Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a663030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          uqQn/5X51V+E/9lJXJyn8RQHR5lwABZMIuXf3krj7Ks=
Subject key identifier:   BF:54:8C:63:49:CF:1E:D2:BF:8D:64:48:F6:10:FD:CF:39:80:8A:56
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       2CC8DC1F21E28B8B6B3063337FA5BEEB76594A05
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:36 +0000
ROA not before:           Wed 15 May 2024 14:44:36 +0000
ROA not after:            Wed 14 May 2025 14:49:36 +0000
asID:                     264422
IP address blocks:        2804:1e58:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c8:dc:1f:21:e2:8b:8b:6b:30:63:33:7f:a5:be:eb:76:59:4a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:36 2024 GMT
            Not After : May 14 14:49:36 2025 GMT
        Subject: CN=BF548C6349CF1ED2BF8D6448F610FDCF39808A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:3f:03:e9:5a:b3:3c:79:47:8f:ba:97:f3:
                    31:15:c0:51:bb:56:b2:27:2d:06:c1:8d:fc:9a:9b:
                    5b:49:2b:ab:44:05:2a:6a:92:9d:7e:96:a7:a7:c1:
                    98:56:3b:c7:1f:f4:86:24:19:92:c4:a5:68:86:e6:
                    21:f7:15:08:49:af:a0:d2:c0:e4:44:0f:6d:9d:ac:
                    f4:64:5b:c1:dc:68:00:08:2b:32:59:84:4c:29:8e:
                    98:66:7e:46:74:f8:bc:26:2f:ec:0e:72:c7:a4:c2:
                    b8:bd:2e:ee:e8:76:4c:4b:c2:5f:34:a4:21:1f:22:
                    30:0d:36:99:35:73:26:93:7f:c1:02:3e:6d:2e:c4:
                    b5:52:b7:34:cb:17:f0:0c:eb:4a:d8:ae:6b:8e:5b:
                    17:d6:9e:fd:56:a6:9b:54:21:d7:a0:93:3f:9e:22:
                    76:55:60:51:22:e7:d8:6c:5f:3d:4e:48:c4:80:db:
                    2f:b7:1f:85:32:29:e8:4f:cd:9c:c4:dc:f9:f0:b7:
                    7f:5c:e4:fe:97:5b:e4:5a:9c:66:f3:c1:8d:97:73:
                    d1:f8:55:ed:9e:eb:cc:a6:3b:d5:88:9d:93:2a:2c:
                    9a:16:dc:dd:4d:41:50:a1:e5:0b:03:1d:74:c4:82:
                    c6:85:2c:18:54:ed:b5:76:47:59:1d:2c:e2:2e:40:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:54:8C:63:49:CF:1E:D2:BF:8D:64:48:F6:10:FD:CF:39:80:8A:56
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3d:de:8b:00:48:d7:ef:d6:79:ee:52:fc:d6:3e:80:af:33:40:
         9d:20:17:7f:bf:47:f3:41:3a:20:d8:49:1c:ba:30:3a:ab:c8:
         6e:5b:54:84:0f:95:0c:7f:4c:60:cf:0c:41:fd:06:de:51:6a:
         b3:2d:8e:a9:35:ea:7c:44:98:15:bb:ef:7b:6b:83:2a:0a:9f:
         36:f2:03:aa:c5:52:15:c9:0a:b9:65:79:48:04:fd:47:76:29:
         76:b9:f1:a9:f8:63:57:2e:06:d1:2f:88:86:1b:a8:90:ea:0a:
         74:db:c1:a1:be:89:2d:0f:e5:63:74:10:7d:f9:c1:1d:48:83:
         26:ef:66:87:41:d4:43:95:01:b1:cb:31:31:be:0c:cc:d4:84:
         b1:26:d0:5f:5f:4b:d1:cd:73:23:d0:68:48:96:08:aa:44:6c:
         54:84:1b:3d:6c:17:ee:41:4d:fb:01:64:1b:31:43:f5:f1:55:
         06:15:4d:44:5e:ce:a1:ee:40:ab:a9:d4:cf:72:3e:ea:74:13:
         ea:87:d4:0c:b1:19:81:c8:fa:33:b3:4b:bd:11:93:36:0b:99:
         57:d5:a8:fe:8f:68:dd:87:e1:f3:57:51:45:15:76:03:d5:14:
         90:1b:c9:2e:31:de:45:86:4c:71:6d:03:ad:10:d0:1c:ad:39:
         41:13:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org