Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a313030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          q0wGgNJsiWGgm6nkeVK3f8u32FdQYXaGGusDJ3rBVgo=
Subject key identifier:   B2:47:30:C4:53:51:1E:2F:36:5B:91:6C:7B:2D:BC:9A:D8:83:57:5E
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       31E94F2CEB88075005EE3A50B218D27F0868ABAF
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:31 +0000
ROA not before:           Wed 15 May 2024 14:44:31 +0000
ROA not after:            Wed 14 May 2025 14:49:31 +0000
asID:                     264422
IP address blocks:        2804:1e58:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e9:4f:2c:eb:88:07:50:05:ee:3a:50:b2:18:d2:7f:08:68:ab:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:31 2024 GMT
            Not After : May 14 14:49:31 2025 GMT
        Subject: CN=B24730C453511E2F365B916C7B2DBC9AD883575E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:7b:be:51:b7:83:74:c9:36:f1:f7:c3:33:
                    ea:b9:12:6c:3b:2f:2a:47:1f:ba:72:ae:2f:d0:79:
                    51:76:07:92:c4:b0:c1:d9:42:7f:b1:74:44:15:0e:
                    e7:b7:1b:e8:12:f1:1c:55:6c:d3:11:6f:55:67:5e:
                    25:bf:a8:4c:92:e2:64:da:a2:92:ae:6a:a3:e8:6b:
                    a1:24:c2:44:33:7a:1d:a0:b0:bd:a0:24:f6:27:e7:
                    2a:75:33:c2:f2:c5:61:36:18:6c:f0:26:a1:6c:fb:
                    cb:1a:7e:3d:c1:ba:65:2e:e6:76:8e:21:0b:d4:58:
                    32:96:60:0d:23:17:19:26:01:31:e2:42:9b:a2:58:
                    72:34:6a:e0:d8:9f:9e:5c:a9:9a:7e:37:eb:e9:3b:
                    3e:f0:6c:3d:5a:52:e5:5b:95:f3:bc:f6:b4:0a:e8:
                    ff:fc:39:19:50:5f:5c:56:0e:86:a5:ba:27:d2:d4:
                    f1:19:64:e5:7d:0e:fc:e7:c6:6c:e5:9f:a2:8f:4e:
                    0d:9b:67:c3:39:73:19:ce:4b:dd:0c:48:48:21:68:
                    e0:4e:dd:0c:19:cf:40:d6:1f:4d:91:90:8b:66:19:
                    7b:3d:b3:71:fa:33:9b:72:95:96:55:e5:df:27:60:
                    67:41:ad:19:c3:f4:0a:b6:ab:9f:5f:b8:62:2d:83:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:47:30:C4:53:51:1E:2F:36:5B:91:6C:7B:2D:BC:9A:D8:83:57:5E
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a313030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:61:77:0d:be:d0:42:f4:0a:93:0e:e0:10:67:d3:0b:75:
         aa:07:3d:e2:29:c4:d7:9f:f0:41:c0:73:8f:ff:34:64:71:25:
         42:b2:19:b7:bc:9a:ac:ff:68:8a:ac:a3:99:74:2f:38:38:a8:
         a5:47:02:ed:12:85:6b:d4:72:41:d4:e1:62:9f:80:6a:72:4c:
         bd:f0:de:fc:7f:be:5a:30:fd:88:b3:6d:c9:d6:d3:a8:b9:27:
         2a:ab:c1:f5:10:18:57:d6:dc:2d:e0:e5:03:c2:b9:ac:03:54:
         07:3d:f3:54:a0:be:2a:55:eb:60:c3:1e:9f:35:76:d8:32:25:
         96:33:30:6b:8e:93:99:f0:f3:ff:23:e9:5a:e5:d5:c6:4b:08:
         2d:91:98:d7:84:6b:18:88:8e:5b:e7:0e:bd:ac:0a:e6:d4:49:
         a9:00:b3:84:69:1b:45:5a:1b:11:0b:03:f8:e3:87:47:8b:65:
         74:7e:ec:6c:4d:df:2d:28:37:ae:71:d8:47:dc:cb:56:c9:6c:
         76:44:10:bb:82:57:f5:ad:51:b2:94:40:0f:64:f8:70:e6:d2:
         d4:d1:ca:4b:c2:26:1e:7f:57:e7:9d:49:df:2b:3e:f2:64:b2:
         7b:b4:b1:ad:ef:bc:95:93:47:89:49:fa:ab:f8:4b:5a:b5:78:
         0d:cf:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:39 2024 by rpki-client on console-fra.rpki-client.org