Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/323830343a363236343a3a2f33322d3438203d3e20323639323934.roa
File:                     323830343a363236343a3a2f33322d3438203d3e20323639323934.roa (raw, json)
Hash identifier:          jjSJzytkGciFv57IwekU4EaHTBHEbHYSqzyLvyRFYh0=
Subject key identifier:   6A:CD:F5:6B:30:EC:98:78:B5:1F:11:81:8C:CB:63:6F:4D:F7:AA:EE
Certificate issuer:       /CN=7EAD5172054B440D42C3F71E33909EEC94AB2A9F
Certificate serial:       30D31A3E699F90F62A7F63CF43D3896C600DD6CB
Authority key identifier: 7E:AD:51:72:05:4B:44:0D:42:C3:F7:1E:33:90:9E:EC:94:AB:2A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/323830343a363236343a3a2f33322d3438203d3e20323639323934.roa
Signing time:             Tue 02 Jul 2024 13:27:18 +0000
ROA not before:           Tue 02 Jul 2024 13:22:18 +0000
ROA not after:            Tue 01 Jul 2025 13:27:18 +0000
asID:                     269294
IP address blocks:        2804:6264::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.crl
                          rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d3:1a:3e:69:9f:90:f6:2a:7f:63:cf:43:d3:89:6c:60:0d:d6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EAD5172054B440D42C3F71E33909EEC94AB2A9F
        Validity
            Not Before: Jul  2 13:22:18 2024 GMT
            Not After : Jul  1 13:27:18 2025 GMT
        Subject: CN=6ACDF56B30EC9878B51F11818CCB636F4DF7AAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:c0:59:5f:a5:1a:f5:c1:2c:a9:83:2a:7d:
                    7c:64:e7:88:62:87:0e:64:06:c6:9f:63:26:5d:d5:
                    27:36:1e:ea:d1:a3:64:66:87:e8:79:48:21:69:5a:
                    cb:f0:04:27:7e:a9:70:4f:94:d7:83:86:1f:84:99:
                    4b:e5:ca:b8:79:99:40:fa:84:e6:41:99:b0:8f:f2:
                    49:ba:05:75:5b:61:51:da:c5:45:65:df:bb:e2:9b:
                    58:5f:34:2e:96:ce:84:bf:1c:7a:41:6e:d0:4c:98:
                    65:e5:ce:c0:1a:30:28:7f:34:1e:6e:7c:2d:e7:63:
                    ff:09:7c:0c:83:20:1c:a1:c7:48:80:c2:60:11:88:
                    0f:76:95:46:07:9d:11:4d:cc:8c:ff:64:1c:9f:99:
                    8d:be:19:8d:61:64:ed:f0:47:b3:99:ac:3a:3c:3c:
                    bc:ad:75:a6:f7:4c:fe:0c:67:ed:36:0c:2f:96:0e:
                    7c:12:41:0c:63:84:57:f8:12:bc:31:40:15:65:73:
                    de:6d:8c:98:5a:98:e5:d7:0f:01:ef:d9:4c:52:89:
                    90:9b:3a:b9:8e:43:73:b9:58:df:b9:26:d9:97:9e:
                    95:a7:06:25:7f:78:1b:1f:15:09:3a:bd:e9:5b:9e:
                    9b:eb:bb:1d:8d:e1:c4:d5:0a:8f:7a:5d:ee:a8:53:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CD:F5:6B:30:EC:98:78:B5:1F:11:81:8C:CB:63:6F:4D:F7:AA:EE
            X509v3 Authority Key Identifier:
                keyid:7E:AD:51:72:05:4B:44:0D:42:C3:F7:1E:33:90:9E:EC:94:AB:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/323830343a363236343a3a2f33322d3438203d3e20323639323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6264::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:0a:ba:fd:a1:e6:00:04:8b:6f:87:75:2b:83:2a:82:ec:
         79:fe:28:28:0f:8b:65:26:5d:4b:04:d3:d3:e9:b1:31:9d:fe:
         ff:5b:1c:aa:57:a8:cd:35:f3:0f:78:0e:89:f0:04:6b:d8:0d:
         ac:b2:d8:61:6d:b9:d8:37:34:78:43:03:94:0c:35:82:e2:43:
         08:1f:f0:a0:53:33:2f:59:c8:db:15:4f:a3:f8:04:6e:73:56:
         4d:eb:6e:2a:30:fb:05:91:24:a5:fe:7e:ac:96:19:65:bb:8b:
         b1:cf:24:5d:27:27:3c:15:4c:8b:c4:47:ae:df:76:d4:a1:77:
         92:c3:46:93:3f:cb:5c:28:4c:6c:70:f6:ab:51:51:cb:dd:4c:
         f1:14:ff:0c:58:0f:c3:98:12:4a:43:05:a4:db:f3:81:d5:24:
         ad:b4:5a:4b:be:48:d9:94:d5:bd:5c:37:78:6c:3c:4f:8d:8b:
         08:6d:54:b3:25:1a:a6:51:76:43:df:5b:b8:8e:0b:ec:ee:46:
         bd:00:ca:c5:eb:ee:bf:57:a2:bf:44:d9:c2:8b:fb:5b:b1:ed:
         c8:fd:b9:da:96:75:c3:1a:d6:3b:4a:08:86:2c:2b:4c:c2:0c:
         a0:54:5c:4f:9b:e2:ff:1d:e5:0b:6f:f2:69:41:a9:eb:02:ef:
         a5:3b:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:03 2024 by rpki-client on console-ams.rpki-client.org