Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/323830343a313331633a3a2f33322d3438203d3e20323633353136.roa
File:                     323830343a313331633a3a2f33322d3438203d3e20323633353136.roa (raw, json)
Hash identifier:          Dh8IjAhneU2klfyr1DG6yk1oZk9em8j1tANjlDJhIlM=
Subject key identifier:   C7:04:41:8C:99:00:CE:D7:19:46:CD:61:8D:31:D3:B4:0D:C5:0D:81
Certificate issuer:       /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
Certificate serial:       5BB2349E27133B57FFDD55897E8CB5BD91549DC5
Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/323830343a313331633a3a2f33322d3438203d3e20323633353136.roa
Signing time:             Thu 04 Apr 2024 11:00:15 +0000
ROA not before:           Thu 04 Apr 2024 10:55:15 +0000
ROA not after:            Thu 03 Apr 2025 11:00:15 +0000
asID:                     263516
IP address blocks:        2804:131c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl
                          rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b2:34:9e:27:13:3b:57:ff:dd:55:89:7e:8c:b5:bd:91:54:9d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
        Validity
            Not Before: Apr  4 10:55:15 2024 GMT
            Not After : Apr  3 11:00:15 2025 GMT
        Subject: CN=C704418C9900CED71946CD618D31D3B40DC50D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:ed:31:39:08:b0:b5:d9:70:b5:ff:a2:95:
                    67:8e:b3:02:6b:a0:81:89:97:88:2d:d0:2f:a2:fa:
                    2c:90:d1:11:fb:79:15:14:9c:e3:b5:ab:97:95:95:
                    65:56:68:df:de:08:10:48:e8:4e:8b:2f:55:c0:63:
                    30:3e:21:b8:85:30:2e:2f:5b:13:1c:46:c6:d1:f0:
                    0d:ca:eb:bf:6a:01:f1:7a:25:c0:7d:4a:a2:5b:bb:
                    49:bc:b2:8d:07:7f:68:b7:e0:ac:d9:e3:61:3c:5b:
                    ca:31:c4:2a:ac:52:be:da:90:5b:c0:2e:f3:f7:53:
                    99:30:17:0d:f6:af:f9:22:92:53:8d:10:e3:7c:31:
                    05:90:3c:b2:96:7c:c1:5d:26:23:0f:c2:b5:f9:be:
                    d1:a5:2d:1c:bc:fd:41:28:8f:fd:7c:ac:8a:5b:b0:
                    c0:7f:31:db:33:ae:bf:48:9a:94:f6:cd:c8:cd:ad:
                    bd:4a:8e:af:3e:b2:74:d4:9a:26:01:c8:81:5d:82:
                    96:27:48:dd:03:cd:1a:75:33:13:85:2c:86:b7:59:
                    54:ad:7b:40:86:e8:51:4e:09:42:49:7f:8c:aa:49:
                    2b:b0:ca:5a:e4:07:24:8e:41:80:c9:8f:57:f8:86:
                    50:f2:ad:25:c9:63:7c:11:46:4a:3a:22:72:66:f3:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:04:41:8C:99:00:CE:D7:19:46:CD:61:8D:31:D3:B4:0D:C5:0D:81
            X509v3 Authority Key Identifier:
                keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/323830343a313331633a3a2f33322d3438203d3e20323633353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:131c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:5c:8d:ca:d3:5c:6a:a4:88:aa:7b:81:79:94:19:6e:6d:5d:
         6c:ed:6b:3c:b1:79:51:82:f8:30:73:f2:91:2a:e1:bc:be:23:
         59:5c:9f:70:1d:0f:39:d3:45:ed:5a:85:fb:c1:f1:0b:74:64:
         f1:5b:87:05:69:89:fe:5b:2b:db:f2:50:8a:14:4b:a5:1a:85:
         d8:66:6c:b3:df:47:24:a5:84:a2:e6:cf:86:f9:9c:1d:e5:6a:
         0c:34:da:ba:a9:1e:c1:ca:41:68:09:fe:9d:80:f8:a5:a4:70:
         be:81:40:16:ac:cf:3b:1b:f9:31:fe:57:ea:f5:f5:a7:27:1b:
         f0:cb:d5:02:77:9b:22:79:d6:73:0c:63:d3:8a:63:60:28:53:
         bf:65:8a:8b:49:07:98:32:23:54:ae:1b:f7:07:d6:12:20:c8:
         c3:c8:74:09:d6:80:fa:28:93:42:e9:59:ae:ca:c8:56:b0:89:
         55:89:d7:2b:e3:28:57:4f:af:d6:ad:db:e0:21:be:a9:2a:60:
         7f:b1:9b:9d:cf:1a:da:80:36:d8:52:52:63:45:30:3f:40:c1:
         68:00:56:5b:05:c2:30:d8:21:00:f7:76:f5:51:a3:7c:d1:4c:
         49:7c:23:ef:03:68:a3:90:99:8e:de:a5:f8:60:da:de:9e:ac:
         6e:7c:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org