Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          feo7SrvHMVG2rUWmDWZiWIEu4nemhJk6VIPhcXw2gjM=
Subject key identifier:   1C:77:5A:4D:D5:10:DC:09:6E:7E:4B:93:6A:DB:66:90:36:B5:40:3B
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       02608A86B2C41B64F6A04061904E7FA72E9C8952
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     266248
IP address blocks:        2804:3d04:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:60:8a:86:b2:c4:1b:64:f6:a0:40:61:90:4e:7f:a7:2e:9c:89:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:95:7c:4c:fa:18:65:c0:63:42:29:23:b3:
                    0c:ba:04:c4:03:a6:4c:20:b4:d7:67:8b:c0:89:59:
                    c3:81:83:9d:fe:25:1b:73:a8:cd:a3:58:7a:1e:bb:
                    b2:3f:73:d3:07:4a:86:24:49:58:81:bb:1f:32:54:
                    a3:4b:3b:b4:4d:f7:c7:2f:c1:b2:64:8b:6e:ab:2b:
                    5d:3e:c5:5f:d7:47:54:b4:f2:a3:22:ad:c8:63:c2:
                    22:12:80:0e:dc:13:ed:21:c3:2f:c1:f1:fd:bf:71:
                    d8:7a:13:ef:fd:89:58:90:b2:f2:6f:96:19:a4:cd:
                    da:a3:bb:ff:bd:12:6f:8d:10:18:4a:d4:31:94:61:
                    ea:b8:7b:9d:a4:d2:7f:cd:35:d4:cd:d7:3b:fe:91:
                    50:c9:b8:29:ae:77:28:f0:5f:c3:23:19:78:9c:a1:
                    2c:d6:55:86:64:e2:a8:a1:e9:e2:6b:de:93:1a:f3:
                    3b:35:a5:33:f7:23:59:0f:15:71:58:42:d4:2f:73:
                    51:db:25:be:95:eb:5f:a3:d3:75:cc:01:4a:8d:fe:
                    a8:d7:30:3d:f0:2e:ec:a1:56:05:72:46:bd:e7:e2:
                    b9:35:55:4a:36:a0:8f:df:4f:ea:2d:f8:aa:53:de:
                    6c:ac:a2:6e:3c:e8:95:b6:3f:40:52:7b:e9:7e:b1:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:5A:4D:D5:10:DC:09:6E:7E:4B:93:6A:DB:66:90:36:B5:40:3B
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:64:cc:0d:ab:37:ad:da:b9:d0:a1:92:5b:b0:7b:25:70:
         7b:bd:e2:10:df:59:fc:e6:ec:02:39:37:8c:d0:64:ee:85:e3:
         16:38:4b:0c:5e:70:0b:10:c2:6f:f6:0a:a2:f2:e9:6f:c4:03:
         68:9f:f5:e6:5c:64:38:34:6a:da:c0:11:1b:38:e9:cb:e4:c0:
         3a:64:04:4a:75:23:a1:86:39:35:8a:93:81:6c:5f:69:76:27:
         50:77:b1:9a:f2:89:5e:33:f3:64:37:51:fe:e9:76:f8:29:3f:
         7a:cc:86:bc:4a:aa:b5:cb:0e:46:3f:26:48:f4:3c:6d:69:fc:
         45:a5:06:3d:0f:25:3c:f0:ec:6f:df:08:dd:22:9e:87:8d:43:
         05:60:7a:be:3e:a3:20:47:bd:47:c5:e7:28:4c:37:5b:ae:00:
         f9:ec:fb:59:88:42:e4:46:e8:c4:fd:fc:e3:f0:e0:e8:93:e1:
         85:cf:94:a6:95:13:8a:6c:36:73:be:81:49:d3:3e:75:b9:d4:
         11:e3:ff:53:c6:2d:fb:ba:6f:04:ef:42:29:92:c0:38:c2:9a:
         be:82:57:57:98:2b:d0:f1:7b:d1:89:33:5d:02:70:18:b5:b9:
         16:91:3f:53:d0:ea:03:33:ce:03:57:f9:c2:77:71:58:94:4b:
         30:13:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org