Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33322d3332203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33322d3332203d3e20323636323438.roa (raw, json)
Hash identifier:          51rHOSTKpeM0SswcjTkhLlIkUTM0GhTG+mNQ+z6+w+U=
Subject key identifier:   0D:74:F0:39:81:DF:DD:11:5D:DC:E6:06:98:35:77:A4:C7:28:86:6C
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       0AA3C4A8335B584640D4F436F90C8453A3DB3254
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33322d3332203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     266248
IP address blocks:        2804:3d04::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a3:c4:a8:33:5b:58:46:40:d4:f4:36:f9:0c:84:53:a3:db:32:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:d4:9d:7b:de:97:18:21:2c:64:51:f9:8e:
                    13:c5:50:f3:c3:10:11:70:2b:9f:6f:3c:78:6b:01:
                    27:f3:9d:d5:fa:32:30:9d:7f:0b:51:4a:c3:cb:5f:
                    e0:a9:31:63:71:6b:4a:9f:b8:99:31:5b:20:4f:a3:
                    21:9c:cc:45:01:80:97:e1:14:ef:0e:d9:19:ad:90:
                    fb:93:9f:c6:b6:dc:8d:6f:06:05:41:95:4d:9a:6b:
                    90:fa:cd:16:d6:11:6f:8e:54:bb:27:cc:77:90:aa:
                    12:7a:5a:ea:33:22:da:0a:5b:e2:0e:b3:7f:c0:ac:
                    2b:01:3e:54:4b:52:6a:a5:4a:48:20:a7:96:d8:8d:
                    fa:e4:0f:66:ee:eb:65:b2:d1:47:63:7c:43:b1:40:
                    4f:32:f8:59:e7:c8:95:06:64:50:4d:50:0a:64:cb:
                    68:b0:f8:51:5c:20:74:7d:49:69:12:70:72:c8:d6:
                    3e:1f:22:18:4a:8e:f3:7b:1c:b3:c4:66:42:84:90:
                    52:66:40:17:7f:f9:35:80:2b:c6:33:7c:94:d4:65:
                    c7:03:69:9a:fe:98:fa:cf:57:73:0a:11:7a:30:b9:
                    40:46:4b:1a:bc:f2:b7:e9:9a:b4:53:d1:07:92:d2:
                    eb:dd:05:97:a3:ae:b2:07:72:37:a5:f1:d6:6b:db:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:74:F0:39:81:DF:DD:11:5D:DC:E6:06:98:35:77:A4:C7:28:86:6C
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33322d3332203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:ac:6f:eb:dd:cb:17:f2:93:a6:68:62:de:70:df:bb:4a:a5:
         3a:85:d5:1a:d5:f4:fb:92:8a:43:10:c6:aa:41:e6:71:0c:bd:
         2d:83:8b:9f:81:eb:39:69:83:6c:72:ae:3f:f0:ce:8d:5d:79:
         1f:bd:21:4b:1c:7c:2e:8d:29:e7:2c:01:a2:5e:d6:b0:a4:d3:
         02:67:52:d0:43:8e:68:f2:19:8c:84:b1:bb:45:f1:c8:87:66:
         62:aa:01:10:19:61:75:5e:12:6d:4c:6e:33:ce:ab:ed:50:d7:
         66:9e:ef:b6:e0:2b:40:b0:46:6f:f6:d4:dc:7d:3d:37:c9:46:
         3d:81:9b:94:75:bd:18:ee:43:e9:a0:3c:4f:3b:c7:75:d5:69:
         36:eb:ef:62:c6:70:61:97:ea:e8:7e:79:fe:e3:a4:93:5b:4d:
         b1:62:6d:47:d3:d6:0f:4d:b9:4c:9d:de:3e:a9:61:a6:46:61:
         fb:62:80:f5:a1:b2:47:00:5a:81:ed:e1:bb:c0:06:fa:1f:2e:
         a0:10:b5:01:45:7a:36:3d:73:a1:d2:be:a3:dd:ff:0b:fa:43:
         b5:76:ef:0f:bc:e2:b7:d0:e4:47:9f:49:d4:a1:ca:ed:75:33:
         cc:f5:18:78:b3:b1:ce:4c:be:72:a1:72:01:d3:9a:a3:dc:5b:
         b4:47:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org