Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          gpylTVFYZBsQ4gUlgMn4qCSsAwsSQHo8OgfE2Hq+82s=
Subject key identifier:   07:AD:A7:6E:68:10:0C:52:F7:D6:03:01:2C:0F:97:FE:13:1F:A0:BB
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       5B936817AD4074CC8B5D83546565E4D5016DDA07
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:05 +0000
ROA not before:           Thu 04 Apr 2024 17:34:05 +0000
ROA not after:            Thu 03 Apr 2025 17:39:05 +0000
asID:                     53047
IP address blocks:        2804:6f0:c000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:93:68:17:ad:40:74:cc:8b:5d:83:54:65:65:e4:d5:01:6d:da:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:05 2024 GMT
            Not After : Apr  3 17:39:05 2025 GMT
        Subject: CN=07ADA76E68100C52F7D603012C0F97FE131FA0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:0a:f5:06:42:40:66:af:c0:1e:9f:22:ef:
                    9f:fd:30:94:cf:ed:b4:42:fd:f1:e7:3f:c8:c3:fb:
                    f2:ee:b6:c3:86:25:98:2b:c3:88:04:58:c2:f6:19:
                    07:64:a3:2d:37:b6:f5:59:0b:bb:f3:76:8e:9d:f8:
                    99:95:c2:ac:bd:b7:69:e6:7a:63:12:aa:86:e8:5a:
                    42:ad:17:40:1e:10:72:d3:33:75:bc:f8:30:33:23:
                    c4:3b:8c:28:46:f1:2d:df:51:8b:65:fd:ea:f0:1f:
                    f6:2a:81:d9:07:8e:26:ac:3e:66:56:0e:e9:70:15:
                    38:17:7f:ea:9b:45:a1:16:6e:39:e2:ca:42:86:8c:
                    fb:b9:7b:0a:0c:b6:32:bf:14:d4:fd:1a:9f:7e:cd:
                    f7:d2:12:d0:e1:9b:33:d5:a1:9b:65:cb:87:cd:4c:
                    84:1f:18:4f:41:36:52:0a:d9:cf:22:48:eb:30:65:
                    b6:f0:52:9a:97:82:94:4a:4e:56:73:b0:ab:24:aa:
                    74:36:a3:87:8a:02:e0:9b:cc:93:7d:f2:18:b8:95:
                    16:00:45:c3:a8:45:c9:56:73:50:f9:76:a1:56:16:
                    5d:0a:af:e8:bb:dd:c7:36:34:5a:0b:a7:ee:59:73:
                    39:a4:74:d3:95:5e:3f:1a:94:62:7a:f7:24:17:4c:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AD:A7:6E:68:10:0C:52:F7:D6:03:01:2C:0F:97:FE:13:1F:A0:BB
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:0a:00:65:61:89:15:4f:57:8e:53:ab:2f:b6:fa:dc:1a:
         e1:bf:72:00:5b:e3:c8:c8:2f:cc:8a:78:0d:21:0b:09:a7:92:
         95:d0:35:2a:96:8a:1c:e3:c5:8f:0e:5a:01:51:63:d5:ee:20:
         6b:4e:cc:c2:3d:f0:65:9d:1e:0a:ea:b9:1f:ba:e4:32:10:a8:
         38:0d:43:50:e2:e3:3d:a5:d3:32:f2:3a:02:75:f7:4f:d3:ff:
         32:b4:c3:f9:69:ad:31:74:6c:21:5c:34:bb:99:c8:de:1e:6f:
         0b:c5:96:ce:0d:f5:55:55:90:93:b7:67:c1:5d:7d:0c:32:61:
         2b:69:c6:1a:9b:d2:70:c7:d7:23:1d:fa:e6:20:ab:5b:e3:97:
         7f:85:5c:e4:1c:91:1a:dc:39:2a:d7:8f:79:2f:44:49:f0:2e:
         ea:34:a5:7d:b7:e8:5d:27:ef:92:2a:72:23:2d:07:cb:9e:72:
         4d:17:e0:47:de:7e:cd:2b:39:c2:e1:9f:60:87:bb:51:25:84:
         a6:7f:93:91:c8:fb:ad:ca:c3:89:95:be:31:7a:86:3a:e0:41:
         19:03:d5:68:42:5b:23:b4:57:29:c3:d3:9a:f0:8f:b6:32:eb:
         a9:15:1e:da:6e:02:13:07:7b:1a:42:b5:0f:56:d5:d5:e0:6f:
         b7:b7:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org