Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          PzOKpkBxRKOFEBxzz/sqS0M2Zv7C7oBiZZr9hMlvq90=
Subject key identifier:   36:74:65:6E:C3:EC:74:11:41:52:1E:64:FD:41:30:68:52:62:13:45
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       6F03D4C37CC2EACF04EFCB5233CA5355FB9316FE
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:25 +0000
ROA not before:           Thu 16 May 2024 17:00:25 +0000
ROA not after:            Thu 15 May 2025 17:05:25 +0000
asID:                     270760
IP address blocks:        2804:70fc:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:03:d4:c3:7c:c2:ea:cf:04:ef:cb:52:33:ca:53:55:fb:93:16:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:25 2024 GMT
            Not After : May 15 17:05:25 2025 GMT
        Subject: CN=3674656EC3EC741141521E64FD41306852621345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b4:dc:3b:92:f6:09:60:f7:c4:94:c0:e9:fb:
                    85:43:09:48:ac:e6:6e:96:a6:86:48:8a:36:6d:1f:
                    28:53:14:1a:f8:77:71:b8:2c:09:ff:78:e4:9c:12:
                    28:6c:72:8a:28:55:4c:b1:b6:b3:63:b3:e6:59:c2:
                    3d:0d:57:df:35:03:eb:29:ba:64:9f:33:89:33:bd:
                    64:64:f9:3c:f7:a1:3f:fc:70:8b:e7:a2:70:07:01:
                    2e:49:a2:33:8e:ef:30:ea:1c:4f:57:3d:45:2a:e9:
                    41:6a:85:76:9d:09:79:b9:07:13:6d:a6:39:f8:25:
                    30:04:fe:8c:27:e2:c0:df:0c:e8:55:b8:fc:84:bc:
                    1f:a2:08:c1:0f:15:d2:84:b2:9e:e8:9a:92:5a:d5:
                    09:b7:87:6a:3e:d3:32:90:47:0a:80:e9:09:39:f3:
                    41:55:0d:3e:17:33:09:57:26:3c:86:e7:c4:eb:ab:
                    4c:30:a1:4b:89:73:56:f0:c2:27:9e:4a:bf:ce:3c:
                    42:6f:ec:cf:65:f7:15:58:c5:22:95:0f:cd:48:4d:
                    1a:c4:af:41:ab:13:39:01:cd:01:c7:e3:8e:8c:dc:
                    83:b6:2f:bf:e9:35:31:f7:05:26:6c:ec:5c:c5:9e:
                    3b:f8:cf:34:93:bd:9d:40:64:c5:c7:96:64:49:8a:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:74:65:6E:C3:EC:74:11:41:52:1E:64:FD:41:30:68:52:62:13:45
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:84:40:32:a5:94:a9:69:4a:d8:d3:1d:36:b0:95:f8:9b:22:
         43:be:d3:24:0f:42:c1:fa:f0:8b:c7:5b:e0:a0:b4:48:c1:5f:
         31:9a:87:c3:ce:9c:90:68:78:7c:28:7c:d7:35:52:92:47:32:
         a8:68:71:6e:d7:2f:a3:91:e7:14:0a:9b:03:5e:e5:a6:b8:40:
         a5:76:37:64:51:58:fe:2b:5d:eb:7e:48:f3:22:68:d5:13:01:
         e1:56:bd:a5:e1:91:84:3b:08:cd:18:29:e0:1d:2a:e6:68:8d:
         be:45:be:2f:21:09:e7:98:5f:4a:16:20:7b:36:79:db:b4:63:
         7b:17:8d:ae:c1:b2:d3:fa:7f:ad:9f:27:17:c4:fe:41:47:4a:
         b8:14:7c:bb:7f:be:dc:ea:fd:54:60:62:33:6d:e0:f7:f1:48:
         f9:e6:c3:09:ad:6e:12:6f:de:37:f9:98:d0:89:55:4f:d3:18:
         f7:ff:86:07:be:88:a8:28:ee:66:78:1b:3d:79:24:15:3a:82:
         f0:3c:28:a6:1b:9e:c9:80:93:de:3d:40:f5:18:f7:ee:f7:4f:
         68:fe:cc:20:8e:09:cd:2d:d4:6e:65:d6:b3:63:c8:2a:fd:67:
         06:42:a8:17:50:63:67:9b:90:72:de:42:0a:6f:d2:0b:6e:4b:
         75:11:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org