Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a313030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a313030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          O+pz57FrS/a7y/jelHH8jRBbhErSbI9bN6/K1ESYAGU=
Subject key identifier:   04:A2:68:75:D3:20:1A:1D:C8:DA:72:8A:A0:36:38:ED:E5:12:8C:4E
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       05B72D413A7BCCAD68C5D67D934D11AB219FF9BA
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a313030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     266248
IP address blocks:        2804:3d04:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b7:2d:41:3a:7b:cc:ad:68:c5:d6:7d:93:4d:11:ab:21:9f:f9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:2b:fa:77:5f:28:e0:ca:5d:f9:e2:84:b4:
                    20:41:ee:f6:ad:c3:e9:51:1f:17:cb:4e:c9:80:5e:
                    28:90:c7:4d:8f:66:a7:24:8a:47:c3:2e:cb:ac:42:
                    0e:3e:99:f6:9f:32:ad:21:b3:67:ff:d8:10:cf:42:
                    1f:72:69:ba:f1:3d:1e:2d:80:0f:c8:32:35:07:cc:
                    01:6e:85:84:64:5f:93:15:01:d3:b6:c7:87:1e:48:
                    d3:e7:ba:a8:29:4b:87:eb:6d:5f:e2:55:05:d0:ae:
                    ad:92:3c:e0:4a:e1:cd:17:db:93:c4:6e:13:1b:a8:
                    31:4a:a1:1d:bc:ed:66:15:9d:36:fa:62:8b:c7:66:
                    19:6f:92:bb:53:c1:68:f9:df:02:d8:17:97:aa:2f:
                    5a:d9:ea:ac:05:7d:c7:56:13:f3:6b:6f:09:42:69:
                    3d:2d:ce:96:35:ca:87:63:28:e1:4c:70:bd:42:56:
                    bb:8f:46:8f:8d:42:0a:c4:95:5c:1b:98:9d:6e:ed:
                    0e:7d:23:03:59:af:e9:99:e1:15:a8:14:d1:a1:7e:
                    a3:c2:fa:27:31:ea:ce:9d:d6:b0:71:6d:67:45:66:
                    47:f7:96:8d:a5:b2:b4:ed:ca:3c:9a:67:ff:0c:7c:
                    2d:9c:20:bb:07:0a:53:b9:d0:cc:ef:a6:ca:65:eb:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A2:68:75:D3:20:1A:1D:C8:DA:72:8A:A0:36:38:ED:E5:12:8C:4E
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a313030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:db:31:fd:e3:fa:32:56:ef:66:1e:de:56:73:b3:46:73:ac:
         1a:39:f0:74:5e:f6:df:ab:a0:3f:de:9f:91:35:1f:dd:74:68:
         08:ad:03:33:e1:6e:24:45:28:3e:5e:16:11:ed:84:75:00:bc:
         57:70:63:4a:2c:b2:7d:07:89:0c:88:57:80:20:7b:88:33:7e:
         33:26:f5:5c:80:e6:38:9c:39:44:97:90:47:c4:24:e4:fa:7b:
         2f:58:c5:ad:46:28:5c:73:7e:a4:ea:e5:83:34:69:13:f7:41:
         cd:b4:d6:36:cb:da:58:4e:b5:7d:be:f1:62:94:77:67:32:6d:
         99:db:85:e4:6c:b4:3c:c6:57:05:d5:17:0e:28:e9:b3:df:8f:
         93:43:55:88:81:16:0f:ad:e8:c0:e1:35:40:96:61:e8:37:28:
         28:07:ae:b2:dd:1d:84:84:f4:ee:10:33:27:78:bd:aa:06:bc:
         b5:09:79:a1:74:89:f0:2a:6d:c8:fc:f4:45:2d:4e:b8:17:31:
         8c:ba:4f:c7:ae:20:71:c4:ad:74:31:3e:f5:ac:25:45:f3:78:
         05:d1:d2:6e:46:bb:c1:96:90:4a:93:8f:ca:d5:2c:da:c0:10:
         3f:1c:e5:b6:b5:97:8e:ac:22:51:b6:bd:85:ab:c8:10:f0:54:
         a2:93:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:34 2024 by rpki-client on console-ams.rpki-client.org