Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a383030303a3a2f33332d3333203d3e20323638313439.roa
File:                     323830343a353863383a383030303a3a2f33332d3333203d3e20323638313439.roa (raw, json)
Hash identifier:          R9pWHimnQJu3Sv6c3a9aQ74kzmH/lsgrmcKrrW4MxXo=
Subject key identifier:   D7:9C:E1:D1:86:E3:40:82:F6:88:44:5F:56:9F:E9:CF:D3:6F:F5:D6
Certificate issuer:       /CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
Certificate serial:       7EDCE645C00324EBDE029E3E8F8BD4BE87D8028D
Authority key identifier: 62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a383030303a3a2f33332d3333203d3e20323638313439.roa
Signing time:             Wed 01 May 2024 00:12:40 +0000
ROA not before:           Wed 01 May 2024 00:07:40 +0000
ROA not after:            Wed 30 Apr 2025 00:12:40 +0000
asID:                     268149
IP address blocks:        2804:58c8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dc:e6:45:c0:03:24:eb:de:02:9e:3e:8f:8b:d4:be:87:d8:02:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
        Validity
            Not Before: May  1 00:07:40 2024 GMT
            Not After : Apr 30 00:12:40 2025 GMT
        Subject: CN=D79CE1D186E34082F688445F569FE9CFD36FF5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:47:27:c9:2f:20:f8:64:aa:cc:24:ed:fa:
                    bf:b6:d4:46:84:54:97:65:ff:06:fa:1d:2a:94:08:
                    93:b7:f0:04:69:c7:2c:31:c5:72:22:46:14:9e:ab:
                    0d:8a:a0:76:fe:2f:65:eb:57:c5:66:2a:d3:0b:a6:
                    af:3b:67:25:86:f2:10:90:99:da:5a:f0:c9:af:02:
                    d9:d9:b4:04:cc:87:0d:9b:f6:58:ad:d3:a2:70:13:
                    75:9e:97:d0:58:ed:0d:f0:a2:f1:ad:e4:a2:ef:2c:
                    07:56:83:cf:4e:91:10:67:60:b3:b4:ca:99:3f:f3:
                    df:a1:85:8e:eb:b3:1f:52:79:b9:2e:45:87:c1:78:
                    38:2a:92:81:0d:7b:1d:c1:f2:b0:42:8d:f2:00:92:
                    71:8a:4e:a0:6f:b4:9c:ee:b1:64:44:1f:55:e2:92:
                    b6:9a:ef:a2:cf:4b:34:6f:e7:e5:a7:c8:c3:3a:0f:
                    e2:5e:1c:c6:12:be:c0:fb:ae:45:2e:6b:ff:f9:31:
                    1d:8f:a4:c7:7d:ab:a3:63:2c:05:cd:b0:46:45:9e:
                    2a:70:82:0f:d6:36:b4:d8:e8:2c:65:a0:c9:55:01:
                    3f:93:f3:6b:63:f6:c0:d7:2e:76:eb:e7:37:32:d9:
                    fc:0d:e8:be:d2:c4:f3:11:11:da:a4:3b:fd:88:f3:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9C:E1:D1:86:E3:40:82:F6:88:44:5F:56:9F:E9:CF:D3:6F:F5:D6
            X509v3 Authority Key Identifier:
                keyid:62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a383030303a3a2f33332d3333203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58c8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         40:c9:91:7a:f9:25:0a:e0:b1:55:2b:8d:15:dd:c2:19:a4:30:
         bf:a2:31:96:1c:c7:b0:5d:8d:54:45:e2:dc:0a:fa:21:ff:89:
         96:90:61:2a:01:b7:9d:af:61:10:87:84:19:3d:94:a3:86:44:
         b7:0e:1a:14:99:e3:0f:93:43:41:fe:38:f7:79:f9:1f:ac:6a:
         63:a7:58:99:71:e2:e5:02:b2:95:de:0e:73:80:2f:9d:62:ee:
         aa:e7:e4:4e:02:50:e0:a6:cf:5e:04:7f:71:2c:44:d4:d3:bb:
         47:d3:f7:96:b6:17:65:e2:63:1c:16:50:96:59:aa:e7:5d:c1:
         9d:8a:82:2f:a0:98:4d:41:8c:f3:94:36:a3:35:fb:83:2a:52:
         79:7e:e6:71:8b:9b:a3:35:71:ad:90:ed:eb:1f:f1:9f:53:46:
         4d:43:fa:66:ab:2c:b7:b5:a8:65:24:82:ce:d1:7a:46:c2:5b:
         8f:70:25:5e:2a:42:ad:0b:41:77:82:51:83:c9:23:01:2c:1b:
         7a:76:2a:8e:9a:6d:c2:92:86:be:62:f8:de:e2:6c:ee:4b:7c:
         ec:82:74:0d:14:5f:4b:ac:e0:dc:5a:93:66:5a:be:43:94:fd:
         5b:59:6b:19:e6:8a:59:7c:93:8a:d6:b2:e4:f1:d9:70:90:64:
         2e:3f:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:55 2024 by rpki-client on console-fra.rpki-client.org