Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
File:                     323830343a343663633a3a2f33322d3335203d3e20323637303132.roa (raw, json)
Hash identifier:          j6NPsTjOl5zD6Pb/dPS3gZAS0TYDJcs2IY8L+a6Zkig=
Subject key identifier:   47:B8:37:2D:15:AC:4A:2E:A4:0A:50:7F:21:FB:69:30:06:2B:9F:11
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       150E97F1A40B2C871CA446935E324DDF1DC1AF92
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
Signing time:             Thu 04 Apr 2024 17:39:03 +0000
ROA not before:           Thu 04 Apr 2024 17:34:03 +0000
ROA not after:            Thu 03 Apr 2025 17:39:03 +0000
asID:                     267012
IP address blocks:        2804:46cc::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 14:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0e:97:f1:a4:0b:2c:87:1c:a4:46:93:5e:32:4d:df:1d:c1:af:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:03 2024 GMT
            Not After : Apr  3 17:39:03 2025 GMT
        Subject: CN=47B8372D15AC4A2EA40A507F21FB6930062B9F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:04:0c:fd:1a:91:28:1f:1b:10:21:07:f2:
                    5b:80:d1:8f:f8:76:f6:2e:ea:5b:9c:4d:76:8e:bf:
                    21:ed:e8:0c:67:ce:c8:a7:f8:10:a9:41:63:a5:3b:
                    3c:37:b7:db:49:fe:35:08:ab:a4:6f:e3:e6:6b:b4:
                    4e:7d:2c:47:28:b9:8e:c5:b9:85:0a:8b:5a:3b:46:
                    58:31:55:9d:8e:42:ed:16:d5:4d:66:f1:22:31:ef:
                    08:2e:6d:c5:c0:06:1d:0e:81:c6:d8:f8:8e:e9:b6:
                    69:5b:35:2d:01:62:12:5b:f9:43:00:4c:1b:ea:bd:
                    64:3f:88:4b:3c:62:9d:18:7f:28:16:04:ca:3a:b0:
                    84:08:35:13:3d:8c:80:15:ea:1f:e2:a0:34:1f:8c:
                    42:3e:70:98:e6:e5:d9:50:12:eb:03:70:ef:c3:ab:
                    91:29:ee:50:13:4a:45:9a:f4:38:79:13:7b:5b:a0:
                    91:c6:8b:00:02:cc:8b:a9:36:5d:15:93:6e:2d:6e:
                    70:5d:24:b7:51:04:b5:27:99:4c:ad:e8:c0:25:79:
                    d5:a1:55:42:56:5f:b1:8f:a3:97:32:60:de:0d:4b:
                    72:2b:cd:60:f7:d0:85:54:d2:c7:9f:3b:dc:8d:38:
                    fd:88:b5:96:b9:22:bd:96:37:cb:a1:0c:67:57:a4:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:37:2D:15:AC:4A:2E:A4:0A:50:7F:21:FB:69:30:06:2B:9F:11
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:ec:c4:4f:49:c4:4c:86:75:35:d6:71:0f:fb:2e:39:59:ff:
         08:28:91:5c:f5:24:86:94:35:24:49:c2:bb:c9:da:32:66:b3:
         30:ac:69:2b:3b:e3:95:cb:47:df:87:c7:8c:2b:ae:65:ab:b4:
         12:e3:14:f9:fb:b3:5b:04:a6:9f:79:a5:41:b5:74:8d:24:11:
         18:67:f2:f0:12:4f:97:7a:ee:04:0f:44:6e:09:5f:47:24:52:
         90:ee:31:6b:27:fc:e2:a6:4e:26:24:e0:f0:79:e7:07:a9:27:
         d5:7e:7e:2c:cb:62:f6:a3:c4:53:c7:f8:52:8f:b4:21:7c:40:
         ec:c7:5b:e6:9a:6f:57:37:ff:9e:9c:60:ec:fc:da:34:db:d7:
         e3:7e:2d:ff:c5:4a:8e:02:f5:7f:a9:e4:e7:c2:4c:97:4c:8d:
         0d:b9:48:64:42:fd:9f:ea:dc:51:eb:80:2d:02:7e:c1:38:47:
         60:f4:3a:66:a3:cd:78:f3:f4:e6:2f:88:41:e5:24:b1:fc:29:
         ac:e3:49:2e:0b:c6:cf:a6:25:2e:7f:8d:a6:33:3a:fe:00:7e:
         6d:89:d9:3f:93:58:ac:52:de:f2:b0:26:30:4e:fc:8b:00:9c:
         e4:b1:3b:e2:df:66:4b:0f:4d:bc:9e:2e:1e:ca:12:01:9a:66:
         f1:90:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:26:11 2024 by rpki-client on console-ams.rpki-client.org