Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa
File:                     323830343a336537633a3a2f33322d3438203d3e20323636353939.roa (raw, json)
Hash identifier:          HyZM+l/znNV8lnBO1xWyrOPKzhM9OyV3E/0wUdYoeeA=
Subject key identifier:   B8:E1:F6:32:F6:16:D1:BC:EF:0F:F7:65:C9:C6:E8:BD:09:A1:B0:48
Certificate issuer:       /CN=6DB7072D8B617CD7C066951C2153EC8D11742ECC
Certificate serial:       7A716A6C9C8E7228D0912D78CE8CD4C506892A5A
Authority key identifier: 6D:B7:07:2D:8B:61:7C:D7:C0:66:95:1C:21:53:EC:8D:11:74:2E:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa
Signing time:             Thu 04 Apr 2024 07:23:38 +0000
ROA not before:           Thu 04 Apr 2024 07:18:38 +0000
ROA not after:            Thu 03 Apr 2025 07:23:38 +0000
asID:                     266599
IP address blocks:        2804:3e7c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.crl
                          rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:71:6a:6c:9c:8e:72:28:d0:91:2d:78:ce:8c:d4:c5:06:89:2a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DB7072D8B617CD7C066951C2153EC8D11742ECC
        Validity
            Not Before: Apr  4 07:18:38 2024 GMT
            Not After : Apr  3 07:23:38 2025 GMT
        Subject: CN=B8E1F632F616D1BCEF0FF765C9C6E8BD09A1B048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:8d:02:94:8b:55:18:73:0a:f6:5f:d2:de:
                    dd:be:64:fd:62:a5:10:99:34:23:c8:0a:c1:f3:27:
                    50:f8:b4:59:85:db:0c:a3:a1:0f:7b:c8:a2:3b:0c:
                    6b:dd:34:9b:d7:0e:39:9c:d6:45:da:80:ed:bd:5f:
                    9a:66:f2:9e:32:36:d9:37:b7:79:bb:fd:e6:15:0c:
                    54:8e:03:a1:d6:32:79:49:0f:1a:97:aa:38:27:e1:
                    10:d8:38:cf:b6:d1:e2:e2:1c:fd:e2:1e:62:c8:98:
                    f8:e0:cc:e5:4f:a7:a4:fe:52:86:6c:c0:a4:ce:8b:
                    46:05:d3:6b:2c:f2:6f:b2:db:e3:c5:a0:02:17:02:
                    4d:41:d1:a3:e9:ba:ce:d3:32:7a:2b:96:ad:34:a9:
                    86:9a:a4:af:75:4f:68:ea:de:c4:1d:99:bd:58:a3:
                    2e:bc:28:ec:2c:84:09:28:00:6e:a8:7b:f0:19:99:
                    92:d9:47:bc:c1:76:b6:4e:94:db:7c:c3:7a:27:98:
                    70:2e:26:85:0c:51:62:17:eb:85:03:69:ea:32:01:
                    5c:b0:64:8e:4f:b8:c1:ee:65:d7:98:9b:ed:0f:8a:
                    e8:12:e3:42:a1:22:dd:c2:8c:b7:c4:f4:3b:5d:8b:
                    94:14:ab:22:65:d5:60:15:36:fe:1f:7f:2c:8a:66:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E1:F6:32:F6:16:D1:BC:EF:0F:F7:65:C9:C6:E8:BD:09:A1:B0:48
            X509v3 Authority Key Identifier:
                keyid:6D:B7:07:2D:8B:61:7C:D7:C0:66:95:1C:21:53:EC:8D:11:74:2E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:47:6c:f8:12:87:31:5f:b4:41:37:a0:10:af:3b:2c:a2:19:
         4a:39:d2:24:81:d5:05:c0:ea:dc:5f:90:11:2f:b0:0b:dc:2c:
         10:f0:e1:d0:6c:84:c4:94:ae:5f:71:80:ce:60:3e:bc:18:09:
         19:49:8a:a5:74:c5:d0:20:d2:c5:af:3e:02:29:3d:e0:93:99:
         45:ab:6d:f1:55:ac:b9:6b:01:6d:71:36:4a:3f:2d:ca:77:5e:
         db:7a:9c:2b:dd:5b:a3:6d:a1:3e:0f:74:c5:11:93:ed:1f:8c:
         28:c2:04:0a:52:48:4e:1c:21:fe:c5:d2:01:f3:5d:2f:5c:c7:
         bf:0b:e9:eb:e2:8a:0c:1c:f9:33:19:a4:c6:5f:16:fa:76:66:
         cc:e3:05:ae:d8:50:04:d5:1c:a2:7a:6d:e4:a3:23:47:30:45:
         16:8f:64:3e:55:31:72:d5:df:e6:bd:43:98:8f:f7:b7:03:34:
         f7:ff:23:72:87:d7:d3:0c:8d:f6:d3:70:12:a3:0b:a8:7d:ad:
         68:8c:2e:20:b1:ff:de:86:30:a6:e5:ce:39:a8:4d:c9:4b:f4:
         5a:94:42:ee:f1:05:2b:7c:bd:31:72:6d:de:91:77:60:28:44:
         64:ca:f6:5e:9c:0b:73:a6:ba:06:78:60:70:e5:72:3a:29:f4:
         b7:6b:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:28 2024 by rpki-client on console-fra.rpki-client.org