Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa
File:                     323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa (raw, json)
Hash identifier:          iI8IJiLzqUO6TERm8sWUioWwa3QmjcfMN/Oj6q1gsF0=
Subject key identifier:   13:FA:49:68:13:6F:09:C9:98:73:B9:5D:5B:E9:00:01:D7:AE:DF:F9
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       1288AA336CCA41CB3D15E3731626D2BF14BD8D09
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     266623
IP address blocks:        2804:3ed4:cc00::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:88:aa:33:6c:ca:41:cb:3d:15:e3:73:16:26:d2:bf:14:bd:8d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject: CN=13FA4968136F09C99873B95D5BE90001D7AEDFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:4a:95:ef:ce:2f:b3:6a:12:30:37:4a:39:
                    47:08:d0:0b:0b:a6:2f:1e:6b:a7:0d:f5:bd:a4:42:
                    8e:3d:d8:8a:74:7f:bd:b9:d6:33:0e:85:8a:45:49:
                    26:d2:17:b3:07:04:4c:f0:78:1d:95:18:1c:22:47:
                    66:50:0e:74:8b:39:1d:d8:a8:8c:bb:82:2e:76:ed:
                    3d:76:ec:3c:2e:2c:3d:b7:fd:7b:2a:9d:90:6b:a6:
                    af:21:7a:08:d9:44:75:29:2d:3a:6b:8b:89:a7:19:
                    7f:0d:c1:af:2c:60:af:f1:14:d1:4f:b7:06:6a:a9:
                    19:63:e1:d2:ab:7c:cc:ab:e4:35:30:50:ff:11:e5:
                    cd:9f:0c:79:aa:2c:3a:08:a0:fc:d2:20:e3:ad:03:
                    d4:93:6b:e3:8f:f5:e3:dc:a0:8e:1f:d4:5b:50:bf:
                    b8:3c:23:0f:8e:3c:ae:10:7e:0f:f4:d0:14:25:7b:
                    17:53:ca:9d:ba:24:30:d3:7e:fb:94:5b:aa:42:31:
                    90:77:76:43:ca:4d:93:e7:8b:58:4b:b1:b9:ed:f8:
                    50:0b:ed:f4:1f:1b:fe:4c:05:24:b0:07:47:d6:1a:
                    c0:54:f4:66:52:c8:27:0e:02:31:f5:cf:36:7d:e1:
                    0f:fa:26:34:4d:54:06:8c:c5:ea:66:65:f7:7b:cd:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:49:68:13:6F:09:C9:98:73:B9:5D:5B:E9:00:01:D7:AE:DF:F9
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:cc00::/46

    Signature Algorithm: sha256WithRSAEncryption
         23:93:56:13:42:c5:24:9d:21:a0:a9:10:90:cd:ae:b7:0d:00:
         95:b3:a7:af:e4:7b:ab:32:82:fc:b9:b4:ce:5a:4a:c6:d9:31:
         71:2f:02:2d:26:e8:f9:a5:10:26:36:35:d4:d6:00:b1:68:95:
         8c:b0:4f:6e:0a:75:40:a9:90:0b:58:da:f0:c8:73:7c:f4:15:
         73:7c:31:0f:f8:6a:7d:13:b3:98:03:eb:e8:6d:13:a3:38:47:
         0d:52:43:32:98:b5:5f:d3:b4:60:4f:e1:fd:ea:e1:ee:44:89:
         3b:12:c8:56:66:c1:9f:26:5e:ab:17:c0:3f:94:d2:9f:5f:58:
         16:21:a0:7d:03:a0:07:8d:f6:1c:b9:28:a8:59:5f:ca:4b:ab:
         4d:ea:50:bc:c7:18:05:d7:55:d3:0e:9a:fb:af:a0:13:62:6c:
         7c:1d:ae:31:53:c3:c0:92:3e:2f:65:d0:f3:1c:9c:66:b1:1c:
         4d:1b:b4:7e:a7:e1:02:0f:27:98:43:9d:b9:55:79:a6:07:1b:
         2c:cf:76:36:9c:ae:89:1b:e2:6d:2b:f4:33:fc:f3:02:d6:f9:
         2d:7a:66:0d:7e:c2:c2:dd:8e:f3:ca:5c:a5:38:b6:52:7f:17:
         a5:51:06:8b:d7:5a:de:00:a5:f1:da:db:f1:7d:d4:79:ce:96:
         d7:20:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org