Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          s8We4V7yQ1YL1TSK1NfTPY8S3hLSPOmaTQ3uiqQkCL8=
Subject key identifier:   FF:05:DF:DD:75:E5:70:3A:09:77:9F:82:A4:39:2D:F8:4C:92:04:DB
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       67316E27368FA6D8953B63612EEFCA71CEB8005B
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:34 +0000
ROA not before:           Wed 15 May 2024 14:44:34 +0000
ROA not after:            Wed 14 May 2025 14:49:34 +0000
asID:                     264422
IP address blocks:        2804:1e58:9000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:31:6e:27:36:8f:a6:d8:95:3b:63:61:2e:ef:ca:71:ce:b8:00:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:34 2024 GMT
            Not After : May 14 14:49:34 2025 GMT
        Subject: CN=FF05DFDD75E5703A09779F82A4392DF84C9204DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:f0:c8:ea:03:09:8b:4e:93:6f:7c:3f:90:
                    66:b9:92:fc:52:9d:f3:ae:56:80:1b:dd:23:6a:7d:
                    37:49:99:f8:38:5b:50:30:c8:02:7e:01:22:9e:df:
                    94:c9:da:95:4c:d9:47:c6:09:51:72:a7:3b:c9:30:
                    b5:2e:7c:a3:7b:a2:e3:d2:04:ac:dc:9c:af:6c:d0:
                    7d:68:49:b2:f3:b3:ae:97:c8:62:88:52:51:af:2d:
                    5f:28:00:a8:b2:30:7a:f5:f4:07:4e:48:42:72:83:
                    b2:a8:11:bf:31:39:5b:3b:93:22:13:a0:a9:71:b8:
                    ca:9b:8b:40:dc:fb:70:ed:86:32:8a:6a:94:7e:f8:
                    1c:7b:1a:d2:c8:27:59:0b:b7:8d:ff:52:8d:fc:df:
                    7e:0b:14:26:30:3f:6c:60:c2:ef:f6:a1:21:4f:03:
                    a5:9c:60:3e:01:1d:8a:0e:72:7c:09:fb:5e:cc:6d:
                    0b:d9:ec:83:02:f4:16:18:25:67:58:26:5c:f2:64:
                    cf:91:83:01:cf:44:bc:73:d2:41:4c:cc:7d:ea:10:
                    22:22:9b:f2:93:fc:d6:bd:be:a1:4b:1f:2d:83:d2:
                    be:1a:30:3d:d7:2e:55:ce:4d:18:84:b8:7a:57:e8:
                    32:38:50:58:69:d3:c7:1f:1c:6f:f0:73:cc:a6:09:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:05:DF:DD:75:E5:70:3A:09:77:9F:82:A4:39:2D:F8:4C:92:04:DB
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9000::/46

    Signature Algorithm: sha256WithRSAEncryption
         27:2e:64:24:a6:0a:ae:cd:15:f8:36:f9:1a:f8:ac:df:0e:5f:
         f6:aa:f1:25:cc:4c:bc:11:59:33:ba:04:6a:c1:df:e9:3f:bc:
         a6:f7:4c:e1:80:e8:3c:d6:cf:64:e5:21:09:bf:71:b7:61:86:
         07:e1:a9:25:88:32:dd:7d:ec:f3:63:a1:8f:50:be:a2:63:92:
         47:d4:89:1c:ec:92:6e:d4:3f:1b:4a:f4:a5:99:03:2d:20:12:
         12:c4:93:b2:45:3c:fd:2a:75:f8:89:f4:51:5a:b2:fd:49:f8:
         4f:be:71:e3:b0:e6:80:a6:91:9d:d9:27:31:44:65:78:5c:9c:
         25:28:ef:07:f0:98:51:26:41:91:0c:7d:34:62:a0:01:64:21:
         15:0f:58:1e:86:5f:35:2f:f1:c6:8d:79:43:d0:14:17:6c:da:
         12:c3:09:bd:12:ee:24:4e:47:49:9f:2c:55:6e:21:a9:bf:35:
         d0:56:01:b7:10:b3:e2:56:fe:e0:85:f2:a1:76:fe:ee:e4:86:
         1f:fd:bb:2f:94:c0:b3:e2:26:4d:d3:9b:50:95:2e:77:54:7e:
         57:fc:42:c2:2c:d0:e8:07:5f:93:7f:a4:b5:68:8e:67:c1:76:
         22:ce:4f:e5:b8:ca:99:29:0c:05:34:33:02:62:03:7b:52:2c:
         95:65:5f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org