Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33322d3332203d3e20323733343637.roa
File:                     323830343a386631383a3a2f33322d3332203d3e20323733343637.roa (raw, json)
Hash identifier:          TQCbKT7EC21uCxLLqnwZsMx6fI3Flu7iArS7MFTWkBY=
Subject key identifier:   BF:DA:7A:89:0F:59:63:FE:A2:AD:5D:7E:4C:8A:D9:E6:DB:82:22:D4
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       2FF167CF0A9D3B1B388E7AB0C2A2AB32F7CD6ACC
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33322d3332203d3e20323733343637.roa
Signing time:             Fri 24 May 2024 13:27:23 +0000
ROA not before:           Fri 24 May 2024 13:22:23 +0000
ROA not after:            Fri 23 May 2025 13:27:23 +0000
asID:                     273467
IP address blocks:        2804:8f18::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f1:67:cf:0a:9d:3b:1b:38:8e:7a:b0:c2:a2:ab:32:f7:cd:6a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: May 24 13:22:23 2024 GMT
            Not After : May 23 13:27:23 2025 GMT
        Subject: CN=BFDA7A890F5963FEA2AD5D7E4C8AD9E6DB8222D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:5b:df:16:e8:bb:9e:0a:f1:39:76:9d:1f:
                    12:ca:ec:39:d6:c0:6c:75:17:fb:22:4b:1c:48:d7:
                    0e:13:a5:7d:b8:b6:97:36:13:30:c8:9b:ad:38:c3:
                    b6:14:20:9e:f4:d3:d6:6c:86:7e:ad:62:d1:13:5e:
                    7c:ca:5a:9c:e1:6a:81:7c:e9:24:a2:0f:84:e9:c1:
                    cf:45:be:8c:10:57:53:e1:51:fe:e5:b3:54:0e:51:
                    28:48:94:97:b2:a4:f2:b8:9b:3d:e2:96:18:5d:fb:
                    c8:d5:ce:ad:b3:ae:29:07:1a:57:3c:e7:e9:96:d4:
                    77:5a:c4:83:73:fc:ce:fa:4c:96:cf:a6:6b:7e:74:
                    43:94:13:c0:86:96:c4:f5:ce:31:8d:0b:8d:d6:82:
                    a5:0c:ba:39:2d:c5:88:34:55:5b:d4:fa:70:6d:d5:
                    9b:ca:1c:b1:e9:64:14:69:04:cb:21:d2:0a:86:49:
                    26:dd:f8:4e:ea:40:51:5c:9c:13:29:df:49:79:b7:
                    58:b7:bf:9a:1a:0d:79:03:3e:05:8c:6c:9f:94:a4:
                    fd:a9:8b:f4:1f:25:e8:42:9a:cb:13:e4:1a:ca:cf:
                    9b:91:25:03:6b:32:95:70:4f:76:b1:2d:b5:5f:45:
                    da:1a:18:be:61:f7:4b:8c:bf:d9:f7:00:5b:5c:b2:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DA:7A:89:0F:59:63:FE:A2:AD:5D:7E:4C:8A:D9:E6:DB:82:22:D4
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33322d3332203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:69:a0:0b:d9:d2:55:8d:80:23:ea:8e:54:5d:47:50:b1:04:
         c8:c5:d0:c3:aa:36:11:57:5a:2c:8a:d7:66:61:af:d6:1a:d8:
         c7:2f:78:49:2a:9f:c7:47:17:6f:f7:d3:c8:ff:1a:be:0e:46:
         53:11:d8:87:0b:e4:ba:74:f5:ea:06:7c:6b:e5:d5:58:fa:21:
         02:6d:11:f5:01:c8:6c:9f:ab:f5:10:31:3e:7c:fa:e1:d2:68:
         ec:d2:f7:5e:0d:d1:4c:cc:93:e0:f1:e0:59:a9:71:63:45:54:
         79:33:5c:65:5f:ac:3b:bf:89:4b:a9:76:84:ae:61:71:00:19:
         cd:8e:e8:54:1e:32:8d:51:72:a3:46:d8:a7:11:ea:0d:50:fb:
         45:ea:76:b8:67:47:20:1b:9e:0e:33:09:aa:e8:0b:17:8b:83:
         3e:16:c9:6d:cf:fc:51:fe:86:7d:87:8b:11:4c:4b:8f:87:a9:
         57:bd:a3:7c:83:b9:83:f7:a9:1c:8c:81:46:ed:dc:1a:3a:55:
         7a:13:50:b7:5b:13:07:8f:7f:f4:e2:ac:25:8e:8a:47:89:92:
         6f:89:98:36:ed:a2:30:02:46:94:08:3c:14:7c:8b:ec:30:09:
         15:76:a8:53:61:e5:e8:43:93:26:e8:0d:07:2c:25:a9:c2:42:
         c1:42:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 22:13:00 2024 by rpki-client on console-ams.rpki-client.org