Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
File:                     323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (raw, json)
Hash identifier:          2Qi2cZ6/5lA0xbT4AmCqkwnVH0Tj7J8Th4RbKtefvUc=
Subject key identifier:   AE:EE:2F:85:D5:FE:1A:62:1B:C7:CD:B4:6F:3E:F0:90:0B:8B:D0:1D
Certificate issuer:       /CN=94DA6C1224D0695747DF56BE8B7115949AC47812
Certificate serial:       6C89661CF2F76BB8695C88E8281E965FAFFEF0C6
Authority key identifier: 94:DA:6C:12:24:D0:69:57:47:DF:56:BE:8B:71:15:94:9A:C4:78:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DA6C1224D0695747DF56BE8B7115949AC47812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
Signing time:             Thu 04 Apr 2024 06:26:45 +0000
ROA not before:           Thu 04 Apr 2024 06:21:45 +0000
ROA not after:            Thu 03 Apr 2025 06:26:45 +0000
asID:                     264278
IP address blocks:        2804:2564::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/94DA6C1224D0695747DF56BE8B7115949AC47812.crl
                          rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/94DA6C1224D0695747DF56BE8B7115949AC47812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DA6C1224D0695747DF56BE8B7115949AC47812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 04:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:89:66:1c:f2:f7:6b:b8:69:5c:88:e8:28:1e:96:5f:af:fe:f0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94DA6C1224D0695747DF56BE8B7115949AC47812
        Validity
            Not Before: Apr  4 06:21:45 2024 GMT
            Not After : Apr  3 06:26:45 2025 GMT
        Subject: CN=AEEE2F85D5FE1A621BC7CDB46F3EF0900B8BD01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:0e:b7:9e:24:3a:cd:b5:a4:a5:23:01:2a:
                    cb:29:c2:0a:2d:a7:c9:fa:bb:dd:0e:0b:9f:24:07:
                    56:ce:ed:99:5b:6d:03:41:10:19:8b:6e:90:5a:f7:
                    ea:d9:ed:9a:72:4b:7a:4c:5f:41:56:ed:7b:72:ff:
                    d1:24:1b:50:ea:2a:ce:be:d2:10:8b:20:3e:1a:77:
                    ae:b9:d4:37:d2:3e:3a:a6:9b:cb:ac:9d:e5:8b:53:
                    25:a2:1a:fe:14:68:d8:6d:5b:a6:ac:11:b2:f7:c8:
                    ba:82:b6:19:35:30:98:a8:8f:ff:9e:6c:61:ea:74:
                    06:90:cf:9c:95:67:54:05:e7:41:38:c1:36:ed:a4:
                    31:fc:e7:f5:9f:2b:f8:f8:15:4b:f5:c2:50:3c:11:
                    17:83:d3:30:59:16:3a:4b:19:be:30:d1:c8:52:ef:
                    00:8d:3a:36:68:d5:48:5a:85:96:4a:5b:8c:b7:a4:
                    40:c2:3c:9b:3d:fa:0d:cc:98:a3:81:38:9e:40:4f:
                    2d:86:71:f6:d0:86:3e:ec:29:38:17:62:93:e4:90:
                    8c:cf:a0:7b:21:56:d6:6b:d5:51:be:8c:00:e6:68:
                    42:a2:da:d7:da:05:71:27:78:e7:19:45:5e:75:29:
                    52:9a:b5:e7:7c:bd:54:fb:df:10:bd:00:5e:5f:7d:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:2F:85:D5:FE:1A:62:1B:C7:CD:B4:6F:3E:F0:90:0B:8B:D0:1D
            X509v3 Authority Key Identifier:
                keyid:94:DA:6C:12:24:D0:69:57:47:DF:56:BE:8B:71:15:94:9A:C4:78:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/94DA6C1224D0695747DF56BE8B7115949AC47812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DA6C1224D0695747DF56BE8B7115949AC47812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2564::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:95:32:46:e9:85:4a:5a:a2:5f:bc:29:ea:e8:c2:65:c6:3f:
         56:dd:27:d2:4b:bc:72:22:9c:cc:ca:f5:ab:22:e4:34:d1:d6:
         3d:dd:f2:53:82:08:15:f0:26:09:a0:92:2c:9d:7d:52:13:c6:
         1a:a5:e5:0f:4b:71:df:00:be:34:63:7e:4f:1a:7f:05:62:73:
         0a:39:65:ec:98:25:84:cd:32:f2:90:59:ec:84:08:45:0f:97:
         2a:fd:11:bf:93:0f:27:3f:cb:c1:23:6e:1e:90:e9:b8:1b:9d:
         5a:5d:3e:91:34:96:ae:2f:09:0c:57:b9:74:cd:36:b0:2f:5a:
         32:89:d8:c6:14:4f:a3:13:d6:e1:6b:0f:6b:c1:ef:5c:75:69:
         8e:3c:c2:d9:55:d9:1a:1a:a4:4e:65:e4:d8:67:2e:b6:fb:52:
         1b:51:16:b4:d0:a0:24:74:b7:06:76:52:25:f0:f2:13:75:09:
         f2:cd:c6:e8:ae:a8:bd:14:5b:81:09:0e:43:0c:8b:56:19:87:
         7c:93:f1:7b:3a:2c:23:89:75:d2:e5:0e:2d:80:81:c0:85:b8:
         32:8f:2d:39:2f:3b:cf:2c:17:12:7d:60:52:cd:a2:7b:7f:3a:
         c6:7a:af:af:81:91:6d:e4:12:c1:0c:fd:c3:4d:80:56:ac:6b:
         20:dd:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 06:52:26 2024 by rpki-client on console-ams.rpki-client.org