Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/323830313a38303a336538303a3a2f34382d3438203d3e20323731363430.roa
File:                     323830313a38303a336538303a3a2f34382d3438203d3e20323731363430.roa (raw, json)
Hash identifier:          /KvxV8O8aQyR4tx+t3O2UoFHxPb5LYfYiNiypSRfAE0=
Subject key identifier:   3D:AE:05:2C:D6:4C:97:E4:91:E7:75:6A:41:C1:9E:D2:E3:64:84:7F
Certificate issuer:       /CN=AC174F1C160ECD0876FC5577CFE25B27E134FB13
Certificate serial:       354A294218382EF1B5D4C5DA6CDB8DB80E5F107F
Authority key identifier: AC:17:4F:1C:16:0E:CD:08:76:FC:55:77:CF:E2:5B:27:E1:34:FB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC174F1C160ECD0876FC5577CFE25B27E134FB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/323830313a38303a336538303a3a2f34382d3438203d3e20323731363430.roa
Signing time:             Mon 15 Apr 2024 17:35:01 +0000
ROA not before:           Mon 15 Apr 2024 17:30:01 +0000
ROA not after:            Mon 14 Apr 2025 17:35:01 +0000
asID:                     271640
IP address blocks:        2801:80:3e80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/AC174F1C160ECD0876FC5577CFE25B27E134FB13.crl
                          rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/AC174F1C160ECD0876FC5577CFE25B27E134FB13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC174F1C160ECD0876FC5577CFE25B27E134FB13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4a:29:42:18:38:2e:f1:b5:d4:c5:da:6c:db:8d:b8:0e:5f:10:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC174F1C160ECD0876FC5577CFE25B27E134FB13
        Validity
            Not Before: Apr 15 17:30:01 2024 GMT
            Not After : Apr 14 17:35:01 2025 GMT
        Subject: CN=3DAE052CD64C97E491E7756A41C19ED2E364847F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:e3:fa:ec:cd:cb:02:b5:ec:95:e1:a0:99:
                    1c:f1:81:3d:8a:88:1b:7c:d0:4e:ad:e4:24:e8:23:
                    01:61:b6:91:dc:12:43:a3:f5:ce:30:10:e1:4f:33:
                    1c:ac:f9:80:c5:aa:58:f4:a7:05:8c:14:54:ed:a0:
                    88:21:02:1a:9e:a1:48:4b:39:8f:bb:49:e9:64:00:
                    c6:7a:e1:93:ba:ab:9d:47:ae:31:85:92:50:10:ff:
                    a4:6a:a6:aa:ad:9c:05:c8:77:8a:89:7a:01:a6:c1:
                    00:b4:f4:78:79:cc:0c:96:97:20:4d:b7:55:63:ab:
                    fa:98:3c:82:f7:3a:5c:1e:d1:f6:4a:c2:b3:f5:35:
                    ad:fc:6b:6d:8c:2c:57:2e:24:bf:d0:db:65:69:6f:
                    42:e6:bb:d5:e7:6f:d3:84:b1:9b:df:f0:de:a2:30:
                    c9:52:ea:4d:f1:2c:d6:91:99:69:cd:3c:b9:58:ba:
                    1c:6d:15:6a:96:c2:31:f9:da:31:0e:f8:34:ab:aa:
                    39:39:bd:97:ee:19:12:dd:7d:00:75:17:89:87:46:
                    01:d5:b5:f2:f1:76:79:10:ff:cf:08:0b:f2:9c:d5:
                    16:48:6b:2f:e4:16:b8:ea:a8:e2:7a:eb:85:17:c1:
                    1d:3f:c4:53:14:18:21:2d:da:6c:4a:d8:6c:3e:cd:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AE:05:2C:D6:4C:97:E4:91:E7:75:6A:41:C1:9E:D2:E3:64:84:7F
            X509v3 Authority Key Identifier:
                keyid:AC:17:4F:1C:16:0E:CD:08:76:FC:55:77:CF:E2:5B:27:E1:34:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/AC174F1C160ECD0876FC5577CFE25B27E134FB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC174F1C160ECD0876FC5577CFE25B27E134FB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/323830313a38303a336538303a3a2f34382d3438203d3e20323731363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:6c:1d:ea:18:b3:31:5d:54:b7:2e:35:c9:42:21:c8:af:a2:
         e0:7e:9d:11:e5:3f:9a:24:6e:b9:77:ec:ee:06:1e:c6:4d:96:
         c7:f4:25:14:2f:82:63:bd:02:36:bc:cc:1c:c9:e0:3e:87:71:
         34:f9:03:f9:7f:c3:e7:73:b5:44:58:c9:9d:ab:95:a4:b9:6a:
         ba:72:fd:f5:a0:a8:4d:b6:70:65:9f:73:b3:4b:12:15:bc:76:
         88:ac:9b:84:fd:bd:fb:42:1b:bd:35:80:2d:34:b7:bc:a3:a5:
         13:d5:52:3e:12:b4:c1:4a:58:5d:1f:dc:38:b0:e1:c7:83:7c:
         26:9a:3e:fb:ec:9b:14:24:53:57:ec:fd:2e:87:60:59:80:3e:
         46:b1:20:ab:9b:59:98:09:a6:4f:99:6c:6c:ea:5b:2e:68:48:
         54:d9:1c:24:ee:4c:ba:d1:a4:30:91:35:7d:8b:0f:5d:dc:5e:
         df:a7:60:e1:e5:d2:19:40:5b:92:24:3b:6b:88:16:c9:c8:7a:
         29:23:03:18:8a:35:31:55:e0:81:55:02:4b:4d:88:0c:64:04:
         e5:77:df:aa:09:01:d2:8a:00:ad:49:32:60:96:4c:c0:1b:ab:
         f4:3b:1e:88:da:ed:0e:df:60:55:da:2b:6c:af:c7:23:12:75:
         94:07:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:46 2024 by rpki-client on console-ams.rpki-client.org