Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa
File:                     323830343a383661383a3a2f33322d3332203d3e20323732363538.roa (raw, json)
Hash identifier:          bAveB8TM1yS8Yx3//DCk6ZRoFre5A2kF3JmACjbk5Ig=
Subject key identifier:   7E:88:8E:2C:E5:ED:C6:E4:C8:CB:B4:A3:91:E1:08:F5:83:D1:A9:6D
Certificate issuer:       /CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
Certificate serial:       638FCDB403B3A07ECAFD25F2FCABFEB7C9796AD2
Authority key identifier: B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa
Signing time:             Fri 05 Apr 2024 05:43:14 +0000
ROA not before:           Fri 05 Apr 2024 05:38:14 +0000
ROA not after:            Fri 04 Apr 2025 05:43:14 +0000
asID:                     272658
IP address blocks:        2804:86a8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl
                          rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8f:cd:b4:03:b3:a0:7e:ca:fd:25:f2:fc:ab:fe:b7:c9:79:6a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
        Validity
            Not Before: Apr  5 05:38:14 2024 GMT
            Not After : Apr  4 05:43:14 2025 GMT
        Subject: CN=7E888E2CE5EDC6E4C8CBB4A391E108F583D1A96D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:06:63:2b:32:11:9e:9b:9b:d5:7f:30:78:
                    88:76:2d:e6:ee:ef:3a:b7:c4:50:e8:56:32:10:bb:
                    96:2f:bb:b4:2a:65:68:b7:a5:4c:e1:a6:25:05:65:
                    c4:79:25:ea:58:40:23:3d:50:42:06:a0:6a:ad:77:
                    4b:58:f9:b0:6d:67:f0:e7:6f:5c:f6:d8:1f:76:26:
                    68:29:ce:9b:f4:68:53:79:e6:e0:6a:c6:5d:8c:76:
                    05:24:dd:8f:68:7e:d9:a6:b5:1f:d9:4c:66:d0:64:
                    d9:2a:c4:be:6a:7a:bb:84:52:7b:d8:84:da:8c:db:
                    b0:62:7a:f6:fb:22:77:0c:a7:db:73:2b:6e:12:59:
                    f7:fc:d1:3a:cb:84:37:17:b7:b3:2b:bd:6c:5d:8e:
                    c8:e7:6c:04:98:41:9f:83:67:6f:29:a3:06:d2:88:
                    f5:55:fa:45:89:76:d6:0e:7e:48:58:84:d4:f5:74:
                    f3:14:fb:5e:f9:19:08:aa:36:a1:ad:85:17:01:dd:
                    66:5d:f7:06:05:ec:0e:af:29:ba:3c:c7:1f:37:e9:
                    98:66:24:c3:11:91:71:9f:c6:09:0d:8f:5f:78:fb:
                    fd:cb:e9:5c:76:70:16:fa:2d:97:8c:37:99:49:8f:
                    73:24:b6:33:ba:f5:eb:ea:82:90:64:bb:87:25:ca:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:88:8E:2C:E5:ED:C6:E4:C8:CB:B4:A3:91:E1:08:F5:83:D1:A9:6D
            X509v3 Authority Key Identifier:
                keyid:B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:ba:b3:76:69:7a:59:d4:45:88:4e:02:2b:59:8b:cc:33:
         f9:28:38:e1:53:b1:95:c9:6b:3f:f3:bf:d5:49:4e:2b:18:69:
         dd:3f:d4:ff:de:24:78:33:3c:ce:bc:ed:96:09:f6:55:18:36:
         09:38:cc:ea:1b:b8:a1:c0:11:73:88:7b:26:9f:48:c2:5a:66:
         e4:48:1d:23:41:33:86:2b:ed:15:80:71:34:ed:3f:6a:cd:57:
         fc:75:9b:c9:cb:a4:4b:1a:86:8a:a2:5a:d1:3e:de:93:c1:9a:
         c6:ea:f6:63:8b:26:c5:aa:ba:ae:38:35:a2:12:73:f9:e0:4b:
         41:3f:3d:60:85:d9:1e:d8:0d:bf:0e:d5:b5:0b:ab:fd:04:8c:
         93:ae:10:7e:17:a2:4a:ac:b1:3b:b3:d7:54:d6:19:a0:43:d3:
         9b:a3:28:6f:30:b0:4e:52:11:0a:6c:8b:3c:6a:71:57:48:e9:
         be:2f:3a:71:ed:e5:90:a6:52:97:dc:9e:b7:e6:ca:a1:83:11:
         25:bb:06:5b:b3:5f:4e:fd:a8:3a:d5:37:e2:1f:3a:9c:d7:cb:
         f8:b8:bb:d3:b6:91:da:bc:c0:56:31:4e:56:cf:39:a1:57:5d:
         a8:88:df:f3:bd:85:25:4b:6f:0d:21:05:ed:6c:c2:d4:6d:85:
         b9:33:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:38 2024 by rpki-client on console-fra.rpki-client.org