Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          mbK7pz0uOAtbCVIXMIrLSyoOUsP5Yv/wn4p7EKOxrCc=
Subject key identifier:   EE:49:1B:E8:C1:50:30:BF:4C:00:1E:60:20:5F:50:65:F5:55:DE:DB
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       309FC43E77660D9B41D611E198E3E1991CB838F6
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:40 +0000
ROA not before:           Wed 15 May 2024 14:44:40 +0000
ROA not after:            Wed 14 May 2025 14:49:40 +0000
asID:                     264422
IP address blocks:        2804:1e58:8000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9f:c4:3e:77:66:0d:9b:41:d6:11:e1:98:e3:e1:99:1c:b8:38:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:40 2024 GMT
            Not After : May 14 14:49:40 2025 GMT
        Subject: CN=EE491BE8C15030BF4C001E60205F5065F555DEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:49:d8:eb:d2:a3:a6:2e:d0:c7:0c:cc:b9:
                    10:9f:1d:ba:88:e6:14:87:9b:80:07:3f:ab:ba:ad:
                    c1:d9:b5:93:3c:ca:30:b5:b2:e8:f3:25:b3:8d:08:
                    7f:e9:c1:70:0e:63:11:39:32:a0:fc:2a:2e:b7:fc:
                    4c:47:c7:d8:e3:ab:a4:2f:76:88:db:d5:95:22:8c:
                    e4:b4:62:bc:7e:33:02:cb:8f:b5:dc:16:9c:5d:47:
                    9b:65:d2:af:aa:8c:90:6f:33:f7:d5:3c:1d:1c:42:
                    9f:33:13:0a:dc:a8:40:26:30:1a:a6:16:d9:69:cb:
                    39:58:79:f8:0f:78:f3:3b:26:ed:be:47:39:c4:d9:
                    37:f6:dd:cc:25:f9:ae:a7:31:d8:c0:36:db:e8:e9:
                    20:3c:27:65:1f:da:1e:4d:45:e2:e1:9d:76:60:cd:
                    75:33:02:bf:81:fc:30:c9:f1:02:89:36:68:9c:02:
                    9e:fd:5d:15:a5:f6:98:26:e7:e6:f9:6f:9c:cb:48:
                    85:ae:40:af:a5:ab:14:ea:dd:52:50:89:0a:e9:3d:
                    4f:6d:bc:ab:e6:59:13:76:35:7d:2d:0b:a1:b9:7b:
                    97:ed:58:cb:03:ab:bf:75:b3:d6:b6:3f:9e:e4:5d:
                    f2:57:58:0d:93:96:df:ed:9b:75:d6:81:74:00:44:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:49:1B:E8:C1:50:30:BF:4C:00:1E:60:20:5F:50:65:F5:55:DE:DB
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a383030303a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:8000::/46

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:ec:31:4c:2d:f6:22:87:d9:18:a6:a2:b8:d5:ff:f7:f6:
         ed:14:85:16:cd:40:b9:72:e5:41:80:8d:ae:34:a8:a2:4a:73:
         f2:54:e9:99:05:87:f8:36:24:d6:9a:9d:7a:80:96:77:51:d2:
         28:75:17:82:01:7b:86:f8:fd:a5:db:2f:1f:2f:d1:e4:e1:09:
         0e:1d:73:51:fb:da:25:b5:e7:0f:14:7b:97:26:d7:55:83:d9:
         dd:0c:60:b3:cf:87:7a:41:c6:d6:f2:71:7a:ee:68:96:4a:8f:
         c0:a6:c9:70:8f:3f:17:ae:d4:52:cb:f1:45:31:6d:63:7f:47:
         b1:7c:0e:be:eb:89:45:80:5a:f7:d0:8c:ec:e8:a8:b0:3b:37:
         1e:2d:a1:53:9c:5e:63:9d:9a:bb:26:6d:07:37:76:97:df:a3:
         c1:44:51:ad:a2:f8:80:d6:f8:a7:c2:8c:eb:7a:df:0b:ae:68:
         c8:27:5f:e8:43:d7:78:75:7c:04:c3:cf:3c:dd:f6:ec:f6:09:
         ca:b4:de:98:89:28:36:cc:44:55:b9:56:89:45:f5:c8:f9:ef:
         0e:53:5a:28:7d:ca:4e:43:b9:77:6b:fb:87:64:46:d3:57:f9:
         a5:85:b0:53:02:70:2e:30:b7:00:62:ec:6a:f5:31:89:1d:dd:
         c1:64:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:47 2024 by rpki-client on console-fra.rpki-client.org