Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/323830343a316161383a3a2f33322d3332203d3e203631383734.roa
File:                     323830343a316161383a3a2f33322d3332203d3e203631383734.roa (raw, json)
Hash identifier:          vm4fzfJ+I3CpnjRHP0jAwWsK7GiOPjvmlbikB6e/NVI=
Subject key identifier:   37:FB:01:12:6F:35:F9:8A:22:D8:68:38:22:E6:52:35:89:73:88:90
Certificate issuer:       /CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
Certificate serial:       0CB50064B3F0B93548762E6567DA5FB763C303B0
Authority key identifier: 9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/323830343a316161383a3a2f33322d3332203d3e203631383734.roa
Signing time:             Thu 04 Apr 2024 16:16:48 +0000
ROA not before:           Thu 04 Apr 2024 16:11:48 +0000
ROA not after:            Thu 03 Apr 2025 16:16:48 +0000
asID:                     61874
IP address blocks:        2804:1aa8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.crl
                          rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b5:00:64:b3:f0:b9:35:48:76:2e:65:67:da:5f:b7:63:c3:03:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
        Validity
            Not Before: Apr  4 16:11:48 2024 GMT
            Not After : Apr  3 16:16:48 2025 GMT
        Subject: CN=37FB01126F35F98A22D8683822E6523589738890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:ea:4f:00:e8:7b:3e:82:4c:e0:8e:5a:2e:
                    e6:31:ef:bc:37:d3:0e:ac:2d:3a:0e:4c:d0:7b:7c:
                    a0:cf:e7:83:88:4d:27:0d:71:98:f5:3b:1c:95:e8:
                    7e:24:2a:43:90:60:d7:bb:3a:0d:f1:77:af:b8:80:
                    3c:23:04:1f:f1:5a:97:6f:be:27:c5:d1:42:ec:81:
                    77:68:45:0e:ab:5a:45:1d:10:3a:0e:36:1b:02:8a:
                    c4:8e:5c:d3:99:13:bd:d1:30:a1:e1:bc:34:79:db:
                    85:cc:ee:cd:03:c8:e2:2e:e0:4a:b3:47:5d:0d:ae:
                    60:39:86:ab:ec:67:6c:31:75:ea:87:43:84:38:db:
                    07:78:fb:df:54:12:21:2a:f4:db:4c:aa:11:aa:a8:
                    f4:4d:c7:45:25:62:15:c3:09:41:42:0c:e3:4f:52:
                    4a:ed:0b:76:71:f9:e0:68:85:37:ea:f8:f5:13:ad:
                    7c:f2:be:43:6a:21:af:d3:77:53:dc:ad:05:64:22:
                    09:dd:3a:d2:80:3c:98:c8:35:24:77:42:ef:fc:79:
                    20:47:71:04:91:57:97:06:49:1a:d4:1b:0d:6a:eb:
                    1e:36:43:eb:e4:b5:e1:52:72:40:89:c8:9b:a4:bf:
                    01:07:43:94:6a:83:2d:88:7c:4a:14:84:b8:86:26:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FB:01:12:6F:35:F9:8A:22:D8:68:38:22:E6:52:35:89:73:88:90
            X509v3 Authority Key Identifier:
                keyid:9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/323830343a316161383a3a2f33322d3332203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1aa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:2c:d0:e8:d7:96:aa:f6:48:8b:56:bc:97:9b:6a:0d:88:c7:
         f4:e8:04:d2:2e:db:45:db:12:44:97:1a:ff:6f:cc:1d:e0:40:
         a4:d6:03:25:08:ff:75:ed:eb:c5:00:b1:5b:a5:dd:07:11:70:
         dc:4c:34:92:33:84:ed:a9:05:6f:a6:d1:0b:ca:d2:af:52:6e:
         24:44:56:ae:21:16:b3:38:b4:b8:2a:7f:d3:ae:3b:f2:e4:63:
         92:8d:ca:ed:79:73:60:d8:99:ec:c6:bd:cd:ec:21:f9:c7:a1:
         b5:cc:e3:3b:4e:d6:0b:aa:aa:20:28:95:d2:6c:ee:78:5a:f3:
         bd:65:88:d6:d4:71:7c:af:d9:e2:77:7d:f5:aa:4e:e8:f5:12:
         9a:d4:15:66:bc:f0:05:b1:ef:03:9f:21:c3:04:77:6c:62:e7:
         90:e8:c6:9c:b8:27:d2:8a:75:cd:fe:97:ba:eb:b0:10:81:3a:
         68:83:20:9a:05:27:a0:ae:73:41:4b:31:32:f3:74:33:3d:38:
         c4:67:1a:20:cc:04:24:30:48:f8:9f:2b:4e:c8:ae:6a:87:90:
         08:81:0d:99:29:86:b6:a5:a8:90:63:2b:bb:4e:d7:b6:70:d9:
         79:08:84:80:5b:6f:d0:16:6b:0e:a3:e7:75:66:2c:93:af:52:
         10:26:97:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:47 2024 by rpki-client on console-ams.rpki-client.org