Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3332203d3e20323732373037.roa
File:                     323830343a383736383a3a2f33322d3332203d3e20323732373037.roa (raw, json)
Hash identifier:          WiDSWvpQZXvWZFhrHZkbCOYCVnuZGk5Ce5+3D+YrJ8A=
Subject key identifier:   DB:05:7C:5B:85:9F:1B:91:CB:A9:CE:53:E9:BC:35:C3:9E:66:4D:CF
Certificate issuer:       /CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
Certificate serial:       7034993C8A6B58DC3797699F5CD7D84A565D172E
Authority key identifier: 7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3332203d3e20323732373037.roa
Signing time:             Tue 23 Apr 2024 17:08:11 +0000
ROA not before:           Tue 23 Apr 2024 17:03:11 +0000
ROA not after:            Tue 22 Apr 2025 17:08:11 +0000
asID:                     272707
IP address blocks:        2804:8768::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl
                          rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:34:99:3c:8a:6b:58:dc:37:97:69:9f:5c:d7:d8:4a:56:5d:17:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
        Validity
            Not Before: Apr 23 17:03:11 2024 GMT
            Not After : Apr 22 17:08:11 2025 GMT
        Subject: CN=DB057C5B859F1B91CBA9CE53E9BC35C39E664DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:28:df:50:ba:72:6d:38:37:c0:ec:89:7a:
                    da:fb:ea:d0:98:d4:3b:f2:fc:d6:e3:40:ae:63:f1:
                    10:50:d1:32:3e:06:1c:6f:5c:18:b7:b3:4b:01:1b:
                    a7:41:e8:8f:3e:44:ed:4c:c2:d7:66:ac:8d:b9:cd:
                    46:33:a1:5f:81:9a:c3:bd:45:75:d4:3c:7d:52:1d:
                    ca:e3:49:2e:46:a3:02:1b:46:d3:cb:23:a9:aa:c8:
                    3c:d3:71:f0:53:1d:7c:32:ec:fc:5b:b6:50:fa:e3:
                    da:3b:06:10:ea:63:c0:6f:b6:04:18:9f:8d:f5:35:
                    7a:6f:8a:8a:5f:05:c9:c1:70:a8:4e:f2:41:14:ae:
                    dc:46:fd:0c:60:0a:5e:9b:6c:ce:8c:7b:a8:e8:08:
                    51:0d:a4:51:c9:26:f7:64:5b:56:74:fa:47:1b:9e:
                    cc:9d:70:5d:7d:a1:45:6d:8d:4d:d8:c7:b3:be:b3:
                    3d:c7:5d:45:6c:1f:d0:a2:e9:86:1e:a5:fb:ba:33:
                    98:9e:9b:e4:f5:cc:2f:56:eb:f2:18:5f:83:45:d6:
                    8d:75:41:84:a2:f1:1e:4d:52:20:f8:4a:17:3a:3e:
                    54:0c:26:94:13:0f:bc:e1:14:fd:10:81:76:1f:c7:
                    eb:57:38:ab:42:d2:3f:7a:f8:6b:72:eb:23:fe:12:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:05:7C:5B:85:9F:1B:91:CB:A9:CE:53:E9:BC:35:C3:9E:66:4D:CF
            X509v3 Authority Key Identifier:
                keyid:7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3332203d3e20323732373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:6b:80:5c:67:cc:39:87:ff:c8:b2:e3:48:69:a0:df:c9:
         48:e3:b7:eb:4a:b4:1b:38:8a:e4:95:ab:ac:cf:41:c1:9c:9b:
         81:4f:51:53:79:eb:f8:23:bd:90:41:85:ee:f0:b4:98:06:35:
         1b:2e:18:5e:ca:9a:54:57:15:62:41:11:65:c1:e6:1e:52:1d:
         df:f2:6d:d9:03:cd:4a:30:2c:f7:7b:40:e4:81:fd:29:3b:7b:
         f9:80:ba:bb:d9:0c:ac:82:4e:40:9c:12:ac:00:1c:56:c3:ff:
         fa:f3:69:7d:c7:0e:53:ed:94:b8:1b:f5:bd:b6:dd:2d:f3:5f:
         5a:ff:67:38:2e:2a:d0:ff:f0:df:e9:ef:65:5e:5f:c1:ae:f7:
         98:03:61:15:1c:98:f8:fb:07:94:6c:f4:e6:14:bc:07:ae:3d:
         c9:be:4c:1c:a1:b1:1b:44:4b:35:0e:f6:ef:7d:b5:aa:a5:f8:
         37:83:f0:d1:7c:4c:11:26:6a:29:47:cf:da:d0:30:77:d6:6a:
         72:7c:0a:81:bc:80:20:cd:da:71:a6:3a:3b:7b:36:67:ec:4f:
         b9:c7:fd:6c:a4:95:74:5e:e9:1a:22:7f:8c:72:75:b2:66:90:
         30:c2:a2:24:e0:4e:b2:2b:e9:9e:20:83:76:63:29:32:61:2a:
         d0:04:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org