Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          nxR8A9DRffbVP0dozfjBE3ka/pI8v2/NiqYkGYz74pQ=
Subject key identifier:   BC:B6:EA:F8:6A:16:CC:17:63:EF:EC:29:D0:EA:86:CB:85:1E:59:54
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       4A47267534B5292C79A1C9C750B9CF2C16554117
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:50 +0000
ROA not before:           Wed 03 Apr 2024 18:26:50 +0000
ROA not after:            Wed 02 Apr 2025 18:31:50 +0000
asID:                     266623
IP address blocks:        2804:3ed4:aa72::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:47:26:75:34:b5:29:2c:79:a1:c9:c7:50:b9:cf:2c:16:55:41:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:50 2024 GMT
            Not After : Apr  2 18:31:50 2025 GMT
        Subject: CN=BCB6EAF86A16CC1763EFEC29D0EA86CB851E5954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c2:7d:a9:98:98:b8:79:d4:ea:7e:6f:a9:b7:
                    75:c4:b1:d6:3d:44:0a:33:db:1b:2d:5e:f1:d3:38:
                    b3:96:34:68:92:ae:ce:d9:ff:56:f1:36:e6:23:b8:
                    58:cc:85:09:17:a7:a3:d8:3e:38:be:0f:68:56:9a:
                    75:ff:0d:ef:06:8c:c4:a9:61:d1:dd:e9:eb:54:58:
                    df:01:f6:f6:fa:95:a8:b6:75:01:08:9c:6e:dc:16:
                    d2:b8:c4:36:1e:2b:5f:b6:cc:af:0e:36:4f:ec:75:
                    6b:cc:95:61:82:cd:7e:2b:ce:55:e5:90:0e:7b:55:
                    d8:07:37:03:c3:b3:42:11:15:df:a8:fa:ce:33:d5:
                    60:a3:55:0c:bf:2e:b6:48:76:2c:db:42:61:91:2a:
                    b2:5d:14:00:89:62:cf:6e:27:5b:cb:e8:3f:5f:bc:
                    9d:9f:80:a7:82:5d:26:b3:01:86:cb:f3:af:a2:5b:
                    fd:f3:8b:3a:8e:b9:b1:07:4c:9b:e7:e5:bb:59:6a:
                    1f:48:f0:83:62:d8:c5:10:35:21:55:c9:ec:0c:5e:
                    a3:8d:da:7e:8a:f7:55:5f:02:ed:bd:b5:f4:09:6e:
                    93:9a:2c:56:af:bd:5d:7b:41:3c:38:4f:ed:f9:34:
                    e0:c0:41:3f:06:83:16:03:74:69:f0:41:62:b6:9c:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B6:EA:F8:6A:16:CC:17:63:EF:EC:29:D0:EA:86:CB:85:1E:59:54
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:aa72::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:89:36:e0:36:6e:75:b3:21:53:fa:a2:75:6c:8b:b0:36:
         9d:a4:81:6b:1c:1d:8c:d0:10:91:02:18:39:56:ea:04:47:ba:
         70:43:8f:29:38:45:2c:da:91:04:b7:e0:f2:e5:49:55:cc:51:
         d6:23:b5:92:4d:d4:fc:3b:64:fe:2d:5f:72:ff:81:29:cf:d5:
         90:0a:40:7e:f2:5d:63:16:04:3b:49:f5:79:43:de:f5:5f:9a:
         f9:a0:4a:ff:ef:55:e9:23:30:99:0b:22:25:bb:61:f3:85:ce:
         23:a6:04:39:d2:49:11:cf:b7:a3:9d:c5:bb:5b:6e:f8:ff:a5:
         e8:52:88:0e:bd:b1:47:84:e9:43:7c:bf:e3:91:16:86:71:6e:
         9e:8c:70:a1:f0:e4:b0:3e:57:a7:28:c1:6f:c2:f2:15:d7:5a:
         9a:a3:1a:44:b3:aa:17:91:ef:11:55:66:81:4e:93:f8:f7:c1:
         06:c0:28:85:83:41:82:52:cd:d8:66:be:e8:14:cc:f9:56:e2:
         14:85:d2:5c:aa:31:b3:bd:7b:fb:e2:20:b0:88:b2:71:eb:9b:
         2f:bc:31:44:db:6a:73:14:f9:c4:d5:6a:91:7d:b3:fa:5b:58:
         52:04:82:e6:b1:fc:34:5b:92:1f:02:d2:bd:31:5a:95:c3:96:
         35:41:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org