Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          5HcHa64OikJDfmZB6XwTCEpbDLdarnrzrZrMLznyR9U=
Subject key identifier:   26:FC:B8:95:53:6D:88:AB:D4:72:F8:01:94:5A:BF:28:61:70:CF:91
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       7872C42C8A47809396C8B0110F54E44E1FA2E575
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Thu 04 Apr 2024 02:55:39 +0000
ROA not before:           Thu 04 Apr 2024 02:50:39 +0000
ROA not after:            Thu 03 Apr 2025 02:55:39 +0000
asID:                     271612
IP address blocks:        2804:7e40:3000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:72:c4:2c:8a:47:80:93:96:c8:b0:11:0f:54:e4:4e:1f:a2:e5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Apr  4 02:50:39 2024 GMT
            Not After : Apr  3 02:55:39 2025 GMT
        Subject: CN=26FCB895536D88ABD472F801945ABF286170CF91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:92:d5:d1:01:d2:dc:c1:a3:2b:37:fc:1a:
                    9d:b6:59:83:53:a9:be:26:e7:d3:c4:e1:44:c0:26:
                    14:e0:69:68:42:8e:db:99:30:42:7b:3a:1c:14:02:
                    e8:b9:5b:13:01:92:7d:70:11:da:0d:cc:fa:9a:3e:
                    c3:9b:16:c7:a9:71:5a:db:6d:02:16:aa:7d:1c:1a:
                    cc:7f:98:66:74:db:a5:9e:de:7d:1a:e8:f8:11:5d:
                    b6:3b:2e:d6:14:8f:cb:b8:27:dd:23:5e:de:20:ca:
                    64:6a:6d:39:1a:e9:59:08:8a:a7:4c:8b:2c:4d:1b:
                    e0:5c:c7:44:dd:4d:1f:11:51:a4:c9:a3:c7:ba:20:
                    7c:81:c4:82:13:de:a6:2e:90:13:1e:30:2a:97:a6:
                    4f:d0:0e:14:2b:05:ee:1e:47:5b:96:f2:32:24:1c:
                    db:63:9c:17:32:7a:36:84:bf:00:ea:dd:33:c1:ba:
                    fc:dc:a0:6e:55:80:00:e9:e5:34:70:78:e4:fe:73:
                    e4:1e:07:e5:f3:00:33:af:b4:e5:5b:f6:1b:2e:9c:
                    8b:b8:70:f2:98:ec:47:34:24:78:da:16:f5:d6:0b:
                    7c:f9:a7:74:eb:17:26:93:90:bf:79:35:cc:17:86:
                    ee:8a:df:2c:f3:c2:e8:de:a5:2a:38:d7:13:41:05:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FC:B8:95:53:6D:88:AB:D4:72:F8:01:94:5A:BF:28:61:70:CF:91
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:de:b7:77:0d:a0:0f:f1:0c:33:2f:7c:a5:46:76:65:15:ac:
         a6:24:d2:a8:e4:f3:1e:b4:a3:cf:59:cb:e9:1d:60:f6:86:ed:
         87:c3:cb:fa:51:c4:4c:e7:90:e7:76:2f:40:9c:ec:dd:54:59:
         d2:ef:f4:7e:9b:3d:34:04:ac:b8:70:43:23:81:77:42:4d:33:
         eb:d0:4f:1a:3b:99:61:b7:25:63:0d:fe:b2:5a:c0:8b:85:1e:
         9a:dc:b4:5b:8d:bf:7d:9f:02:2f:d8:71:b0:5e:14:39:4e:a3:
         9c:ec:5c:13:79:be:84:89:c1:2c:e6:22:cf:5f:aa:df:f6:6f:
         66:ea:9d:45:82:2f:1b:dd:1f:6d:51:e5:4a:a8:1b:2e:7b:30:
         35:a3:ed:78:db:be:9d:53:59:ef:d7:9f:72:ea:db:2f:b8:1b:
         63:8c:68:95:1f:4f:87:f3:2e:c2:d7:80:4b:4b:c1:e7:f3:ed:
         83:35:da:3a:cd:ba:c0:87:d0:b1:9e:ca:ce:5e:99:b5:e1:d9:
         98:44:00:f9:d1:2d:18:21:60:fb:7d:ba:4a:3a:a5:d5:7f:9a:
         f6:5a:a5:7b:8d:30:76:97:56:fa:28:02:f4:59:48:34:1e:49:
         61:04:e2:c0:20:94:23:de:a5:69:00:d6:16:69:c4:82:35:a6:
         15:e8:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org