Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa
File:                     323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa (raw, json)
Hash identifier:          /uHjvoGCiOvmIyyp/Ihf6Rl3CgAP+eLKleuHe8hPe4w=
Subject key identifier:   6B:0D:14:19:77:25:B3:A6:CB:A8:53:74:8A:DA:B8:CD:98:F1:CC:19
Certificate issuer:       /CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
Certificate serial:       709C08816F19DDDF7C4740430378955DC1DCB934
Authority key identifier: 6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa
Signing time:             Wed 03 Apr 2024 22:49:38 +0000
ROA not before:           Wed 03 Apr 2024 22:44:38 +0000
ROA not after:            Wed 02 Apr 2025 22:49:38 +0000
asID:                     16685
IP address blocks:        2001:1280:4000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl
                          rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9c:08:81:6f:19:dd:df:7c:47:40:43:03:78:95:5d:c1:dc:b9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Validity
            Not Before: Apr  3 22:44:38 2024 GMT
            Not After : Apr  2 22:49:38 2025 GMT
        Subject: CN=6B0D14197725B3A6CBA853748ADAB8CD98F1CC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:57:8c:43:15:09:22:e9:da:04:3b:ca:fe:
                    1c:80:4b:6a:19:2e:e1:95:c7:46:d0:a0:21:48:83:
                    97:6a:ba:41:d3:57:c2:0b:1f:2b:80:a4:ce:7b:87:
                    78:5a:68:c9:a1:2a:57:b9:76:38:13:55:81:92:84:
                    97:b2:7e:6f:14:b0:2a:20:7a:52:43:e7:9f:81:55:
                    4c:6d:ba:c1:d4:4f:a8:ac:8d:70:95:ec:2c:5d:32:
                    1e:b3:2d:c1:04:97:62:07:4d:65:ef:2a:cb:c0:e7:
                    a9:a3:0b:c1:ab:30:64:1b:17:42:83:1d:3a:2e:60:
                    07:26:14:fa:48:9d:92:ad:39:c6:8a:c3:65:f3:53:
                    61:35:9a:62:60:14:ec:99:31:73:37:87:3a:31:af:
                    d1:b7:67:92:e9:cc:f6:86:e7:dc:1b:dc:54:7d:51:
                    93:00:c0:49:f3:dd:50:ea:7a:ef:21:99:a6:fb:ae:
                    6a:9a:96:da:75:b5:4b:b7:4b:3d:34:b9:8b:9f:de:
                    ea:40:45:a6:9a:91:66:26:9b:ac:30:32:70:bb:c2:
                    ab:b1:2a:3c:24:20:cd:cc:67:7d:6d:2f:25:ff:5f:
                    d6:8a:7d:2e:1c:61:79:68:0d:0c:23:cc:59:e4:54:
                    1a:1b:06:65:a7:a2:eb:02:b3:92:82:ce:3a:6c:a9:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0D:14:19:77:25:B3:A6:CB:A8:53:74:8A:DA:B8:CD:98:F1:CC:19
            X509v3 Authority Key Identifier:
                keyid:6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1280:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:83:bd:31:09:65:ab:84:b5:7a:82:86:e0:89:65:da:53:c7:
         ad:39:fc:d1:e3:30:47:7f:8d:61:a5:e0:6c:be:0e:0f:ed:85:
         66:a2:3e:4f:f9:2c:ae:d1:98:a4:cc:6e:9e:d2:5d:12:14:93:
         c0:36:f4:24:cb:52:43:ec:63:34:aa:c5:25:67:67:75:64:6a:
         3d:06:4f:f2:30:96:38:4a:c8:cd:d0:79:27:7e:44:6a:1c:ee:
         a3:b1:a5:89:a6:e8:8a:9d:58:7a:c8:d6:d8:81:53:34:fb:06:
         f7:d8:62:52:76:22:43:47:8c:eb:e6:0c:a5:11:1e:43:1e:18:
         09:45:80:60:3d:9a:fd:10:4a:86:65:cb:b7:54:04:4a:09:02:
         d7:5c:27:61:90:66:d3:a7:8b:96:9b:58:d0:bc:5c:9c:37:88:
         04:a9:71:8f:27:37:6f:14:26:c5:ab:09:ca:9f:fc:09:d2:a4:
         c7:12:f9:75:36:50:fb:28:fc:d4:82:ba:62:f9:bc:3b:c2:25:
         a5:0d:bf:88:36:9f:07:7c:38:75:ee:5b:26:f6:63:c7:e6:ad:
         c7:35:f2:de:fa:28:9f:fb:9c:43:7e:98:57:cb:af:60:45:7f:
         88:2d:e8:5f:70:58:76:b7:9e:58:df:50:ed:67:dd:19:a2:74:
         f4:45:ab:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org