Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          uYbkRrp6UdcM2ifuUKyvhudSMb+2h7ZeGjRuYTbSr8U=
Subject key identifier:   D1:89:4C:02:A2:3B:E6:21:9B:13:B0:BC:F1:3D:B4:DB:86:AA:EB:4E
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       1E351E1627A52C675E06686A0B305CA8060ADDB4
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Thu 23 May 2024 23:55:32 +0000
ROA not before:           Thu 23 May 2024 23:50:32 +0000
ROA not after:            Thu 22 May 2025 23:55:32 +0000
asID:                     271484
IP address blocks:        2804:7c40:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:35:1e:16:27:a5:2c:67:5e:06:68:6a:0b:30:5c:a8:06:0a:dd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: May 23 23:50:32 2024 GMT
            Not After : May 22 23:55:32 2025 GMT
        Subject: CN=D1894C02A23BE6219B13B0BCF13DB4DB86AAEB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a2:91:33:79:5a:80:47:a9:7f:7e:33:35:c1:
                    fe:ca:df:1c:d0:69:4a:bb:36:56:27:a5:36:82:16:
                    74:7b:09:02:16:4f:e0:36:8b:2f:33:9d:6d:db:98:
                    a6:b7:d2:96:2b:15:28:49:7f:56:48:59:a2:e5:c7:
                    30:b9:00:27:c0:24:53:83:ad:3f:f0:ff:a3:45:6e:
                    b6:8b:5d:99:5e:34:15:d9:0c:45:0d:c6:29:a5:15:
                    be:69:1d:3b:ec:32:01:47:3c:90:f4:09:a4:e5:d2:
                    74:7c:28:87:b2:6a:18:ac:62:dc:74:76:b9:e6:29:
                    bc:2d:dd:4e:f0:0c:d5:e0:61:3e:d4:89:9b:5f:90:
                    2b:83:d2:ea:ea:d5:90:b0:88:4c:de:bf:2f:2f:24:
                    9e:8e:ba:08:d3:5e:98:5d:99:ac:28:59:50:5a:73:
                    ed:9d:66:9d:7a:92:48:7c:be:82:94:34:05:63:de:
                    94:12:17:f5:68:7f:99:5d:9e:99:be:0c:c9:20:83:
                    a6:e6:6e:54:ae:ba:7a:03:67:b0:fc:ef:87:15:66:
                    16:8b:ee:e7:ea:35:c2:77:25:fc:a1:eb:78:75:57:
                    1a:77:f2:03:13:5f:1a:6d:a8:bb:7e:71:47:b1:bc:
                    6e:dd:7b:97:e3:e8:2b:60:47:99:0d:ea:cc:c2:5e:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:89:4C:02:A2:3B:E6:21:9B:13:B0:BC:F1:3D:B4:DB:86:AA:EB:4E
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:bb:ff:49:2a:c0:7b:14:c1:bd:92:44:37:49:f8:46:8b:31:
         2e:5a:cb:73:04:01:2e:d9:92:7a:fe:72:16:09:f5:49:bf:09:
         23:ac:e3:bd:b9:25:4c:51:8c:8e:7f:9f:ce:34:d3:63:47:d7:
         97:4d:c8:63:0f:4c:d2:f5:2d:55:d2:2e:1c:62:44:bc:14:19:
         84:59:1e:88:c0:9a:fe:68:f7:be:65:af:4c:6b:ca:d3:3b:8b:
         21:7e:de:17:e5:3d:c5:c4:a3:c7:cb:92:a2:08:6c:18:e1:99:
         ef:08:7c:5a:47:8e:13:a2:ca:95:10:3d:29:30:ee:4f:35:56:
         09:06:2d:49:2e:5d:51:0d:ac:80:2c:61:6d:b4:f2:b2:5e:66:
         38:4a:96:e2:42:7b:10:2d:9b:0f:c6:68:4e:f8:77:be:67:ed:
         47:c6:b6:a8:32:a1:30:69:b2:ef:31:cd:ac:9d:1c:3f:df:1a:
         88:74:19:df:67:3e:56:04:77:da:1d:22:3a:08:0c:4a:19:70:
         ff:8e:8e:51:49:e0:3e:5b:60:f9:b9:4a:a6:94:96:0e:db:d1:
         e8:5b:30:ca:02:15:b4:bc:46:51:17:c3:34:80:36:21:9d:69:
         cb:ba:f1:51:28:38:f0:57:a5:5d:bf:ef:ab:61:d0:52:69:1d:
         6d:36:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:10:59 2024 by rpki-client on console-ams.rpki-client.org