Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/323830343a353736383a623030303a3a2f34302d3430203d3e20323638303633.roa
File:                     323830343a353736383a623030303a3a2f34302d3430203d3e20323638303633.roa (raw, json)
Hash identifier:          RVAE2AHTp9x55w7ccCLqmcs9s38fizw+T50qEQM4Nr0=
Subject key identifier:   C8:23:33:4D:A1:55:4E:EB:F0:2D:5C:FD:DE:53:15:B3:E2:BC:A7:AA
Certificate issuer:       /CN=4D40CE2A6478B78956F69542766BA3C0806B8392
Certificate serial:       43F090E110D783C72C9697B63C79EAA265EE791F
Authority key identifier: 4D:40:CE:2A:64:78:B7:89:56:F6:95:42:76:6B:A3:C0:80:6B:83:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/323830343a353736383a623030303a3a2f34302d3430203d3e20323638303633.roa
Signing time:             Thu 04 Apr 2024 05:11:15 +0000
ROA not before:           Thu 04 Apr 2024 05:06:15 +0000
ROA not after:            Thu 03 Apr 2025 05:11:15 +0000
asID:                     268063
IP address blocks:        2804:5768:b000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.crl
                          rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f0:90:e1:10:d7:83:c7:2c:96:97:b6:3c:79:ea:a2:65:ee:79:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D40CE2A6478B78956F69542766BA3C0806B8392
        Validity
            Not Before: Apr  4 05:06:15 2024 GMT
            Not After : Apr  3 05:11:15 2025 GMT
        Subject: CN=C823334DA1554EEBF02D5CFDDE5315B3E2BCA7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9b:56:ef:d0:fa:4c:87:d4:32:15:75:22:25:
                    37:a4:6b:f5:77:df:81:ab:6d:7e:c0:57:2c:a9:05:
                    73:2c:dd:a4:fb:2c:81:c1:76:ab:cd:35:eb:f1:eb:
                    ae:fc:db:2b:28:38:8a:56:e3:d7:26:0e:75:39:96:
                    94:e3:ec:8f:62:ce:5a:95:e0:e8:7e:06:fc:c7:ba:
                    5d:50:04:5e:21:10:75:20:24:69:19:ca:73:7a:dc:
                    8a:17:91:ca:ae:80:dc:9e:47:62:d7:44:31:4f:00:
                    c0:6c:f6:b7:3b:01:e7:7c:05:85:2f:5d:ae:26:c9:
                    ba:8f:3d:c3:56:92:6f:ab:0f:b0:9d:aa:fd:0c:eb:
                    05:d4:17:3e:33:6c:a8:ce:a0:97:3e:58:8b:7a:02:
                    c3:2e:56:54:fc:f8:3b:51:c3:2e:9c:f5:ce:c8:61:
                    b9:bf:25:10:da:a7:64:ff:2c:de:4c:07:39:e5:fa:
                    f9:51:cd:50:98:b0:60:32:97:fe:3f:c0:e1:b0:54:
                    e7:43:a9:a7:35:89:44:a3:69:d4:88:e2:ac:98:ef:
                    a4:a3:ae:64:3e:cc:2e:c4:07:8c:3f:43:36:a4:0b:
                    66:76:2f:ca:9f:8e:f8:cd:a0:47:ca:cc:76:99:48:
                    e5:39:81:b6:bd:1d:ab:14:ee:54:2e:5f:2e:c5:15:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:23:33:4D:A1:55:4E:EB:F0:2D:5C:FD:DE:53:15:B3:E2:BC:A7:AA
            X509v3 Authority Key Identifier:
                keyid:4D:40:CE:2A:64:78:B7:89:56:F6:95:42:76:6B:A3:C0:80:6B:83:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/323830343a353736383a623030303a3a2f34302d3430203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5768:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:96:8a:d1:89:48:cc:71:a9:79:eb:72:f7:08:d6:c9:68:
         56:20:64:1d:ba:01:1a:43:c4:c0:ee:78:7e:d2:6f:2c:87:13:
         ab:ae:9a:f0:29:59:c1:b9:01:08:86:da:45:e4:97:5e:05:4a:
         24:79:9e:5c:cf:74:61:e9:6b:a9:10:04:d5:b4:59:ea:d9:b8:
         7f:65:e1:fc:1f:cc:17:17:e2:b5:f9:b3:c9:0e:39:24:fa:0b:
         27:73:fb:84:11:6f:cd:04:da:e4:48:4c:9c:e4:29:dc:c5:fe:
         d5:98:63:ff:31:cb:fa:ce:bc:33:5e:7c:7a:54:8d:cf:92:d3:
         44:d4:1a:73:45:95:56:f0:de:55:a6:70:b5:8b:07:67:fd:72:
         fd:69:24:fd:68:8e:c5:28:f4:0d:14:40:bd:6e:7a:dd:6e:78:
         55:fd:8c:02:bb:92:ae:5f:f4:f2:af:48:87:ca:85:51:1c:c1:
         fc:53:6b:65:3d:e7:52:52:4d:11:cf:e5:97:1a:c9:1e:14:4c:
         40:9d:96:03:dc:94:c4:77:9f:09:80:c5:2e:d1:24:3f:3a:82:
         ff:5a:d2:9c:ed:e4:d7:c1:ae:89:73:4c:9b:23:b1:85:35:4b:
         69:0d:3a:85:c4:36:39:db:66:83:a2:1c:21:37:3b:f0:e2:f7:
         75:31:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:45 2024 by rpki-client on console-fra.rpki-client.org