Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          oknrGJ4qQuGcBrSXMIsjyiDfeACvqYbVUcZuvwqRQQg=
Subject key identifier:   F9:46:14:C1:3F:37:72:82:93:45:C4:72:A3:6F:CB:8B:98:11:4C:5C
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       1579A37E120C64FE2FE3C780BBD2289038DA3FA8
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:50 +0000
ROA not before:           Wed 03 Apr 2024 18:26:50 +0000
ROA not after:            Wed 02 Apr 2025 18:31:50 +0000
asID:                     266623
IP address blocks:        2804:3ed4:19aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:79:a3:7e:12:0c:64:fe:2f:e3:c7:80:bb:d2:28:90:38:da:3f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:50 2024 GMT
            Not After : Apr  2 18:31:50 2025 GMT
        Subject: CN=F94614C13F3772829345C472A36FCB8B98114C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:16:f2:11:70:52:49:c8:85:8e:94:28:9b:
                    0c:6a:f4:49:2c:dd:56:87:a9:06:ec:8c:ca:c5:9a:
                    1f:2f:c7:0f:05:eb:d4:5e:c8:17:8b:f9:23:4d:1f:
                    fb:33:2e:cb:35:12:d8:90:0a:f3:a8:29:91:91:4d:
                    c3:9c:ae:16:de:4f:05:ad:00:f0:cd:b9:42:a8:bd:
                    72:d6:81:5e:0b:70:79:1b:21:8e:21:4f:b2:1e:e1:
                    51:c2:9e:71:db:ee:a3:f1:0c:86:d2:2f:25:e1:0e:
                    f2:7c:fc:36:a2:4c:2a:5d:0f:c9:1e:ad:7d:0a:cd:
                    dc:42:be:0f:84:39:c1:18:59:41:ac:bd:68:62:1f:
                    93:19:be:06:b3:5b:1d:3a:95:13:97:d5:58:41:da:
                    ef:7a:1b:e5:44:78:7e:14:a8:12:f5:25:0e:dd:b5:
                    30:7c:19:e4:cf:05:1c:78:63:00:26:e0:fa:18:b8:
                    52:af:3b:ff:8b:1d:11:ad:34:1b:12:d2:d2:1c:43:
                    d3:44:97:16:d6:8d:50:b5:2d:66:f8:12:32:fb:ad:
                    4b:b6:01:c7:13:ab:38:c9:75:d1:2c:ff:f0:41:e1:
                    73:91:6f:5b:af:86:1b:32:e3:61:83:50:4e:9b:16:
                    0f:bc:61:2c:eb:e3:20:12:3f:f9:b4:88:35:ac:1f:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:46:14:C1:3F:37:72:82:93:45:C4:72:A3:6F:CB:8B:98:11:4C:5C
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:19aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:1e:11:e2:bb:1e:d9:d7:39:8c:96:37:b1:10:72:0d:f7:52:
         ae:3a:9a:c7:a7:54:51:8f:5a:44:2e:a1:a3:15:14:05:d6:e6:
         e7:4a:b5:60:da:3c:fb:e1:ed:c0:58:82:4e:1f:30:b4:4b:35:
         99:23:77:e8:9b:cb:1b:b0:6e:4c:9a:2b:91:17:1f:66:f1:f9:
         27:df:35:02:5a:1a:ab:24:78:ae:02:a3:ca:0b:02:a5:84:d8:
         a0:28:d1:8d:80:ed:f0:6e:79:43:fa:5e:45:f0:09:a6:2c:91:
         93:77:ea:e0:47:8e:0a:6c:5c:81:12:f0:4f:c5:ed:b8:8a:62:
         80:db:4a:16:aa:4f:93:55:0b:c0:3b:7e:34:a9:25:f0:f0:26:
         8a:5e:f5:4b:3f:ee:19:8b:5a:34:d8:9e:f7:1d:a8:4f:ab:c4:
         98:0e:bd:6a:3d:13:82:cf:d5:0c:2f:9c:b9:e1:bf:a5:ea:9c:
         3f:18:bb:6f:ba:0d:b4:fc:ef:84:cf:a8:ff:e5:56:b6:9a:3e:
         96:95:66:6c:1d:b8:34:ed:07:aa:f4:e3:6e:a3:c9:f0:42:39:
         27:0a:fc:e8:52:e3:fd:8b:8d:42:5e:c0:b6:1c:92:f9:df:a6:
         d4:72:30:e6:c1:5f:9b:dc:c0:54:87:cf:06:81:0a:c1:0d:86:
         97:f9:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org