Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa
File:                     323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (raw, json)
Hash identifier:          Xncr9xp+DObMtYE7sJuueNeAvyVjLBKQKWtbND4qYkE=
Subject key identifier:   D2:70:25:47:6C:FA:04:04:2C:C4:FB:E4:64:15:D9:E1:E5:4A:27:DA
Certificate issuer:       /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
Certificate serial:       181D3463C7DF4BA54A3473827526AC47AC8FF97E
Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa
Signing time:             Thu 04 Apr 2024 19:42:07 +0000
ROA not before:           Thu 04 Apr 2024 19:37:07 +0000
ROA not after:            Thu 03 Apr 2025 19:42:07 +0000
asID:                     273457
IP address blocks:        2804:8ef0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl
                          rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1d:34:63:c7:df:4b:a5:4a:34:73:82:75:26:ac:47:ac:8f:f9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
        Validity
            Not Before: Apr  4 19:37:07 2024 GMT
            Not After : Apr  3 19:42:07 2025 GMT
        Subject: CN=D27025476CFA04042CC4FBE46415D9E1E54A27DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:98:b0:97:62:93:e1:63:94:4d:7b:de:29:
                    76:91:83:bd:39:50:c1:56:90:fe:77:db:21:73:19:
                    37:84:9d:5f:ad:5b:67:20:e8:a0:18:a4:f8:3c:1a:
                    4f:6d:d7:e3:21:e7:db:aa:35:8b:52:21:a5:63:21:
                    43:11:14:17:97:cd:10:fe:39:24:60:25:dc:44:e4:
                    16:91:2b:6d:3e:ba:ad:a5:e9:c7:f7:ec:2a:33:88:
                    34:2d:40:c7:bb:e3:ce:79:ee:36:7e:a4:cf:55:59:
                    a2:ea:f2:9a:9d:11:0b:91:3f:3c:20:9b:62:2d:39:
                    d9:b9:9e:78:f8:e3:30:34:60:43:49:6f:d5:53:38:
                    d0:0c:a2:67:5b:2e:9b:f7:99:09:aa:e1:e1:af:47:
                    12:f3:d2:01:4e:bd:6a:d2:db:ff:32:97:e9:fc:7f:
                    6e:6a:e2:ea:bd:45:0e:3e:95:47:8c:24:17:d7:0a:
                    dc:e7:0b:56:39:4c:f7:4c:f7:52:59:a7:39:75:05:
                    00:72:c5:14:29:c9:a6:13:bf:7e:5f:6e:8a:1e:85:
                    c3:4c:f0:7e:b6:1a:b7:b1:2c:d4:53:4b:fa:11:0b:
                    7a:f7:2c:48:0d:c0:c6:a3:53:7a:fa:2f:41:f8:76:
                    09:cb:dd:d3:be:cd:32:f5:90:ba:bc:cf:07:b1:b7:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:70:25:47:6C:FA:04:04:2C:C4:FB:E4:64:15:D9:E1:E5:4A:27:DA
            X509v3 Authority Key Identifier:
                keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:49:13:82:6c:70:f6:ac:aa:8d:84:16:ab:de:34:4d:da:62:
         56:9c:f4:35:f8:53:03:ba:30:a4:bf:1c:1b:a0:62:3e:96:08:
         55:59:dc:94:9d:c0:4e:8f:90:9e:e2:2a:0d:86:19:28:20:84:
         e3:e7:0a:69:9b:e7:ef:fe:76:0d:77:c3:95:b4:98:92:25:2c:
         5e:50:d3:b9:f7:87:bc:db:2d:b6:d3:c1:83:08:11:e9:c0:4e:
         cb:5a:d1:60:87:51:60:61:26:01:5e:0b:cc:79:70:b7:72:2e:
         ec:cd:29:c8:a8:47:35:e0:67:d9:7c:7a:f4:7f:e1:bb:a4:cf:
         d1:ca:31:1f:f0:f1:62:ca:d3:df:67:0e:35:ec:f8:e5:08:14:
         ee:e7:a9:c9:a1:97:e1:46:3f:56:1c:2c:07:07:a9:d4:5c:c5:
         f9:f2:00:a2:f0:e3:fa:ec:0f:ae:34:bb:7e:af:7e:c2:f5:ad:
         d4:70:fe:54:dc:e9:2b:b1:3f:2d:7c:a5:6e:81:0f:72:73:42:
         fe:b5:04:67:a5:d6:ab:77:86:31:ab:04:59:7b:2f:e2:64:de:
         67:13:e3:8f:e7:80:e5:af:97:50:45:e7:bf:af:e8:5f:cb:d5:
         14:67:e0:77:b2:49:ba:7f:1b:2a:b0:0e:17:cb:97:8a:e1:b1:
         41:81:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 01:06:10 2024 by rpki-client on console-ams.rpki-client.org