Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a633030303a3a2f33342d3334203d3e20323635343236.roa
File:                     323830343a333366303a633030303a3a2f33342d3334203d3e20323635343236.roa (raw, json)
Hash identifier:          d09QLVPi7/A1LzluGAquMUGeSbHzVxhx++cfakUMHJw=
Subject key identifier:   E0:1C:63:2B:62:7E:AD:0E:18:70:44:37:9A:E1:54:2C:D6:A8:E3:F5
Certificate issuer:       /CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
Certificate serial:       3D195E139D8F3ED9E71A7DC21BF6D2895FB4D510
Authority key identifier: 66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a633030303a3a2f33342d3334203d3e20323635343236.roa
Signing time:             Fri 19 Jul 2024 00:14:33 +0000
ROA not before:           Fri 19 Jul 2024 00:09:33 +0000
ROA not after:            Fri 18 Jul 2025 00:14:33 +0000
asID:                     265426
IP address blocks:        2804:33f0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl
                          rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:19:5e:13:9d:8f:3e:d9:e7:1a:7d:c2:1b:f6:d2:89:5f:b4:d5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
        Validity
            Not Before: Jul 19 00:09:33 2024 GMT
            Not After : Jul 18 00:14:33 2025 GMT
        Subject: CN=E01C632B627EAD0E187044379AE1542CD6A8E3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:6f:d9:d0:30:43:5b:45:84:5a:47:07:02:
                    27:16:e2:27:0c:43:3d:cd:4f:e2:76:0b:8c:c9:67:
                    14:99:d8:5e:6f:ef:a3:a1:34:ec:15:e5:c5:c1:bd:
                    0c:4e:c2:91:5b:fd:c5:d2:c4:86:6d:e8:1f:29:2f:
                    6c:4c:37:21:74:70:22:18:f4:42:60:fb:0f:84:8b:
                    03:5a:1a:b6:5d:6f:72:ec:e4:91:e7:96:0d:e7:1a:
                    9d:bf:b8:03:c6:3a:65:32:9d:63:e9:af:7c:b0:04:
                    07:ed:42:f3:ef:98:56:ca:01:90:e5:dd:c3:68:86:
                    1b:69:27:27:44:27:42:26:19:b7:ea:25:e8:28:01:
                    50:b0:a5:fa:6f:a1:5e:06:a6:ec:8c:4c:bb:aa:22:
                    a6:31:09:7d:0d:4a:70:e8:d2:20:07:2b:75:8c:9f:
                    ad:9c:92:5a:23:1b:07:67:23:dc:a5:e9:d8:da:68:
                    8f:f4:47:ad:66:65:70:a3:83:bb:3b:89:2f:ba:43:
                    52:0b:06:93:2d:5c:6d:dd:b8:93:a4:2e:7e:28:37:
                    54:8b:0d:16:5a:0f:d9:89:95:64:c2:ae:08:63:5a:
                    b7:a7:ca:5e:c1:8c:56:a1:69:eb:50:83:b4:5d:de:
                    36:b3:50:ff:0a:ee:2e:5b:72:68:f9:da:c1:76:67:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1C:63:2B:62:7E:AD:0E:18:70:44:37:9A:E1:54:2C:D6:A8:E3:F5
            X509v3 Authority Key Identifier:
                keyid:66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a633030303a3a2f33342d3334203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c8:17:4a:9f:4d:b3:d9:64:4f:04:c6:40:be:6e:cc:52:b9:33:
         17:d6:fc:f5:05:96:99:e5:38:41:88:50:32:d3:14:ff:ce:96:
         1c:c1:22:ca:56:94:f4:26:b1:f9:28:1e:1d:d7:4a:d3:16:05:
         48:c5:a0:ac:15:4e:60:37:92:f2:07:bc:02:7f:b0:0c:f2:33:
         5b:e5:69:59:45:4a:18:32:4d:45:0f:64:9e:7d:8b:9f:14:02:
         68:7c:51:89:3c:35:0e:a6:0b:6f:df:cf:97:50:4f:99:a8:31:
         85:28:22:5c:20:4a:e1:0d:20:ae:3e:72:00:04:13:d5:68:6b:
         15:47:da:4e:17:b5:1d:df:48:4e:09:12:e8:86:33:a9:4b:07:
         ac:73:93:f2:a5:af:20:13:ef:c7:d4:29:1d:dd:e8:52:c8:43:
         ed:4d:dc:e4:67:20:56:28:61:65:bc:4a:2d:f1:5f:fc:ed:89:
         ca:01:ee:02:a5:36:34:b9:09:a0:d7:3c:88:d5:89:28:c9:e2:
         15:8f:6f:a8:8c:7f:49:0d:95:91:29:e1:65:3e:62:66:49:14:
         41:43:96:64:23:e8:69:dc:97:de:5e:8a:87:e1:a2:ca:4d:46:
         e4:9f:61:e3:20:97:76:96:b8:02:4f:e7:97:d4:be:a8:50:05:
         dc:fc:c8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org