Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/323830343a316162303a3a2f33322d3332203d3e203631383736.roa
File:                     323830343a316162303a3a2f33322d3332203d3e203631383736.roa (raw, json)
Hash identifier:          Cc85bRoWSyvI7RvfDOyPlwcfZQPAk+5Y5hoeT2GIE+Y=
Subject key identifier:   E9:CF:E2:13:79:48:32:B4:7A:5C:0F:0D:FE:37:30:64:9E:FE:AB:0F
Certificate issuer:       /CN=F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD
Certificate serial:       1E4C3160443CDC438D97FD365925CD5A993A1982
Authority key identifier: F3:79:3A:6A:C4:BE:98:BB:DA:F0:FE:4B:1E:57:57:38:46:8A:18:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/323830343a316162303a3a2f33322d3332203d3e203631383736.roa
Signing time:             Wed 03 Apr 2024 18:31:51 +0000
ROA not before:           Wed 03 Apr 2024 18:26:51 +0000
ROA not after:            Wed 02 Apr 2025 18:31:51 +0000
asID:                     61876
IP address blocks:        2804:1ab0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4c:31:60:44:3c:dc:43:8d:97:fd:36:59:25:cd:5a:99:3a:19:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD
        Validity
            Not Before: Apr  3 18:26:51 2024 GMT
            Not After : Apr  2 18:31:51 2025 GMT
        Subject: CN=E9CFE213794832B47A5C0F0DFE3730649EFEAB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:ed:39:4d:c3:30:7a:f6:ae:94:dc:70:28:
                    c3:db:50:22:5e:7f:63:5b:74:96:04:24:5a:9f:c1:
                    0a:fc:5d:c5:ee:f6:7f:13:e5:d6:cd:4c:b5:65:c0:
                    1e:42:d0:37:bc:2b:c7:ff:b4:7a:e0:e5:f2:60:7c:
                    bd:6a:6c:e7:e2:79:80:9a:6d:9f:bf:a6:9e:03:25:
                    c9:50:c5:d6:87:b8:38:3f:b5:e3:0e:7c:55:2c:4e:
                    a3:c4:fd:f0:8f:70:47:8d:fb:e2:27:75:fc:35:b9:
                    71:be:3e:c0:ba:0c:b5:32:91:f5:c1:7f:90:20:83:
                    48:9e:56:2f:ff:a6:b7:0c:45:98:95:e4:8e:11:b5:
                    75:60:ff:ab:96:37:a4:64:85:97:dc:49:7a:39:47:
                    f4:d8:d8:3d:ea:e2:21:9a:da:e4:f6:60:c4:58:e1:
                    e0:1d:6f:82:f4:08:81:40:c2:37:4c:54:93:e5:e9:
                    28:2e:5a:d4:59:1b:4d:82:54:3e:d5:1d:4e:53:95:
                    86:90:20:92:a8:5a:15:3b:1c:02:bb:49:80:b7:02:
                    0d:ce:1d:ee:05:be:c5:21:0e:42:ee:ce:22:dd:d8:
                    18:b5:03:11:06:58:df:f3:a1:14:b8:83:2b:b1:6e:
                    cc:e5:2d:8f:79:d5:1d:17:7b:ea:86:90:a3:30:c8:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:E2:13:79:48:32:B4:7A:5C:0F:0D:FE:37:30:64:9E:FE:AB:0F
            X509v3 Authority Key Identifier:
                keyid:F3:79:3A:6A:C4:BE:98:BB:DA:F0:FE:4B:1E:57:57:38:46:8A:18:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/323830343a316162303a3a2f33322d3332203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:f6:b1:8e:66:5b:63:97:42:85:29:17:69:41:57:aa:f0:
         de:f4:31:0b:a0:fb:ea:f5:58:89:6b:08:e7:02:4d:4b:75:d9:
         2e:9f:d3:21:5e:9c:95:1d:d3:8c:43:b0:a2:08:4f:8d:c8:19:
         34:d1:1c:6c:a6:69:0a:96:a8:ed:af:4f:76:a9:2e:72:a0:09:
         86:4f:e1:25:ed:a0:13:89:16:a8:33:bd:58:0e:e7:05:1d:4a:
         e2:0a:e4:99:85:43:8f:8d:51:09:16:2b:c5:ab:85:62:40:1d:
         6c:aa:84:a1:88:09:2e:cf:db:92:11:e6:4e:dc:40:a1:9e:d4:
         00:f6:01:f8:2d:0c:b6:71:0c:4b:65:81:78:e9:de:1b:48:b8:
         7a:e7:f0:31:e5:0e:7c:d8:f6:e9:31:cf:47:0e:d0:98:0b:a5:
         e6:b0:7e:f3:bf:3d:66:d5:d4:9f:39:bc:09:bb:2a:ec:08:5d:
         d9:23:d4:a7:de:9b:fe:43:98:1e:b0:a0:93:b4:b5:22:08:51:
         65:14:ae:de:63:9a:7c:39:36:66:ee:e8:c3:1a:7b:36:3b:49:
         ea:bf:af:8d:5a:a3:f2:4c:7b:c2:47:98:9c:83:07:31:b4:00:
         1c:b9:60:a9:71:a0:eb:35:55:9b:c3:98:16:c8:fb:3c:0e:d1:
         28:bc:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:51:16 2024 by rpki-client on console-fra.rpki-client.org