Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/323830343a316462633a3a2f33322d3438203d3e20323634333930.roa
File:                     323830343a316462633a3a2f33322d3438203d3e20323634333930.roa (raw, json)
Hash identifier:          19hcwpu2sQ1yODUPYEBvwUYIJ+d42ON6EAUR6yULv24=
Subject key identifier:   70:09:40:B7:56:F8:61:42:7F:01:22:15:48:87:1C:7A:96:BD:0E:3C
Certificate issuer:       /CN=7DD9337D328A8B57E99FCF1A8378EC259B235013
Certificate serial:       689BEA9249EC4CD08FDA75CB2644C49F66A17B03
Authority key identifier: 7D:D9:33:7D:32:8A:8B:57:E9:9F:CF:1A:83:78:EC:25:9B:23:50:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/323830343a316462633a3a2f33322d3438203d3e20323634333930.roa
Signing time:             Thu 04 Apr 2024 20:29:27 +0000
ROA not before:           Thu 04 Apr 2024 20:24:27 +0000
ROA not after:            Thu 03 Apr 2025 20:29:27 +0000
asID:                     264390
IP address blocks:        2804:1dbc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.crl
                          rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9b:ea:92:49:ec:4c:d0:8f:da:75:cb:26:44:c4:9f:66:a1:7b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DD9337D328A8B57E99FCF1A8378EC259B235013
        Validity
            Not Before: Apr  4 20:24:27 2024 GMT
            Not After : Apr  3 20:29:27 2025 GMT
        Subject: CN=700940B756F861427F01221548871C7A96BD0E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:38:e8:da:95:ad:8d:32:9a:5f:df:c1:7c:
                    65:8b:52:c2:24:5a:1a:c7:1e:2d:2f:32:ef:c5:15:
                    32:82:b8:98:5a:f8:63:b2:6c:42:14:01:fb:2b:c6:
                    6c:2b:75:e4:b4:0c:84:00:27:7a:e8:3d:19:48:94:
                    03:8a:8f:58:38:66:7a:ff:14:ff:4f:b2:8f:84:f4:
                    a5:72:c2:bd:ad:19:66:20:a3:70:d3:87:28:ae:3e:
                    3b:2d:9a:4d:1f:8e:6b:4e:49:5e:68:d0:ab:53:bf:
                    37:e8:b8:dc:37:e0:f1:93:d9:4a:ed:84:31:0a:e4:
                    b8:b3:5f:36:3f:0c:65:6a:d8:70:fc:07:22:7a:be:
                    4f:bd:0f:85:7b:9b:9c:3b:f9:7c:f0:17:89:f8:ce:
                    6e:ef:b5:aa:ae:9e:3c:71:9b:dc:b9:82:0b:44:2b:
                    06:4e:f4:99:46:59:db:82:6c:79:29:7b:34:d0:89:
                    96:93:1a:b7:17:7c:b5:6a:d3:19:90:1a:af:f9:52:
                    77:35:8d:9e:03:12:4c:d9:36:bc:21:d4:f6:10:c5:
                    a6:f2:27:da:1b:cb:33:49:1f:1d:8c:20:78:d5:38:
                    2e:aa:bb:b5:0c:d4:f0:fa:9d:39:c4:36:f6:05:70:
                    0f:a3:05:3f:0f:19:9e:91:90:15:3a:94:10:6a:cd:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:40:B7:56:F8:61:42:7F:01:22:15:48:87:1C:7A:96:BD:0E:3C
            X509v3 Authority Key Identifier:
                keyid:7D:D9:33:7D:32:8A:8B:57:E9:9F:CF:1A:83:78:EC:25:9B:23:50:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/323830343a316462633a3a2f33322d3438203d3e20323634333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:aa:98:fd:c8:4e:18:e7:f6:7a:48:50:15:a7:c0:65:60:f5:
         ec:14:a2:ab:15:5d:e2:82:ff:aa:51:86:a4:6b:10:95:b8:04:
         aa:eb:c1:e2:ac:d7:45:d5:bb:1d:78:94:c0:cd:c0:88:af:bd:
         71:b6:70:b2:a1:32:9b:90:45:29:b5:a3:c4:ba:4f:9d:b1:88:
         14:64:a3:a5:3d:b5:62:87:c4:37:e1:78:41:67:7b:b3:64:9e:
         fa:3c:ad:19:c7:a5:b0:f1:4b:1f:17:d9:e7:55:60:94:b9:68:
         38:f0:d7:83:57:3a:0b:77:f2:ea:f2:f7:85:96:09:92:7d:6b:
         3a:f1:76:9d:b6:eb:31:29:07:f8:31:74:27:57:e5:35:d1:77:
         49:65:a5:1d:21:78:6e:6e:13:5b:e2:1d:38:d7:03:02:3d:1e:
         de:41:6c:3e:50:29:4b:8e:1b:92:e9:1a:15:44:ba:5f:55:07:
         50:61:ba:53:de:dc:23:51:99:53:42:6d:af:d6:d9:86:7f:f5:
         5d:8a:1b:e7:d5:f9:bd:2b:c3:84:30:71:4f:f2:11:26:b1:a8:
         36:77:46:4d:ff:5a:d5:60:be:26:a8:a2:8f:c8:2d:08:93:d4:
         3b:f8:56:e5:66:b7:09:98:c9:a8:f8:78:db:6f:1b:48:52:d0:
         9b:9d:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:57 2024 by rpki-client on console-ams.rpki-client.org