Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a3a2f33322d313238203d3e20323634323831.roa
File:                     323830343a323537303a3a2f33322d313238203d3e20323634323831.roa (raw, json)
Hash identifier:          yiQ/Bl6erA2IO/dAZXfP1ajgAv32P+eI3K6/zQH5nXM=
Subject key identifier:   E7:EE:7E:9F:D1:73:13:FE:82:E3:B5:BC:70:8D:CE:6A:62:C8:11:AE
Certificate issuer:       /CN=C6311968EBC105398794FB43DCF25FAA7999A36E
Certificate serial:       716AD3E9B50D78C029445007A08FAB8778AFC389
Authority key identifier: C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a3a2f33322d313238203d3e20323634323831.roa
Signing time:             Thu 18 Apr 2024 11:12:45 +0000
ROA not before:           Thu 18 Apr 2024 11:07:45 +0000
ROA not after:            Thu 17 Apr 2025 11:12:45 +0000
asID:                     264281
IP address blocks:        2804:2570::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl
                          rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6a:d3:e9:b5:0d:78:c0:29:44:50:07:a0:8f:ab:87:78:af:c3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6311968EBC105398794FB43DCF25FAA7999A36E
        Validity
            Not Before: Apr 18 11:07:45 2024 GMT
            Not After : Apr 17 11:12:45 2025 GMT
        Subject: CN=E7EE7E9FD17313FE82E3B5BC708DCE6A62C811AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:b9:4d:34:37:5f:5c:57:94:d8:34:24:8d:
                    f3:8b:9d:7b:d1:33:22:49:64:e9:a0:77:b2:ce:4a:
                    13:22:44:c1:42:12:2b:9f:b2:f9:7b:c2:cd:95:6e:
                    96:47:63:63:1d:bd:88:9a:d2:28:44:42:49:4c:d1:
                    79:99:ef:df:0c:cc:e8:b2:dd:03:a8:f5:c0:e1:43:
                    82:7d:34:c2:9d:db:a1:50:2a:ef:45:4b:af:36:68:
                    e6:d9:e3:b1:72:b4:a0:1a:de:b5:5e:c5:0a:32:05:
                    91:1d:7f:cf:5f:19:b7:1f:f0:e8:b5:35:38:4c:72:
                    c6:97:56:9b:a8:c0:93:f0:66:78:1e:71:04:a0:b6:
                    a8:a6:97:23:02:88:c0:fa:7a:92:dd:24:c1:43:0d:
                    63:19:b0:b2:bb:8e:9b:37:77:86:07:16:63:3d:2b:
                    17:58:0e:d0:4f:30:18:f9:23:f2:f1:fd:b6:f6:78:
                    ec:e8:df:b2:6c:6a:02:1a:8d:b5:dd:5e:fe:af:f4:
                    a3:ef:c1:e5:ee:57:ce:a4:95:f4:48:87:fb:bf:26:
                    2e:ee:53:02:1d:f4:5d:a2:a7:aa:6a:c3:a2:1f:60:
                    45:dd:0d:94:1d:8f:b9:9b:63:4f:fd:fc:58:57:14:
                    da:d2:47:fd:8d:d1:5a:7f:02:36:0e:d2:f2:b5:98:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EE:7E:9F:D1:73:13:FE:82:E3:B5:BC:70:8D:CE:6A:62:C8:11:AE
            X509v3 Authority Key Identifier:
                keyid:C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a3a2f33322d313238203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2570::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:4d:b8:ac:52:32:1a:55:b5:a4:82:69:df:01:8a:37:c2:96:
         81:20:53:a1:38:55:b0:4a:89:14:0b:59:75:46:ac:74:61:c4:
         10:4d:f8:04:9d:20:f5:fa:d7:84:bd:b1:14:68:61:ce:d2:86:
         59:57:13:66:a5:a1:df:20:b5:61:79:bc:1d:a9:cd:cc:83:da:
         ae:88:45:51:44:8a:0d:ee:95:8a:43:31:d6:08:25:fc:01:39:
         ae:8e:39:6b:fd:04:4f:ee:2a:83:5d:4a:6b:00:da:ca:c4:c4:
         eb:cf:9b:fe:44:4e:32:47:a8:62:96:47:94:3c:c0:f2:ec:d8:
         34:8c:ff:9b:c9:cf:5e:f5:1d:47:49:bb:ef:25:fe:94:2d:c8:
         a3:27:5a:23:0b:c3:70:d7:2f:9e:05:a5:f7:f4:36:8e:bc:0f:
         56:63:22:72:cb:62:c7:d0:4d:5c:f6:88:ab:5b:02:58:3d:77:
         29:55:40:49:5f:ca:63:5a:72:80:18:1e:25:df:90:bc:71:2d:
         b9:c4:ec:2f:a1:ce:8d:60:b7:a6:28:d8:78:65:a2:0b:b3:8f:
         6f:65:de:74:b2:0f:a6:1b:01:76:17:b4:82:01:df:37:b0:4a:
         d9:04:c3:00:ea:30:7c:02:fd:70:0a:7e:85:f7:35:3e:ad:7c:
         69:34:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:50 2024 by rpki-client on console-fra.rpki-client.org