Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/323830343a363034303a3a2f33322d3334203d3e20323639313535.roa
File:                     323830343a363034303a3a2f33322d3334203d3e20323639313535.roa (raw, json)
Hash identifier:          aaY3xAXoNYi953tov4cWuiMgaI8SlPQFp+q5dFdHSHA=
Subject key identifier:   AE:02:6E:2B:A1:B2:DB:BB:4B:9E:AB:03:A9:86:74:9C:1A:52:52:FB
Certificate issuer:       /CN=D0141D0910DD3A1235DA00E3AE363674AF93C9B4
Certificate serial:       07F1601BD54E1227681CB57AAA8BD4B591A130AD
Authority key identifier: D0:14:1D:09:10:DD:3A:12:35:DA:00:E3:AE:36:36:74:AF:93:C9:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/323830343a363034303a3a2f33322d3334203d3e20323639313535.roa
Signing time:             Thu 04 Apr 2024 04:17:07 +0000
ROA not before:           Thu 04 Apr 2024 04:12:07 +0000
ROA not after:            Thu 03 Apr 2025 04:17:07 +0000
asID:                     269155
IP address blocks:        2804:6040::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.crl
                          rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f1:60:1b:d5:4e:12:27:68:1c:b5:7a:aa:8b:d4:b5:91:a1:30:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0141D0910DD3A1235DA00E3AE363674AF93C9B4
        Validity
            Not Before: Apr  4 04:12:07 2024 GMT
            Not After : Apr  3 04:17:07 2025 GMT
        Subject: CN=AE026E2BA1B2DBBB4B9EAB03A986749C1A5252FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:f7:a4:75:cc:d1:78:1a:86:8b:58:3c:01:
                    73:96:57:81:59:82:2b:0c:a7:d3:de:5d:fa:32:c5:
                    83:31:4d:a9:df:d8:44:d1:3d:c1:df:d0:63:dc:70:
                    a9:b5:18:77:94:6e:9a:66:1a:42:38:18:a1:e5:4a:
                    cc:fd:c4:a9:dc:a2:89:20:95:a0:60:48:57:76:10:
                    04:84:74:42:dd:1e:3b:eb:15:d3:26:df:69:9a:00:
                    bd:11:e2:18:b7:3b:26:7c:f4:f6:e5:21:24:5f:29:
                    44:b5:ad:66:de:f0:c6:1a:35:85:9b:7c:3f:1f:c7:
                    90:c5:67:74:92:2c:bd:96:6e:4d:56:c9:46:eb:b6:
                    2f:a7:0e:96:f9:10:74:02:29:0e:49:3b:f0:d7:1d:
                    00:cc:58:63:4b:3b:26:c6:d4:ff:21:05:ab:df:6b:
                    c4:ed:44:fb:ce:c4:c0:8e:85:33:11:02:28:26:06:
                    63:b1:16:9a:ed:aa:d4:fd:86:62:6b:34:5b:10:78:
                    59:ce:02:a8:b4:66:1b:fa:b8:06:53:4f:a5:85:04:
                    08:fc:33:c2:2b:60:80:c5:71:0d:d2:3f:b9:87:7f:
                    a5:aa:20:02:15:83:26:72:78:c2:7b:01:81:2f:b2:
                    01:ea:cd:97:f7:7d:e7:95:97:94:66:8f:7c:90:2d:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:02:6E:2B:A1:B2:DB:BB:4B:9E:AB:03:A9:86:74:9C:1A:52:52:FB
            X509v3 Authority Key Identifier:
                keyid:D0:14:1D:09:10:DD:3A:12:35:DA:00:E3:AE:36:36:74:AF:93:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/323830343a363034303a3a2f33322d3334203d3e20323639313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:a1:9d:57:8a:e5:19:be:18:39:10:5f:4b:7e:78:05:2e:
         e2:88:9f:e7:95:d6:a4:fe:76:a3:c1:7d:a7:15:a8:9c:69:91:
         6b:61:26:7f:c4:9e:a7:c0:8b:00:34:c4:eb:a7:a7:db:4c:25:
         2a:7a:d5:8d:c7:ce:51:6a:3c:ec:67:99:68:c2:12:df:cc:4c:
         8d:c7:63:2b:bd:4c:4e:23:ca:37:7e:8b:01:21:18:f4:0d:e4:
         65:6d:c9:18:3c:89:0e:bb:52:11:2e:4d:81:d7:44:6d:c4:ef:
         bb:5e:0d:25:0c:a1:bc:65:80:52:ab:cd:f9:33:70:3a:30:a5:
         47:cb:75:78:2e:e8:83:f1:39:26:37:d4:eb:14:e2:6a:ac:d1:
         00:d7:f8:dd:63:b2:c6:e7:94:f8:69:47:86:3c:96:b9:a0:87:
         2f:03:94:7c:d1:ef:a3:69:52:b7:81:89:a6:7c:74:5b:74:50:
         6d:d6:eb:f7:2a:eb:c7:c9:02:ad:10:ac:ae:e0:e1:c4:9c:01:
         3e:f8:a1:ec:b4:f7:16:cd:8d:fd:6b:ba:22:4d:32:31:1f:3c:
         2f:e0:89:69:d1:af:20:b7:58:45:fb:4d:15:aa:b1:a0:f2:0a:
         d6:3a:75:1f:33:ef:ee:0e:b4:e0:d9:dc:ff:07:be:bc:ff:14:
         8c:f0:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org