Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa
File:                     323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa (raw, json)
Hash identifier:          1jZLHeI3moYUonEOUTeh8owqdbmZA9cZxOOkiq6Cwo4=
Subject key identifier:   74:5B:B8:44:33:E4:42:D2:F1:49:09:D2:B1:54:45:6C:CD:4C:A7:B4
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       1B0760817FD959AE68CBE6A181FAEEEC6C5A399D
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa
Signing time:             Tue 04 Jun 2024 14:34:32 +0000
ROA not before:           Tue 04 Jun 2024 14:29:32 +0000
ROA not after:            Tue 03 Jun 2025 14:34:32 +0000
asID:                     61600
IP address blocks:        2801:80:37a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 06:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:07:60:81:7f:d9:59:ae:68:cb:e6:a1:81:fa:ee:ec:6c:5a:39:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Jun  4 14:29:32 2024 GMT
            Not After : Jun  3 14:34:32 2025 GMT
        Subject: CN=745BB84433E442D2F14909D2B154456CCD4CA7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:7c:b3:3a:0c:df:b8:4d:d8:77:75:35:7c:
                    2a:34:23:c5:77:9e:bc:93:ab:af:80:8b:7e:38:05:
                    25:47:26:a0:8e:8e:dd:d3:eb:b9:1c:05:5d:25:21:
                    e4:9d:ec:4f:f5:b9:f2:0c:7c:ee:f9:ac:04:8c:1b:
                    47:f7:ad:ef:65:ab:eb:72:ef:9c:64:0e:11:93:ab:
                    c1:dc:9d:bb:2b:5b:41:b2:ea:8e:68:6e:fb:e1:a1:
                    53:ee:2e:2c:ee:02:6e:f0:79:6e:c0:fa:16:20:dd:
                    33:ae:54:70:53:fd:95:f3:7a:8f:c7:12:bc:c8:9d:
                    bb:8c:88:74:25:0c:53:93:51:81:70:2f:25:85:fc:
                    63:e5:e0:88:cb:28:da:a0:81:0f:11:72:ad:fc:f6:
                    9f:4e:57:fa:38:a9:ab:f0:30:08:2b:6a:ed:25:1b:
                    ea:95:39:05:7c:1e:03:be:43:ae:ac:05:a9:cf:29:
                    8d:ca:57:c1:0e:6d:95:61:4e:81:7e:dd:22:20:37:
                    27:77:1c:5d:23:10:7e:17:a4:6d:f8:e8:5a:78:e0:
                    d1:e1:a6:25:8f:d3:91:20:7f:4d:e4:7b:d9:ca:03:
                    00:09:57:a5:4c:dd:4f:b9:6c:6e:28:81:d0:6b:7e:
                    ef:d4:68:5a:e3:06:3b:01:04:a4:ae:42:1b:b2:35:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5B:B8:44:33:E4:42:D2:F1:49:09:D2:B1:54:45:6C:CD:4C:A7:B4
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:37a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:a1:80:cc:e7:27:48:fd:5f:aa:31:9d:75:65:2d:32:52:
         06:40:a7:46:2b:f0:3d:01:47:54:79:6b:5e:e3:1b:0f:22:24:
         7e:f8:18:82:f4:96:13:cf:b5:e9:98:3e:73:1b:cf:f0:d7:35:
         36:c1:3a:9a:02:3c:1d:0c:31:fe:b9:41:f1:fe:44:29:31:d4:
         96:28:33:c5:50:db:d9:f7:1e:33:c3:a9:c7:50:a8:f6:b3:ae:
         b9:82:39:ae:84:06:10:9d:5d:9b:74:08:a7:79:a5:9c:13:42:
         0b:71:91:55:b5:c3:4b:60:d2:9e:90:35:a3:99:23:61:b5:87:
         84:d9:3d:8d:39:d3:7e:96:27:77:09:80:ef:95:50:e2:56:d8:
         6a:a2:d8:22:2c:ef:de:14:66:34:80:cb:8b:6a:ca:1a:4a:f3:
         36:8a:18:09:32:10:72:d1:a8:de:17:84:33:61:15:81:75:f0:
         79:cd:ea:37:93:51:8b:9a:a8:99:ac:eb:ad:f9:f4:69:a3:d4:
         50:dd:c7:cc:38:70:28:cb:fb:69:3c:26:a1:f1:a1:0c:86:80:
         61:95:e8:e6:d5:4e:43:f0:66:01:f6:65:2d:03:58:c1:bc:c2:
         a3:f4:f7:f8:52:ca:9a:33:e9:cb:52:4a:8f:ac:63:4b:02:33:
         34:ff:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:01 2024 by rpki-client on console-fra.rpki-client.org