Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/323830343a386265303a3a2f33322d3438203d3e20323733373635.roa
File:                     323830343a386265303a3a2f33322d3438203d3e20323733373635.roa (raw, json)
Hash identifier:          j6/QZ5rfozI4ktUB+J2szXF8UIAiJP1wsVx/1wlaTb4=
Subject key identifier:   AD:9A:10:F6:A0:6A:29:9D:18:1B:70:14:F8:D3:67:2E:FC:CB:40:67
Certificate issuer:       /CN=646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4
Certificate serial:       366E7EA0E264A315EF73B088DF9EF51D84BB9D0B
Authority key identifier: 64:6D:D7:7E:D1:BD:2C:68:54:BA:1C:4D:1D:2A:42:F0:77:33:25:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/323830343a386265303a3a2f33322d3438203d3e20323733373635.roa
Signing time:             Wed 05 Jun 2024 19:25:25 +0000
ROA not before:           Wed 05 Jun 2024 19:20:25 +0000
ROA not after:            Wed 04 Jun 2025 19:25:25 +0000
asID:                     273765
IP address blocks:        2804:8be0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.crl
                          rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6e:7e:a0:e2:64:a3:15:ef:73:b0:88:df:9e:f5:1d:84:bb:9d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4
        Validity
            Not Before: Jun  5 19:20:25 2024 GMT
            Not After : Jun  4 19:25:25 2025 GMT
        Subject: CN=AD9A10F6A06A299D181B7014F8D3672EFCCB4067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:e9:40:7b:ed:20:59:3d:02:67:a6:a7:30:
                    2e:18:39:bf:f4:15:35:c1:11:5d:1c:02:60:79:63:
                    42:a0:84:51:0d:57:9d:18:33:ac:07:85:c2:00:01:
                    b6:66:b6:3f:f2:97:32:27:71:e9:a5:c5:f1:f8:2f:
                    ba:7a:f3:a6:13:ba:4e:87:dd:79:53:a4:cd:1c:d1:
                    fc:d3:32:de:7d:eb:e9:64:0e:3e:9f:f8:1d:cc:f8:
                    90:3a:34:0a:fc:67:6d:74:d3:f2:b8:e4:5a:46:2b:
                    d3:74:3e:2f:6a:3d:38:18:e1:b6:50:4d:08:d2:9c:
                    79:db:b8:35:4f:38:59:6a:4d:6e:b9:5a:c3:01:f5:
                    54:26:7f:48:9d:51:2a:68:38:8f:e4:ee:fd:4d:07:
                    47:e2:38:b4:3b:e2:45:fc:75:de:6e:bb:36:95:bb:
                    0b:63:d2:e4:c1:ce:e0:bf:7a:ae:aa:67:bb:31:5c:
                    3d:06:02:78:cb:a7:30:fc:87:81:99:14:ef:82:b7:
                    8e:11:f4:b7:e5:0a:60:28:f4:92:09:52:a3:74:11:
                    aa:96:4d:62:dd:a6:99:d6:6d:36:00:c0:88:7a:0c:
                    05:2c:d2:84:1a:cf:d6:99:d6:7c:aa:89:c3:f5:cc:
                    55:30:b3:62:f7:29:0a:60:78:0a:7b:96:38:43:cb:
                    12:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9A:10:F6:A0:6A:29:9D:18:1B:70:14:F8:D3:67:2E:FC:CB:40:67
            X509v3 Authority Key Identifier:
                keyid:64:6D:D7:7E:D1:BD:2C:68:54:BA:1C:4D:1D:2A:42:F0:77:33:25:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/646DD77ED1BD2C6854BA1C4D1D2A42F0773325B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/THP8uhQACp48R9GXAE2yvp4jCwEgUvVyrE7wqfZDUNw/0/323830343a386265303a3a2f33322d3438203d3e20323733373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:cd:f5:b4:9c:0d:22:f2:1b:0a:f0:10:fc:53:c2:f0:40:
         12:2b:90:54:f1:d9:fd:bf:da:f3:7a:52:50:df:4a:73:fd:49:
         0b:b8:e6:f7:b4:a6:ed:e9:b9:45:1f:66:dc:3c:2a:a8:be:69:
         17:25:4a:18:eb:1f:0f:11:51:3a:1b:28:8e:8c:15:8c:6b:bb:
         b3:3f:ad:be:2e:db:a5:dc:61:2e:1e:3e:c4:26:45:48:d7:7c:
         e4:ab:d5:e2:cc:3d:47:fc:cc:d0:b2:78:b8:17:85:a5:ff:5b:
         9b:05:3c:7b:7e:29:a9:87:01:21:b7:94:39:e3:e1:d9:ef:5e:
         5a:59:14:8d:db:64:11:e3:e9:6b:8a:13:5b:35:ce:79:f1:a6:
         4f:72:76:0e:cf:5c:93:a6:39:79:0d:fd:85:46:0b:7b:f0:a6:
         18:90:5f:76:df:2f:8b:69:ee:d0:ab:13:91:3f:46:07:91:f6:
         09:35:c5:a6:5a:80:19:f7:b3:3a:77:37:ba:87:5e:ef:55:02:
         fd:9a:fd:63:ef:45:8e:55:4e:9d:2f:3a:b8:e1:22:13:4d:d5:
         cf:93:0d:20:b6:74:c9:fe:3a:d6:b3:54:ab:11:ad:88:fb:14:
         ce:82:6e:26:43:c9:1f:39:36:ba:44:fd:2a:f2:ac:cc:9c:c0:
         11:5b:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:51 2024 by rpki-client on console-fra.rpki-client.org