Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3561613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a3561613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          AR3e6Mq9crcIcnjNdNRYkOL72uEMR2lM/pk2WLyEdoQ=
Subject key identifier:   96:88:7F:6E:1C:DF:60:26:0F:22:CC:7C:B6:8E:E8:CF:00:16:DD:B6
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       50AABAF4E66873FDAB181CDB8C6BF9CB99706B5A
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3561613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:47 +0000
ROA not before:           Wed 03 Apr 2024 18:26:47 +0000
ROA not after:            Wed 02 Apr 2025 18:31:47 +0000
asID:                     266623
IP address blocks:        2804:3ed4:5aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:aa:ba:f4:e6:68:73:fd:ab:18:1c:db:8c:6b:f9:cb:99:70:6b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:47 2024 GMT
            Not After : Apr  2 18:31:47 2025 GMT
        Subject: CN=96887F6E1CDF60260F22CC7CB68EE8CF0016DDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:49:dd:de:e3:b2:8f:ef:2c:95:46:df:df:
                    55:02:4f:9b:01:41:11:0e:46:c9:a0:85:8f:5a:a3:
                    7c:2d:cc:d6:c3:8d:b5:8f:0e:cd:89:ed:29:dc:86:
                    53:91:e9:89:76:3a:02:34:b6:2c:c0:22:e7:a0:bd:
                    32:6e:5e:e4:c2:8f:79:a4:be:b2:d3:87:a2:7a:75:
                    86:32:91:f5:7c:0e:7e:ad:a9:fb:1c:a8:b0:88:59:
                    5e:b4:b1:f6:57:c4:46:ec:e5:62:c7:c3:14:f7:83:
                    97:39:c9:7c:a1:9f:6d:5c:6e:a0:18:19:0a:4d:4d:
                    6d:60:c7:c0:d4:a7:7c:76:40:b1:aa:5e:09:27:be:
                    dc:fa:16:6b:ab:0d:08:c3:6b:8a:c0:c2:99:f3:e2:
                    d6:95:ba:6b:f8:ac:0f:a1:c8:51:13:38:70:36:50:
                    e0:92:f2:2a:d6:96:33:df:13:5d:ed:69:6e:c1:f4:
                    b7:e8:d5:d4:35:46:fb:23:b4:0c:35:2e:5d:60:26:
                    a6:9b:d6:e8:c9:36:dc:12:c4:d4:44:cf:10:58:48:
                    9f:d3:0e:49:88:96:7f:2e:d6:8d:b3:ce:ea:6c:6a:
                    14:7f:09:9e:0a:7d:62:6e:b2:ad:57:4e:25:2a:39:
                    ef:8d:aa:2a:5d:f9:21:d9:d5:5b:6e:ed:7d:87:1c:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:88:7F:6E:1C:DF:60:26:0F:22:CC:7C:B6:8E:E8:CF:00:16:DD:B6
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3561613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:5aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:4d:00:18:e1:a0:31:3f:eb:88:02:42:5e:47:42:d5:8c:
         a8:5a:3c:44:82:18:b5:c6:4b:81:74:16:26:b6:e8:3f:71:8c:
         37:86:34:86:0f:93:0e:2c:16:21:2f:6b:66:d4:6a:ab:8f:1c:
         7b:5e:62:9d:9d:d0:f3:85:31:dc:44:34:10:40:4d:5b:d0:9a:
         08:d6:21:51:b3:d3:05:d9:02:2b:9b:88:87:75:59:d0:fc:67:
         46:29:d4:e3:07:14:17:31:60:c0:c8:c3:00:c6:a8:10:d0:42:
         65:f8:4a:97:d8:11:f5:17:33:65:60:cc:7d:9c:95:64:16:35:
         ff:3c:69:99:13:72:25:e4:50:18:9c:ea:e6:b7:09:a7:15:72:
         0d:26:36:5b:c9:a2:57:b5:cd:50:69:5b:19:10:53:aa:d8:b8:
         39:21:be:96:f2:b9:cf:28:05:0c:53:72:88:a7:7d:f4:e4:f1:
         3d:2e:65:03:50:79:c0:3f:3d:ab:68:0b:36:c2:a8:55:a8:95:
         2c:c3:74:d1:f8:0e:a2:d1:89:ee:46:69:2e:08:df:2f:95:9f:
         07:70:fa:7a:b3:71:5e:7c:8c:82:6b:f1:80:39:0b:e7:4f:bf:
         75:70:c3:4f:23:f6:a2:89:ad:fc:b7:a4:24:f8:a1:b8:fe:a3:
         02:bb:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org