Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/323830343a376461303a3a2f33322d3332203d3e20323731353733.roa
File:                     323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (raw, json)
Hash identifier:          bdU/B8CWFsGSRpPgX1NmNb64zFODFoVID0SlvaO5qHE=
Subject key identifier:   59:64:C2:8A:80:A6:64:1C:E7:CA:BA:18:B2:88:6B:C2:1F:36:AE:31
Certificate issuer:       /CN=06C64410651F0607F24E4F1A3AF2CB4EAC857C2A
Certificate serial:       4A2CB0A31506C48398D196D0AFD9C58F9EFA9D76
Authority key identifier: 06:C6:44:10:65:1F:06:07:F2:4E:4F:1A:3A:F2:CB:4E:AC:85:7C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/323830343a376461303a3a2f33322d3332203d3e20323731353733.roa
Signing time:             Fri 10 May 2024 14:54:30 +0000
ROA not before:           Fri 10 May 2024 14:49:30 +0000
ROA not after:            Fri 09 May 2025 14:54:30 +0000
asID:                     271573
IP address blocks:        2804:7da0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 15:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2c:b0:a3:15:06:c4:83:98:d1:96:d0:af:d9:c5:8f:9e:fa:9d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C64410651F0607F24E4F1A3AF2CB4EAC857C2A
        Validity
            Not Before: May 10 14:49:30 2024 GMT
            Not After : May  9 14:54:30 2025 GMT
        Subject: CN=5964C28A80A6641CE7CABA18B2886BC21F36AE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:5e:8c:59:30:f9:fe:92:34:e3:93:bc:71:
                    ed:a9:23:2a:a4:e8:4b:3d:4f:d3:9e:24:d4:b1:f9:
                    82:37:b9:c7:ea:a9:61:38:92:2e:fd:a1:3c:36:9f:
                    45:f2:b5:b6:0a:64:15:74:24:1a:f5:dc:05:01:c1:
                    41:b3:03:8f:c2:67:16:09:98:74:40:10:76:e5:4f:
                    1a:66:dc:9e:fc:d2:93:f6:d9:74:29:ab:a6:08:6c:
                    66:c2:15:55:f7:40:87:3f:a9:da:98:ab:ac:93:95:
                    fd:7e:1d:fd:74:e9:34:2d:53:8b:f0:cb:1b:0d:97:
                    fa:e6:1f:dd:53:ab:c5:99:e4:41:ae:00:54:34:23:
                    0e:9d:ef:dd:c7:e4:33:e8:06:78:c8:b4:2d:da:ed:
                    5b:d8:48:95:d7:57:b9:7b:81:a8:6c:a1:98:07:5a:
                    85:42:0f:ab:e3:3a:7e:0f:04:92:f9:6a:12:3d:74:
                    b1:db:73:ae:c9:8e:c0:58:4c:07:ae:24:a3:d8:30:
                    6a:87:79:9a:33:63:84:93:eb:25:c0:84:2a:d7:4a:
                    19:ab:6f:bb:90:38:37:8f:82:a0:ca:28:64:d4:ad:
                    f5:3d:af:d4:ed:fe:36:81:95:11:3c:96:3d:48:01:
                    76:67:88:a5:61:2f:72:4e:22:58:89:7e:66:2d:cf:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:64:C2:8A:80:A6:64:1C:E7:CA:BA:18:B2:88:6B:C2:1F:36:AE:31
            X509v3 Authority Key Identifier:
                keyid:06:C6:44:10:65:1F:06:07:F2:4E:4F:1A:3A:F2:CB:4E:AC:85:7C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/323830343a376461303a3a2f33322d3332203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:8a:76:26:b8:17:bb:b7:f5:e0:2b:e7:c8:9e:78:df:a6:ce:
         a4:c3:71:21:9e:de:b5:9b:da:ee:5e:b5:10:e6:be:b3:53:da:
         c0:e8:dd:f9:97:40:ce:ec:2f:5a:96:c4:50:a1:fb:1b:63:91:
         a9:1c:40:15:0b:cf:fa:fb:6e:2d:b1:73:9e:56:0d:8f:3b:f2:
         13:89:12:2c:b2:fd:9b:db:7d:e8:77:20:be:62:b3:53:6e:62:
         b8:1e:4a:e2:c8:9d:ab:ac:d4:a1:92:04:aa:d4:e1:4e:f2:d8:
         c7:3c:12:df:8d:26:68:dd:46:47:f1:f4:2c:50:23:b8:ca:23:
         41:ab:fc:6b:63:fe:8d:60:5a:a7:81:a0:f3:ee:d2:58:ea:15:
         77:6c:ac:fc:3a:d8:45:b9:33:a3:6d:2f:9a:db:8a:48:17:65:
         96:97:c9:aa:62:a9:04:ed:98:78:10:cc:ed:10:27:03:ae:8b:
         40:c2:37:80:d2:70:f1:2b:11:d2:8b:79:98:28:96:fa:65:a1:
         ec:8e:16:b6:a1:65:38:13:c4:27:e3:80:55:1d:3a:c2:b8:63:
         5c:c2:59:53:da:09:c4:03:94:4d:04:4a:10:34:6f:d4:75:4d:
         d5:44:2a:78:58:e7:68:74:fb:6a:a1:69:4d:30:20:e1:b2:0c:
         ee:c6:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:53:07 2024 by rpki-client on console-ams.rpki-client.org