Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d3438203d3e20323637323830.roa
File:                     323830343a346230633a3a2f33322d3438203d3e20323637323830.roa (raw, json)
Hash identifier:          0XyiShPYQygRry6gfolQmZEDyA8VBuucu2IymU6niaQ=
Subject key identifier:   EB:1C:24:9C:BB:7D:60:CD:0A:35:37:96:7D:2A:EE:AF:C7:22:CF:9B
Certificate issuer:       /CN=B3657B8FB4EB30CE9527876A777BA3A7E3045837
Certificate serial:       77BFC435573A7BB6AE47DA6BAF47DAAAEEA440E8
Authority key identifier: B3:65:7B:8F:B4:EB:30:CE:95:27:87:6A:77:7B:A3:A7:E3:04:58:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d3438203d3e20323637323830.roa
Signing time:             Thu 02 May 2024 19:50:19 +0000
ROA not before:           Thu 02 May 2024 19:45:19 +0000
ROA not after:            Thu 01 May 2025 19:50:19 +0000
asID:                     267280
IP address blocks:        2804:4b0c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.crl
                          rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bf:c4:35:57:3a:7b:b6:ae:47:da:6b:af:47:da:aa:ee:a4:40:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3657B8FB4EB30CE9527876A777BA3A7E3045837
        Validity
            Not Before: May  2 19:45:19 2024 GMT
            Not After : May  1 19:50:19 2025 GMT
        Subject: CN=EB1C249CBB7D60CD0A3537967D2AEEAFC722CF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:33:dc:b6:6b:3f:f8:7a:b4:69:fa:f2:02:
                    39:e4:8b:51:46:0b:e4:50:23:12:e3:23:f7:95:b7:
                    8c:d9:a3:20:fd:45:ef:a0:45:0d:bb:d3:7a:db:55:
                    53:50:7f:ce:a2:2f:c4:c1:7b:cd:ae:d3:53:ae:a6:
                    07:bc:ff:ce:e5:89:f9:f5:1f:8f:f5:09:eb:ad:a0:
                    ed:89:a4:a2:c8:6b:53:c7:99:90:cd:fb:3c:ea:50:
                    ec:42:b6:e1:09:1c:dc:b9:ee:b2:b7:ae:b3:cf:1c:
                    2e:a3:8c:60:31:76:16:20:66:d1:de:e7:50:74:fa:
                    98:97:cf:28:09:c5:4b:88:fb:08:05:ad:c1:b9:19:
                    3d:67:ef:b6:76:a2:0e:d1:da:05:2f:db:30:e0:55:
                    aa:a7:c5:60:97:e6:04:d8:14:74:cf:c1:2b:0d:8c:
                    49:69:3e:02:1e:59:b1:bc:d6:76:13:c5:b5:8a:a6:
                    9b:2f:f3:74:84:a3:08:26:2e:72:43:1c:1f:7d:31:
                    d7:6d:7f:5e:5f:67:2e:3d:23:b6:f0:0d:2a:b4:b4:
                    66:9a:6c:59:af:37:2f:a1:94:a8:c5:23:a2:b8:c7:
                    b4:8f:2e:a6:4a:19:c9:81:11:23:fb:2a:f0:1e:6c:
                    00:32:4d:77:82:6b:78:14:03:ba:ca:f0:5b:f1:14:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1C:24:9C:BB:7D:60:CD:0A:35:37:96:7D:2A:EE:AF:C7:22:CF:9B
            X509v3 Authority Key Identifier:
                keyid:B3:65:7B:8F:B4:EB:30:CE:95:27:87:6A:77:7B:A3:A7:E3:04:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d3438203d3e20323637323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:be:32:68:a3:21:d2:09:99:53:21:ac:56:c1:82:ed:c1:d1:
         49:6c:dd:6b:29:9b:70:f3:05:c8:95:be:61:5b:c8:f4:80:3d:
         e0:7f:5c:bc:e1:00:85:24:ed:9a:6a:de:4f:53:84:1f:aa:e0:
         37:7e:13:e5:50:cd:1e:1d:ad:96:cb:ab:5e:3c:61:61:2f:50:
         15:1f:74:65:c1:c2:88:fa:63:c9:ca:8d:de:62:9e:cb:de:f5:
         1e:77:b0:52:54:f0:5f:04:07:43:bd:f6:23:08:de:19:61:41:
         58:6f:c2:22:e6:91:30:ce:91:fc:f8:66:06:09:d1:e2:6a:9b:
         6e:a7:eb:a4:a5:0f:22:35:e9:d7:b5:bd:ee:91:77:54:3a:d4:
         eb:b9:9b:a7:24:3d:0c:51:60:1c:5f:62:2a:56:3c:7f:c6:e5:
         97:d5:28:08:35:39:68:f0:a2:d0:71:bf:33:af:cb:e1:9e:03:
         4d:1a:17:44:3f:e3:0a:1c:90:31:37:02:81:c7:5b:83:a6:53:
         84:fc:c0:4d:ea:21:e9:fb:4e:c3:ac:3a:51:4e:9b:7b:7d:fc:
         d7:64:83:33:b1:dc:ef:fd:ad:9b:7b:e2:2e:5c:20:eb:fb:d6:
         b7:c7:d5:55:4f:9e:5c:fb:46:0b:b8:62:7a:7b:ad:4a:54:c2:
         fa:d5:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:30:58 2024 by rpki-client on console-ams.rpki-client.org