Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa
File:                     323830343a356236633a3a2f33322d3332203d3e20323638383432.roa (raw, json)
Hash identifier:          5w/XX07mjeycnaGPmuMME8ZoZMkYOiGfFUrp9HR5fxc=
Subject key identifier:   65:07:F5:BB:3F:20:BE:6B:4E:E7:0B:2A:C0:00:B5:B7:3F:08:BB:68
Certificate issuer:       /CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
Certificate serial:       7E77AE4785F69FAF7DEF96D3A4498B288CD999A2
Authority key identifier: 56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa
Signing time:             Thu 04 Apr 2024 01:02:05 +0000
ROA not before:           Thu 04 Apr 2024 00:57:05 +0000
ROA not after:            Thu 03 Apr 2025 01:02:05 +0000
asID:                     268842
IP address blocks:        2804:5b6c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl
                          rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:77:ae:47:85:f6:9f:af:7d:ef:96:d3:a4:49:8b:28:8c:d9:99:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
        Validity
            Not Before: Apr  4 00:57:05 2024 GMT
            Not After : Apr  3 01:02:05 2025 GMT
        Subject: CN=6507F5BB3F20BE6B4EE70B2AC000B5B73F08BB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:e0:76:47:bd:0b:ff:96:b5:b8:7e:42:fb:
                    1c:68:53:fb:e6:3b:50:ac:ff:49:d7:f7:7d:d3:87:
                    e6:f5:a0:1f:72:b1:7a:ea:52:38:c9:e8:58:76:0c:
                    97:d5:bd:d3:55:83:ae:40:21:76:dd:5d:f8:de:3a:
                    91:30:c8:3a:60:4a:1f:77:8c:54:db:1a:9c:32:8a:
                    26:a6:8c:08:55:0e:e8:44:bb:40:65:c1:4a:37:c1:
                    2f:9f:0b:1c:4e:b3:f9:39:f1:82:dc:dd:82:ad:0d:
                    5d:8d:c2:66:21:18:0f:8c:c5:55:70:2b:47:8e:29:
                    26:06:74:33:b6:d1:e5:8f:91:e7:7f:2d:76:f7:c0:
                    f0:72:9a:77:ec:fe:be:41:12:eb:d0:19:f9:51:54:
                    cd:77:77:2c:05:50:39:33:b9:7a:ec:c0:ad:07:dc:
                    8c:bf:37:c4:f4:56:9d:3d:bf:32:a8:b7:c9:6e:8e:
                    23:45:56:02:05:76:a8:df:87:47:84:2c:d3:5d:21:
                    c7:57:d7:2f:15:b5:e3:bc:81:35:3c:d7:34:ff:7b:
                    a7:45:7b:83:61:28:b9:84:8a:6f:7d:a6:a1:c2:3a:
                    9a:b9:f3:f9:40:d6:92:8a:ef:be:83:cd:57:49:b9:
                    3c:d8:68:ae:25:ae:8e:c7:6b:9d:11:51:55:ad:02:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:07:F5:BB:3F:20:BE:6B:4E:E7:0B:2A:C0:00:B5:B7:3F:08:BB:68
            X509v3 Authority Key Identifier:
                keyid:56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:e1:61:66:e8:c9:f0:03:73:80:86:ed:60:f8:6f:3c:55:ef:
         c0:05:5d:e1:7c:92:59:92:3b:4c:d7:f5:3c:2a:5b:fb:1c:dc:
         d3:04:3d:7a:16:ee:14:6c:89:69:82:a9:5c:0d:20:6d:c2:51:
         8e:25:85:54:e3:75:0b:0c:c8:a4:77:76:bc:01:8f:77:2c:ab:
         41:65:06:84:c1:ad:32:0b:2c:6f:80:41:79:d5:75:49:95:ea:
         00:6b:0e:b2:0b:ac:41:02:70:70:71:6e:7d:39:89:b5:ef:48:
         f2:32:6f:34:7e:7a:b2:9f:59:41:f3:88:27:72:42:b1:03:15:
         c4:d1:b0:ed:dc:7c:0f:f1:fb:80:2d:a1:a6:8c:19:5b:e1:dd:
         c4:45:35:c1:d5:48:c1:90:a1:02:4f:37:7b:63:be:e2:d2:a9:
         fa:ba:e4:96:bf:38:b7:b4:1d:53:98:f6:08:18:ae:c2:66:3d:
         ff:09:7e:70:2c:85:14:85:74:2e:76:8e:f1:27:c4:d5:38:5a:
         ac:56:b1:26:66:04:02:23:30:c7:7e:88:51:8b:df:29:1d:60:
         cc:f2:d8:74:e5:a9:73:05:a0:75:c9:b0:84:24:9d:6b:8d:8c:
         b9:ab:19:6d:fa:ba:8d:d0:d6:0f:45:4d:01:db:fe:a0:f9:23:
         c7:49:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org