Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a313130303a3a2f34302d3430203d3e20323633303236.roa
File:                     323830343a6132383a313130303a3a2f34302d3430203d3e20323633303236.roa (raw, json)
Hash identifier:          IKHZAcPAc9M71dsHtM8o9rsLf6XH5uKrvFUOABPjqSo=
Subject key identifier:   6C:1B:1D:D2:AC:E5:A8:02:61:2F:23:D1:62:FA:DD:90:ED:06:D7:41
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       44E587C9841F14D028BDFEB522C14C35FE72DF9B
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a313130303a3a2f34302d3430203d3e20323633303236.roa
Signing time:             Sun 19 May 2024 02:59:16 +0000
ROA not before:           Sun 19 May 2024 02:54:16 +0000
ROA not after:            Sun 18 May 2025 02:59:16 +0000
asID:                     263026
IP address blocks:        2804:a28:1100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 05:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e5:87:c9:84:1f:14:d0:28:bd:fe:b5:22:c1:4c:35:fe:72:df:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: May 19 02:54:16 2024 GMT
            Not After : May 18 02:59:16 2025 GMT
        Subject: CN=6C1B1DD2ACE5A802612F23D162FADD90ED06D741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:51:1c:64:c7:b3:75:8b:d3:63:b6:0f:1e:
                    07:b4:23:2d:d9:41:9f:87:18:fe:b1:09:45:00:6a:
                    4e:52:37:4d:76:10:29:41:28:6e:2e:71:db:68:f6:
                    8b:35:45:52:19:66:26:70:2e:5b:f9:34:1d:d9:2e:
                    c2:ec:71:8c:e1:a9:8f:c7:f9:4b:cc:74:a6:a8:6f:
                    cc:87:da:92:87:42:26:5b:60:76:ee:d0:1f:f3:bc:
                    ef:22:e3:0b:3d:c1:35:95:29:ee:79:f8:e9:7b:4a:
                    0d:cb:00:34:cc:c4:32:56:31:cf:d1:4b:0f:c4:13:
                    99:44:ea:a3:89:69:13:09:1d:75:2c:a9:91:01:c3:
                    6d:61:46:02:bb:cf:5a:cf:d1:f9:3c:a7:6f:56:73:
                    33:cc:84:13:86:dc:19:bd:14:10:e8:63:f7:db:76:
                    e8:ff:3c:26:3b:ce:a4:a7:7e:88:b8:3f:e1:a4:d4:
                    29:c7:aa:7a:7a:a0:12:bf:cf:fa:1b:eb:d6:2f:d3:
                    32:18:f1:6f:1a:8e:ef:5a:fa:ab:83:f5:ba:e3:e2:
                    a8:89:9c:17:a5:f5:c5:ec:de:72:88:e1:f1:87:01:
                    bb:bb:89:cc:c8:98:b3:d8:64:cd:bd:25:9e:e1:cd:
                    03:94:44:64:cf:6d:bf:de:d5:97:d1:84:c7:c4:a6:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1B:1D:D2:AC:E5:A8:02:61:2F:23:D1:62:FA:DD:90:ED:06:D7:41
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a313130303a3a2f34302d3430203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:66:10:fc:ce:94:a5:a3:0d:ac:06:fd:03:8b:f6:04:c5:6b:
         59:92:9b:1e:b8:71:76:7a:1b:0b:27:bc:61:f9:ad:bc:be:35:
         83:3a:c7:22:21:08:31:5f:83:00:e7:fb:eb:96:52:a9:f8:6a:
         4b:bf:ff:1c:81:f2:2b:e0:9c:06:1b:a4:68:a9:87:ba:df:1c:
         00:c6:6c:c7:c3:32:72:bb:92:24:d5:2e:fb:28:59:4a:73:ed:
         c5:ad:5c:1b:d5:79:83:e1:00:f6:10:f7:e9:cd:7b:62:dd:7b:
         84:c6:e3:86:67:1c:17:66:b2:f5:48:ad:7d:d0:c9:cf:74:27:
         81:4c:55:91:11:21:76:5b:e7:33:bf:98:51:c6:4d:4d:84:59:
         7b:57:9c:7e:36:ed:bf:f8:76:bd:a2:47:85:07:69:cf:9e:f2:
         a9:7c:4c:0c:76:c9:85:10:b4:1d:47:58:92:3f:b8:b8:a3:c6:
         32:0b:53:fe:58:f9:ac:6a:3e:c2:f4:34:6c:9d:b5:25:34:85:
         26:3e:ac:ee:de:ca:1d:23:d4:5d:45:18:7e:6a:7a:63:46:7c:
         bf:ac:24:34:23:31:8f:3b:50:13:34:2b:dc:af:21:6e:17:36:
         cc:38:3a:b0:46:9a:de:dc:e0:85:cf:10:98:3b:db:f3:41:c1:
         ea:b3:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:43 2024 by rpki-client on console-ams.rpki-client.org