d:7a:7e:e5:53:df:5a:aa:34:61:0a:9b:da:43:05:d0:
         57:c3:21:b9:28:97:75:07:ef:04:1d:f0:b7:28:15:6d:c3:8d:
         28:9d:22:51:b3:4e:b0:8d:60:34:13:ed:81:bb:82:16:71:c5:
         1b:14:90:ad:75:98:95:07:88:68:9c:c1:40:7b:56:f6:cc:ad:
         ac:80:db:d1:16:bc:78:4c:85:98:d7:24:13:54:2e:4c:34:e3:
         89:aa:9e:8e:4d:46:aa:e8:72:97:71:54:68:72:02:01:17:fb:
         c1:01:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:53 2024 by rpki-client on console-ams.rpki-client.org