Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
File:                     323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (raw, json)
Hash identifier:          owJN/6NNL7NFL+XKlc7t7W28nKfaSgNWegitPA55y2E=
Subject key identifier:   1F:C0:C9:39:AD:00:0A:74:0D:51:1A:15:BE:A1:CC:BC:5D:6D:A2:66
Certificate issuer:       /CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Certificate serial:       6ABC43EB74DC2D114CE86B6CBFD7C11E2475D107
Authority key identifier: D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
Signing time:             Thu 04 Apr 2024 15:41:15 +0000
ROA not before:           Thu 04 Apr 2024 15:36:15 +0000
ROA not after:            Thu 03 Apr 2025 15:41:15 +0000
asID:                     11432
IP address blocks:        2804:138:a000::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bc:43:eb:74:dc:2d:11:4c:e8:6b:6c:bf:d7:c1:1e:24:75:d1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
        Validity
            Not Before: Apr  4 15:36:15 2024 GMT
            Not After : Apr  3 15:41:15 2025 GMT
        Subject: CN=1FC0C939AD000A740D511A15BEA1CCBC5D6DA266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:2a:93:a3:d7:5f:44:f1:0c:62:20:4a:b5:
                    0d:2d:d4:0e:48:c0:a4:62:a9:9e:d5:d4:20:91:87:
                    11:dd:60:3e:08:5a:8e:57:46:8b:2d:73:e7:4b:60:
                    f1:6e:08:f6:b6:d7:a2:50:3e:b0:e6:a7:a7:66:a8:
                    78:b7:45:17:71:65:ab:e7:28:9d:8b:73:83:41:ae:
                    37:61:7f:76:36:0b:23:37:a6:f9:ad:cd:82:19:a2:
                    ff:47:2b:63:93:2a:24:0f:ff:38:81:28:4b:28:bb:
                    6a:df:49:77:ab:7c:d9:9e:3f:17:1c:29:ce:76:88:
                    a3:e0:5f:41:7a:f2:4f:35:e8:2f:a1:e1:69:84:45:
                    62:02:73:a2:e1:a4:a6:ae:27:ec:55:3e:0f:50:e3:
                    c2:07:19:d0:4b:1d:a3:c8:72:55:3b:dc:6b:42:62:
                    33:94:a4:31:9e:e8:4b:70:cb:b1:e2:1b:96:8f:1d:
                    41:cc:2f:e9:3d:5f:91:4a:7a:72:a9:d2:f5:49:d0:
                    b4:8b:cd:64:d2:26:c7:f4:36:9a:01:d8:24:49:db:
                    a7:8c:b9:88:8d:9e:47:f3:85:92:04:a6:6f:62:71:
                    53:f9:78:c9:ac:18:bf:01:f6:fb:dc:ea:1f:67:07:
                    11:c2:4b:87:ff:9c:d6:cd:2b:d4:cb:61:d5:b5:42:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C0:C9:39:AD:00:0A:74:0D:51:1A:15:BE:A1:CC:BC:5D:6D:A2:66
            X509v3 Authority Key Identifier:
                keyid:D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:138:a000::/47

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:83:f7:6e:69:fb:1c:50:1d:bf:05:40:ce:0d:3f:14:cf:
         dc:f4:76:8f:bd:59:e3:a7:09:7f:4a:c7:c4:1d:e5:4c:ea:c3:
         e4:8e:15:c8:b6:f3:01:89:d5:a5:62:73:44:ee:3d:56:56:ee:
         3b:bd:bc:8f:ce:0f:74:ed:fa:35:0e:bb:4d:06:a6:f1:8d:47:
         9c:ee:a2:5d:5d:01:75:7f:d4:8c:c7:d2:07:1d:41:9a:ca:8e:
         4a:43:f7:fe:ee:8c:e2:9d:ee:ed:e5:f8:78:fa:a9:72:a2:19:
         87:b6:e0:48:e0:50:94:6e:06:06:9d:d5:d6:df:29:27:c3:1b:
         6c:41:22:d7:db:ea:13:00:6f:5c:e7:0e:32:36:14:a2:27:f4:
         d9:f8:7d:15:d8:79:cf:64:52:4d:37:55:7c:37:e9:cb:fe:cb:
         0a:17:d0:d2:27:59:fe:81:ce:d7:7e:a5:ce:af:52:27:04:47:
         4a:60:b3:dc:8d:fd:93:2b:eb:eb:1f:da:12:db:63:43:af:6e:
         b5:5d:64:a3:63:2d:10:4b:5c:74:8d:f2:b2:0e:f3:3b:cb:07:
         f7:b6:b6:92:71:fe:b6:d2:2d:60:b7:3d:e1:75:be:51:39:8c:
         b1:30:5f:57:ff:33:8e:0c:b9:12:50:da:2a:8a:1f:c4:40:d8:
         df:67:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:05 2024 by rpki-client on console-ams.rpki-client.org