Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a653030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          6ieeamzYlwWtx05qVJ+0iBJCslwVphNEQAPwOrfUdLQ=
Subject key identifier:   1B:2A:47:CA:E1:9E:55:CD:73:EF:45:90:19:29:4C:8D:A8:0B:7E:58
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       6CC6E9B6E6EBA837C91382607AAE7D89B738B886
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:34 +0000
ROA not before:           Wed 15 May 2024 14:44:34 +0000
ROA not after:            Wed 14 May 2025 14:49:34 +0000
asID:                     264422
IP address blocks:        2804:1e58:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c6:e9:b6:e6:eb:a8:37:c9:13:82:60:7a:ae:7d:89:b7:38:b8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:34 2024 GMT
            Not After : May 14 14:49:34 2025 GMT
        Subject: CN=1B2A47CAE19E55CD73EF459019294C8DA80B7E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:17:0b:e9:48:dc:cc:3d:e4:c6:3d:13:41:
                    cb:38:0b:1f:32:5c:20:46:4e:8e:cb:e9:48:1d:6e:
                    9a:da:a4:89:68:cb:08:8f:1d:65:ad:b3:a3:e6:f8:
                    cb:20:8c:b4:f4:b3:56:77:b6:5d:67:6b:84:93:bd:
                    39:fd:41:76:be:44:6d:b6:6d:e1:a9:7a:ee:5d:bd:
                    56:01:3b:48:85:16:56:36:25:13:3c:57:14:f0:3a:
                    c0:80:3d:cc:a9:5f:57:21:dc:9a:33:ec:d0:1a:48:
                    00:93:f1:f5:f5:32:cb:6f:b8:b6:85:2f:96:15:3b:
                    74:d5:37:55:d7:31:27:9a:db:64:0a:19:82:2d:df:
                    37:6f:14:8f:a5:f1:39:c5:34:45:77:27:17:64:d5:
                    2f:24:7e:cd:73:fa:2a:0f:2f:f3:86:5b:6d:3d:55:
                    3c:96:94:c5:de:a0:f0:5f:5c:59:67:95:35:0a:0a:
                    76:3a:15:b2:06:57:c2:cd:a3:2f:aa:13:e6:ca:bc:
                    46:46:bb:3b:20:ff:60:2a:68:0e:ad:b1:1e:81:cd:
                    96:68:67:2f:d7:99:8c:da:9f:f0:cd:88:d3:1b:62:
                    c0:4a:11:45:b6:c5:ce:82:e7:3f:1e:7e:49:77:a9:
                    e8:29:22:32:7a:12:7b:b3:75:ab:e9:fe:d1:45:4d:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2A:47:CA:E1:9E:55:CD:73:EF:45:90:19:29:4C:8D:A8:0B:7E:58
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:26:80:bd:e4:a8:3a:05:2e:da:cb:79:d8:b9:49:a1:d2:
         c5:b2:90:1d:48:48:8c:42:58:6f:33:81:ac:b7:57:d3:be:46:
         fd:a7:10:99:80:d9:1b:39:2b:4a:7c:39:bb:d6:32:3d:36:fd:
         c6:f6:94:0a:84:f9:25:b4:40:83:43:4d:e4:e9:34:a3:65:fa:
         da:22:d9:5d:83:5d:b5:bb:07:8f:31:e1:be:42:4e:00:b0:dd:
         ce:85:39:91:0d:64:cb:66:3a:52:19:ea:27:95:aa:cd:3c:13:
         07:40:30:b7:1c:d9:51:0f:28:93:41:9d:ca:b6:f9:33:9a:13:
         74:17:28:57:54:2a:96:44:83:00:1f:6b:b9:d9:51:f6:8b:29:
         17:e2:d8:4e:9d:b8:93:60:90:79:46:d6:03:f5:11:d8:ec:32:
         fa:50:96:38:fc:fb:64:7f:20:66:a8:36:24:24:4a:df:4f:07:
         1b:b1:57:65:3f:91:6f:b8:b6:f5:f5:8e:85:bf:51:c5:00:a2:
         e7:3d:b0:88:48:92:ad:ee:c8:79:82:fe:94:da:e5:41:3f:3d:
         b5:85:54:da:23:f0:64:30:f2:5a:e4:3f:a9:a1:37:8e:ad:41:
         84:84:d3:34:af:37:be:20:a8:91:e7:ce:f7:3e:58:7d:70:be:
         ee:c2:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:00 2024 by rpki-client on console-ams.rpki-client.org