Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa
File:                     323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa (raw, json)
Hash identifier:          cRsxpy3l6/KokQn1SgAhzJA+XrvmhTY8uJhMCAX0h6Y=
Subject key identifier:   4A:40:55:8D:E4:9B:02:41:BF:32:E4:CD:F4:64:67:D1:D1:62:95:EE
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       200236239349141BBDEB55D5B42F54F84AE35529
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:12 +0000
ROA not before:           Wed 03 Apr 2024 18:26:12 +0000
ROA not after:            Wed 02 Apr 2025 18:31:12 +0000
asID:                     266248
IP address blocks:        2804:3d04:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:02:36:23:93:49:14:1b:bd:eb:55:d5:b4:2f:54:f8:4a:e3:55:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:64:92:d9:26:48:cf:e5:ae:21:ff:de:f5:
                    48:ee:78:29:88:10:8a:4c:9c:c7:c5:69:ce:c0:1e:
                    21:04:c4:41:dc:da:27:5b:13:8e:e5:97:b7:d8:8e:
                    7e:8e:84:61:fe:46:98:ff:5e:0a:cf:e7:ed:d5:99:
                    d3:c5:c0:ca:4b:2b:04:b8:e6:a1:4b:1a:5a:e2:98:
                    f6:4f:86:98:e2:6e:3b:4b:d2:19:08:41:ed:16:a2:
                    38:04:70:d0:93:c3:e3:e5:12:1d:cb:79:c1:22:08:
                    52:9a:02:3a:d3:50:b3:e0:10:d4:45:33:30:68:16:
                    be:69:a5:be:b3:d7:34:6c:19:0e:c2:5e:12:46:d0:
                    a4:d0:c0:4d:ca:92:cd:72:b6:81:a0:9c:58:3b:1b:
                    f2:cc:a5:04:e0:09:a6:34:c9:ad:ef:53:41:0f:ee:
                    30:f7:c5:15:be:d7:71:5b:f4:06:2f:ca:30:a4:a0:
                    97:ef:d8:7a:f4:96:6b:ce:d2:ac:af:a9:53:6b:ae:
                    25:eb:46:71:da:ca:e7:30:c7:e7:bb:b4:c2:2e:55:
                    6f:06:b2:56:98:56:83:ee:9d:f0:ad:4e:63:5d:85:
                    39:9c:c5:96:63:2a:d4:69:25:6a:52:60:fe:cc:f2:
                    41:c0:2a:40:3d:d1:89:ae:7e:95:29:31:14:75:4d:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:40:55:8D:E4:9B:02:41:BF:32:E4:CD:F4:64:67:D1:D1:62:95:EE
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:3d:5a:dc:aa:41:a2:19:49:4c:11:f9:32:d0:60:87:33:
         21:a7:05:3b:e4:78:04:d9:19:ed:93:94:96:eb:0d:00:7d:72:
         8e:c5:3b:e4:30:38:62:1d:46:43:d7:36:32:63:34:77:bf:49:
         09:6b:88:5a:ec:82:e9:5d:38:de:96:7e:b9:27:f6:e1:2c:5b:
         7d:9f:5a:a9:0d:47:d0:fe:3e:0e:f2:17:46:ea:85:ea:57:ed:
         2e:be:bc:0c:49:ea:f1:59:16:37:19:24:4d:57:1f:ab:e8:1c:
         77:7f:81:56:94:0e:84:68:26:25:bb:89:73:b1:53:5b:ae:35:
         7e:38:ce:50:1f:92:8e:02:f2:85:06:09:39:92:5c:e4:bb:a5:
         25:4f:86:ee:ad:cb:ef:25:c9:17:bb:74:40:e9:dc:a5:75:29:
         87:8d:ce:4e:f5:95:71:43:1d:53:ab:69:c5:d5:32:1c:43:0f:
         1f:45:46:b5:a6:96:81:13:63:67:49:d2:06:f4:76:b6:ba:98:
         c6:59:d8:b1:3d:76:83:ee:df:40:af:d3:25:00:3d:13:fc:36:
         5f:48:ea:45:fc:6e:6f:20:82:bd:54:d7:66:c3:47:04:fc:a1:
         0d:3e:35:4d:da:26:56:0c:8a:d8:4a:e3:9e:13:bd:b5:36:f2:
         d9:93:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org