Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          LUx5iBo8TZic6V/LE4WWUQjnw4Ot5ntS+eKN7XYGOtE=
Subject key identifier:   C8:5D:45:F4:0A:6F:D8:D5:11:86:46:F0:2B:70:85:D1:09:F7:5E:FA
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       1E85CE1BAB21FE2BA006B22D154E1114CAC5C0DB
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:38 +0000
ROA not before:           Wed 15 May 2024 14:44:38 +0000
ROA not after:            Wed 14 May 2025 14:49:38 +0000
asID:                     264422
IP address blocks:        2804:1e58:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:85:ce:1b:ab:21:fe:2b:a0:06:b2:2d:15:4e:11:14:ca:c5:c0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:38 2024 GMT
            Not After : May 14 14:49:38 2025 GMT
        Subject: CN=C85D45F40A6FD8D5118646F02B7085D109F75EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:eb:cf:b0:85:ee:fa:4a:51:5d:4e:af:2e:
                    84:e0:8f:a9:c8:b7:0d:59:f3:36:bc:e6:60:4c:0d:
                    87:f5:6b:64:92:95:3f:d3:8f:ff:d1:1f:12:2b:6f:
                    3e:63:8e:b1:a5:b5:47:66:bb:2a:22:39:65:e9:41:
                    6a:8c:c4:ac:05:73:e1:b0:c5:55:3c:3c:6c:86:06:
                    b5:7b:87:95:41:c5:1d:13:3e:06:3f:96:7a:1f:bf:
                    95:19:7c:8e:d7:55:ef:55:8c:ae:93:d7:2a:c4:4c:
                    5d:db:f9:3e:6f:ed:18:2e:a6:cc:f2:c1:d5:7d:66:
                    6a:52:7f:07:f7:31:f2:9d:0f:6b:4d:85:c1:13:2b:
                    9b:af:bc:b5:62:57:2c:92:9f:76:f5:1d:a8:b8:d1:
                    ba:2c:a5:6d:97:24:c0:c0:f8:da:9d:e5:0c:11:cd:
                    6a:66:e7:7d:9c:9a:6e:b8:14:d8:84:be:d5:9a:c6:
                    b0:2f:e8:5e:c5:55:4f:7f:50:77:84:e6:c7:ec:9c:
                    15:fe:13:52:3b:8f:d2:ea:53:20:dc:92:3b:d0:a4:
                    d5:b5:f1:a3:9f:82:4e:41:24:eb:1c:42:84:89:d0:
                    ed:e7:99:73:3a:cb:02:57:1e:97:9f:03:a7:3b:30:
                    c3:96:33:3a:27:3b:ad:c7:bf:a6:16:51:8b:4b:7d:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5D:45:F4:0A:6F:D8:D5:11:86:46:F0:2B:70:85:D1:09:F7:5E:FA
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:f5:f7:c0:cd:75:64:2f:34:c0:45:8a:8e:ea:ac:94:22:22:
         77:6e:5c:01:50:1a:22:9d:c2:7a:e8:61:00:d1:a2:7e:c6:cf:
         d7:82:1f:e0:1d:da:41:71:f7:e6:ef:64:93:3a:7f:4c:93:ab:
         4d:43:77:41:cf:9c:30:8f:0f:0a:b2:47:da:e6:b6:71:4e:0e:
         ce:8a:fd:cc:ce:db:eb:af:f6:8e:77:b7:14:67:64:3f:72:5d:
         42:1c:01:47:2e:65:ee:69:23:d9:f4:32:36:d4:68:b2:b8:d1:
         b5:3e:a2:d0:40:c8:36:d2:98:9f:bd:72:7a:6c:81:9a:09:fc:
         73:60:67:2f:94:b5:46:b4:db:00:63:4f:82:97:10:3f:4b:a6:
         d1:41:77:c2:14:63:90:f0:fb:72:58:89:1f:18:c1:f2:0d:36:
         eb:b2:fb:cd:12:84:07:52:d9:90:5f:55:51:d5:f7:65:0a:e2:
         ba:76:58:1b:01:a0:af:78:a9:1a:6d:72:e2:2d:c6:ac:65:84:
         22:82:ff:f5:9f:37:df:0a:a5:5a:3a:c5:e7:bb:28:53:99:a2:
         04:eb:32:c2:db:40:e6:8d:e3:96:03:ac:aa:c5:87:57:7b:5e:
         33:3a:a1:28:f5:14:e4:e8:9d:81:53:42:c2:e4:0a:9f:92:75:
         97:33:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:36:24 2024 by rpki-client on console-ams.rpki-client.org