Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33362d3336203d3e20323635393131.roa
File:                     323830343a336662633a3a2f33362d3336203d3e20323635393131.roa (raw, json)
Hash identifier:          57PIcoApvNpL4zkljp4Kc2vRYr0BuRIFcneSQHEulYo=
Subject key identifier:   FB:69:00:FF:E9:0D:14:A8:4C:CD:4D:5A:38:CC:19:F4:65:41:FA:6A
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       2596AEEF104E517C282D36CB6B3F3BE6806FB36C
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33362d3336203d3e20323635393131.roa
Signing time:             Fri 12 Jul 2024 19:53:13 +0000
ROA not before:           Fri 12 Jul 2024 19:48:13 +0000
ROA not after:            Fri 11 Jul 2025 19:53:13 +0000
asID:                     265911
IP address blocks:        2804:3fbc::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:96:ae:ef:10:4e:51:7c:28:2d:36:cb:6b:3f:3b:e6:80:6f:b3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Jul 12 19:48:13 2024 GMT
            Not After : Jul 11 19:53:13 2025 GMT
        Subject: CN=FB6900FFE90D14A84CCD4D5A38CC19F46541FA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:70:e4:8a:28:81:f3:01:24:40:37:a5:a2:
                    18:e1:84:db:ea:31:b3:3f:3e:8a:ea:bc:cf:47:39:
                    c0:aa:46:98:0d:ca:06:27:c1:53:0c:4b:b8:6f:6a:
                    83:da:b4:c7:2d:25:99:2c:64:2a:5a:e0:ea:80:21:
                    09:ed:fc:4c:71:c6:b9:9f:b8:c2:58:f9:cc:b8:57:
                    1c:4b:45:bc:7a:00:67:f6:93:38:42:c2:ae:85:a6:
                    95:7f:5a:80:44:16:4c:9b:30:80:26:de:35:04:5d:
                    45:94:17:09:3e:57:2e:2f:e9:5f:d8:cd:e6:a5:c7:
                    ea:cc:c2:4e:f8:c2:b0:6c:a6:f2:3f:8b:88:ce:43:
                    07:83:89:bd:1a:9a:4f:55:f2:3d:7a:ab:80:4c:7e:
                    a3:0f:af:39:66:2d:8b:77:bd:57:98:6a:e4:ce:4c:
                    67:a1:ce:7c:fc:6a:0d:30:49:17:4e:a8:c1:8a:ed:
                    7f:0c:cf:32:23:03:bb:8f:f5:87:bd:e4:b1:91:b0:
                    33:48:85:e9:57:8c:91:fa:e4:9a:d8:e4:a9:9a:27:
                    9d:e1:25:51:25:b4:9d:53:99:43:41:cd:dd:03:37:
                    0d:e4:1f:aa:79:dc:59:d3:60:1b:17:34:0e:23:96:
                    89:27:ef:02:d1:4a:03:8f:4d:5e:dd:66:9d:c9:b9:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:69:00:FF:E9:0D:14:A8:4C:CD:4D:5A:38:CC:19:F4:65:41:FA:6A
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33362d3336203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fbc::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:6f:27:7d:51:5a:bd:02:74:6f:8d:19:e4:2e:39:eb:87:ac:
         85:9c:30:2a:5b:19:80:c5:84:c9:a7:f1:b0:18:3c:f6:d7:e8:
         62:a0:19:62:e7:25:3a:bb:66:1c:af:54:9a:d3:16:0e:27:6e:
         0b:c1:41:cd:d2:38:20:98:75:70:35:2f:df:ea:94:0e:dc:e9:
         76:1c:89:53:56:cb:a7:55:37:8f:c8:21:66:d1:83:a6:e3:b1:
         5c:91:ad:61:5a:44:a6:ef:f6:13:60:d1:3d:7d:11:5b:bd:7d:
         1b:04:2b:92:62:2d:8f:c4:c2:f6:ae:ab:3e:20:cf:c7:90:bf:
         21:ee:f5:06:c0:85:74:c9:ba:36:8b:82:02:58:00:5f:4a:4e:
         a0:94:13:09:e3:b4:1d:1a:92:d2:05:4f:4e:74:2f:66:fd:42:
         74:51:95:6b:cc:8d:43:ed:85:25:4d:d9:fa:14:fc:49:7c:9f:
         18:3f:66:88:1b:a1:0e:12:5d:20:54:b9:5a:0c:f6:b9:ac:f5:
         df:09:c3:17:2a:bd:01:84:12:8a:6b:8b:84:86:05:ab:cf:9e:
         ab:67:e3:00:1e:e8:70:ee:12:c9:cc:1f:82:c7:28:0d:53:05:
         a8:de:6f:cc:79:d7:2f:08:79:eb:ea:35:0d:74:85:30:68:42:
         f7:93:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:24 2024 by rpki-client on console-ams.rpki-client.org