Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a3130303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a3130303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          5101CSMfWCkEiZV1HJmWRpcejepRxxKaOQ1iwQonNBE=
Subject key identifier:   3B:0C:7C:C5:24:FE:5C:56:80:92:B7:05:CD:A5:9D:0D:02:48:21:C1
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       370978CA9F8A30BBD33424B9424D7EC8D8801461
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a3130303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Thu 04 Apr 2024 04:00:41 +0000
ROA not before:           Thu 04 Apr 2024 03:55:41 +0000
ROA not after:            Thu 03 Apr 2025 04:00:41 +0000
asID:                     52858
IP address blocks:        2804:774:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:09:78:ca:9f:8a:30:bb:d3:34:24:b9:42:4d:7e:c8:d8:80:14:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Apr  4 03:55:41 2024 GMT
            Not After : Apr  3 04:00:41 2025 GMT
        Subject: CN=3B0C7CC524FE5C568092B705CDA59D0D024821C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:14:58:dc:b3:74:97:51:c1:c7:63:bd:35:
                    a3:fc:0f:ce:03:87:87:f2:58:c4:56:b4:c7:0c:62:
                    3a:34:e9:d4:ca:e3:f3:56:7a:ac:22:9f:ea:e8:87:
                    d9:52:74:d7:49:7a:fb:25:7c:56:2c:4b:58:b2:53:
                    aa:f9:1a:dc:3d:8d:a9:a1:f1:19:20:b4:4c:3d:5a:
                    fb:6e:2d:ea:0d:56:9a:b3:4c:88:5f:99:9e:02:f3:
                    59:b7:3d:e5:fe:70:31:b5:e1:b0:87:da:09:a7:1e:
                    0d:ea:ad:3a:d9:9f:dd:12:d8:db:64:a7:e5:b5:f2:
                    7a:81:02:35:fd:ba:43:6e:d5:bd:d4:d6:24:bd:9d:
                    17:d0:42:aa:90:7a:63:3d:b0:19:f6:77:20:3c:42:
                    3f:95:db:2f:a5:3c:05:e5:ca:be:94:88:3a:33:db:
                    c1:f9:2e:4f:2f:ad:c2:64:7b:cb:2f:a7:7b:e4:a9:
                    26:25:0a:56:47:09:cd:f3:78:fe:8d:55:d2:5e:9f:
                    1b:22:ab:9d:4f:16:86:e4:a7:b4:29:07:50:6a:6c:
                    f8:21:f7:c7:94:7f:31:b9:60:76:71:af:4e:26:34:
                    4d:7a:b2:03:79:ee:30:57:a3:ba:6f:9c:4c:1f:90:
                    6d:f9:84:27:6f:fc:d5:e1:69:79:a4:df:25:8d:00:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:7C:C5:24:FE:5C:56:80:92:B7:05:CD:A5:9D:0D:02:48:21:C1
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a3130303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:a9:39:82:49:8e:62:36:1d:4a:78:ec:9c:70:df:1c:4f:
         de:05:d5:1f:d2:34:4c:d2:ad:fe:8e:9f:99:79:6b:73:ac:2f:
         40:93:6c:53:4d:32:8f:0c:19:42:90:c9:2e:e4:39:ab:f8:38:
         0d:19:c0:c0:7f:5e:1d:88:25:78:da:dc:bc:2b:2b:69:d9:a6:
         13:f5:d5:78:6f:fb:6d:04:01:f4:e6:0a:13:59:39:95:bf:48:
         47:fe:60:1e:21:74:6c:20:22:0e:21:d8:49:10:1c:b2:86:99:
         0f:47:48:33:8b:d7:65:2e:cc:a8:4d:d8:9f:c8:e8:3d:3e:fe:
         2a:7a:76:a5:f1:82:2d:e2:a1:be:72:14:b8:9f:14:4e:eb:5d:
         ac:fd:38:3d:15:1b:1e:47:c6:9b:d2:14:40:15:69:bb:85:75:
         84:26:5c:c6:49:e0:7b:4f:ac:e3:c1:9f:f2:aa:bc:a9:3c:34:
         44:60:b9:1f:8e:22:a9:a3:e1:59:0f:49:c4:90:ac:de:cb:f8:
         d4:ee:f4:b7:d5:8f:a5:b5:32:b0:37:ef:12:c9:85:ae:53:bd:
         95:78:1e:9a:f8:47:d1:7b:11:fd:64:3f:b3:e3:ba:9a:e5:ab:
         8b:88:63:0f:2a:e8:24:b6:1a:e6:d0:da:6e:9b:10:79:b1:6f:
         59:fd:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:07 2024 by rpki-client on console-fra.rpki-client.org