Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/323830343a386261633a3a2f33322d313238203d3e20323733373438.roa
File:                     323830343a386261633a3a2f33322d313238203d3e20323733373438.roa (raw, json)
Hash identifier:          1YGHJmooMu7XqwlMYE/nL0ns5JVo+CH+kDKEmIub9PM=
Subject key identifier:   FF:70:72:EF:B0:F2:D8:84:B0:C4:55:83:FD:B9:CD:F2:34:45:58:10
Certificate issuer:       /CN=DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6
Certificate serial:       72D32F2769B6DDA738D1BF520DECEB30A656F935
Authority key identifier: DD:E7:99:9F:E8:4D:BC:66:E6:3D:2E:F7:7A:A9:38:96:5C:8F:F5:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/323830343a386261633a3a2f33322d313238203d3e20323733373438.roa
Signing time:             Wed 03 Apr 2024 21:34:57 +0000
ROA not before:           Wed 03 Apr 2024 21:29:57 +0000
ROA not after:            Wed 02 Apr 2025 21:34:57 +0000
asID:                     273748
IP address blocks:        2804:8bac::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.crl
                          rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d3:2f:27:69:b6:dd:a7:38:d1:bf:52:0d:ec:eb:30:a6:56:f9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6
        Validity
            Not Before: Apr  3 21:29:57 2024 GMT
            Not After : Apr  2 21:34:57 2025 GMT
        Subject: CN=FF7072EFB0F2D884B0C45583FDB9CDF234455810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:92:b2:9c:04:1b:1e:24:26:60:a5:5a:ca:
                    23:b6:b2:c1:9b:63:f6:3b:aa:92:da:15:80:ac:e4:
                    fc:ea:2e:07:07:d4:9f:de:ba:1b:fd:f2:61:4a:4d:
                    8f:86:1a:9c:16:49:07:56:36:07:92:15:9c:27:9d:
                    f7:9f:d9:ff:3f:7d:9a:1e:02:0b:f0:2a:56:6f:d1:
                    de:8e:db:82:12:b4:a0:5d:fb:1d:10:5a:4e:02:5f:
                    74:a6:d6:d4:8c:5e:e9:a2:5e:7d:27:37:ca:c3:08:
                    09:6b:0c:ce:b5:af:14:7c:fa:9d:d4:23:20:45:4a:
                    8e:70:74:65:9f:3c:2f:82:63:54:e0:2f:51:ce:49:
                    3a:28:39:f0:4a:2d:8e:68:12:e1:6e:1a:5d:b5:4e:
                    5a:1d:98:86:a6:73:17:26:28:4a:63:e4:98:63:79:
                    34:d7:91:1f:3c:3e:f0:33:f7:83:56:56:fd:68:fc:
                    dc:fa:5a:d0:ee:c0:05:7f:97:78:7d:31:43:f3:ca:
                    1e:e8:d4:be:49:ad:a7:c7:d1:8e:1d:3b:59:72:4f:
                    0d:2f:b1:c1:d7:67:8f:65:28:71:58:5c:e2:30:94:
                    a2:d6:82:74:06:8c:5b:3d:fa:08:62:b8:c0:f8:00:
                    0d:fd:db:07:39:d7:e2:22:8c:f9:6c:83:fb:c8:2e:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:72:EF:B0:F2:D8:84:B0:C4:55:83:FD:B9:CD:F2:34:45:58:10
            X509v3 Authority Key Identifier:
                keyid:DD:E7:99:9F:E8:4D:BC:66:E6:3D:2E:F7:7A:A9:38:96:5C:8F:F5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/323830343a386261633a3a2f33322d313238203d3e20323733373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:34:ba:d5:96:ed:97:9d:72:ac:d8:c8:fc:f0:12:c0:aa:c6:
         a7:64:60:32:fd:5a:58:bb:ab:ed:e8:df:1c:a0:91:38:7b:9e:
         27:d3:f4:10:81:a3:f8:f9:40:03:67:f5:6d:9e:1b:b1:32:c3:
         9a:97:51:7b:98:ad:3b:37:6c:78:11:32:2d:82:27:64:02:22:
         4c:c7:b7:6b:9c:aa:e6:0f:7c:23:84:15:26:50:15:c5:db:0d:
         4e:ea:a3:5b:f1:be:4a:df:69:63:76:c2:49:2f:64:90:b8:57:
         b1:00:ba:30:ac:57:fb:21:d0:bc:4b:16:20:f6:03:7b:a2:5c:
         a3:5b:69:6f:a7:1f:97:c8:fc:9b:60:9b:13:e9:73:42:50:21:
         b7:79:61:df:3a:14:42:8d:4e:d9:f9:a6:dc:6b:1f:67:95:b4:
         bc:7e:88:b0:16:40:39:58:67:55:2b:51:c2:c1:dd:c4:c6:e8:
         05:55:81:e1:b3:0a:14:d7:c9:cd:90:0f:1c:24:31:2a:bb:93:
         f2:d6:a7:33:af:39:b2:3d:f2:a6:b2:29:e6:c7:f0:76:a4:62:
         c9:17:23:f8:bc:e1:e6:b2:a8:99:ad:ec:06:96:1b:5d:eb:01:
         e6:e1:45:12:3c:09:f7:62:a3:65:e1:26:3a:ba:6d:89:d7:ac:
         66:56:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org