Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a383030303a3a2f33342d3334203d3e20323635323930.roa
File:                     323830343a326439343a383030303a3a2f33342d3334203d3e20323635323930.roa (raw, json)
Hash identifier:          q56VU6GYW1EySqAySP7PWvr4khwBt69LPUXWGQqjCk4=
Subject key identifier:   37:C7:21:ED:62:A7:AF:E2:76:0E:73:0D:98:E0:C1:0A:52:29:4D:F5
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       668520071EC9AF7ED15B9FE9CBFE1CCEBB788895
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a383030303a3a2f33342d3334203d3e20323635323930.roa
Signing time:             Thu 04 Apr 2024 10:32:29 +0000
ROA not before:           Thu 04 Apr 2024 10:27:29 +0000
ROA not after:            Thu 03 Apr 2025 10:32:29 +0000
asID:                     265290
IP address blocks:        2804:2d94:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 04:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:85:20:07:1e:c9:af:7e:d1:5b:9f:e9:cb:fe:1c:ce:bb:78:88:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Apr  4 10:27:29 2024 GMT
            Not After : Apr  3 10:32:29 2025 GMT
        Subject: CN=37C721ED62A7AFE2760E730D98E0C10A52294DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:ad:c3:2d:57:15:17:47:97:94:cc:5d:6c:
                    f7:8f:32:ed:21:2f:88:ea:3f:12:30:3b:d9:7a:5b:
                    94:6c:84:38:e2:f7:d8:47:68:2b:20:f1:a8:da:17:
                    b4:af:d4:8f:1c:85:8a:ac:6c:eb:ea:de:0e:9e:06:
                    db:5a:85:0c:90:1e:90:32:b0:c3:4e:1c:1f:af:80:
                    3d:45:d5:f0:86:58:b8:75:86:cc:85:0b:bd:33:7b:
                    5a:d4:72:8a:2b:e2:45:80:51:3e:bd:b6:c7:cb:39:
                    c6:25:2b:cc:d6:b2:09:79:1c:70:35:e1:29:31:5c:
                    b7:bf:93:78:07:de:66:7e:65:62:94:bc:3b:85:e3:
                    fa:4c:b1:f1:92:19:e0:c8:ca:46:eb:9c:c1:2a:b9:
                    78:53:aa:5c:b7:6c:a5:61:27:68:c1:e6:42:35:34:
                    66:6e:38:3e:70:98:dd:57:34:a4:4f:a5:f3:03:ff:
                    1c:92:4e:26:3f:08:d6:d5:d6:e1:bd:f3:a0:a7:d5:
                    76:cf:15:27:e2:77:36:c3:fa:67:5b:97:92:41:bb:
                    86:cd:6f:09:38:ff:91:e3:82:8c:4d:57:03:6a:1d:
                    75:72:3b:26:e0:a4:0f:4c:8b:40:ed:90:00:c5:94:
                    7d:c0:06:01:33:38:6a:3a:0a:d9:8f:5f:5f:da:3a:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C7:21:ED:62:A7:AF:E2:76:0E:73:0D:98:E0:C1:0A:52:29:4D:F5
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a383030303a3a2f33342d3334203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d94:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:cb:16:1e:1b:69:13:d0:2b:ee:4a:3e:60:bf:79:b6:41:
         8e:15:d6:68:a7:bc:c5:6f:54:4e:c8:a7:fa:ae:96:35:55:a2:
         b0:c7:54:30:6d:11:1f:1c:d9:6d:73:90:92:6e:db:3e:85:1d:
         db:c4:67:e5:2b:98:03:74:f5:46:89:41:9a:75:b2:a8:db:d3:
         42:5c:dc:d1:f7:1c:ee:07:31:61:7e:76:bc:dd:e5:b6:c8:f1:
         95:81:86:1d:da:1f:ab:50:d4:38:6d:b8:16:f1:5e:ee:92:77:
         48:f2:80:cc:82:d9:c1:fa:46:82:7e:b8:f6:ac:c8:ed:4f:93:
         1d:cc:23:3e:ae:0c:cd:0f:a3:ee:af:4c:88:b2:21:aa:3e:d3:
         55:c5:31:33:f9:f4:44:d5:02:40:6f:a2:75:43:bb:00:93:7e:
         8d:5a:ed:a4:db:6f:77:74:41:05:c7:25:56:18:2b:45:b2:9f:
         32:f5:bb:68:3c:fa:4e:f1:12:93:87:28:42:87:8a:38:b6:bb:
         fb:e2:a6:11:4c:c1:46:ba:55:97:ff:fb:99:2c:49:28:0c:e3:
         c9:18:ba:82:d5:26:d7:d2:a7:f0:e5:d1:1a:71:23:02:53:1f:
         09:48:52:a7:b5:fc:83:52:a6:16:40:56:56:ba:4e:b2:dc:38:
         56:ab:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 06:52:22 2024 by rpki-client on console-ams.rpki-client.org