Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/323830343a343663383a3a2f33322d3334203d3e20323637303131.roa
File:                     323830343a343663383a3a2f33322d3334203d3e20323637303131.roa (raw, json)
Hash identifier:          d4XyvIGnfcPpOGYZeTEC+AlzCrhw+c6dQIHs37K0pHE=
Subject key identifier:   E1:8C:60:9E:38:FE:C2:A3:C5:74:55:06:66:DE:01:3D:B9:D6:21:2A
Certificate issuer:       /CN=9BD27D2D733EE404F145017F5543209E8B6B11D6
Certificate serial:       1404B42CAD64761090E4FE786BB431386262A303
Authority key identifier: 9B:D2:7D:2D:73:3E:E4:04:F1:45:01:7F:55:43:20:9E:8B:6B:11:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/323830343a343663383a3a2f33322d3334203d3e20323637303131.roa
Signing time:             Thu 04 Apr 2024 00:52:14 +0000
ROA not before:           Thu 04 Apr 2024 00:47:14 +0000
ROA not after:            Thu 03 Apr 2025 00:52:14 +0000
asID:                     267011
IP address blocks:        2804:46c8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.crl
                          rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:04:b4:2c:ad:64:76:10:90:e4:fe:78:6b:b4:31:38:62:62:a3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD27D2D733EE404F145017F5543209E8B6B11D6
        Validity
            Not Before: Apr  4 00:47:14 2024 GMT
            Not After : Apr  3 00:52:14 2025 GMT
        Subject: CN=E18C609E38FEC2A3C574550666DE013DB9D6212A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:71:d4:8a:a1:ac:d7:ae:46:6f:de:c2:08:
                    37:cd:54:38:cf:e2:2e:f4:6e:cd:4e:52:44:56:4b:
                    7f:e1:a4:c0:ce:cf:b5:1a:fc:99:c3:83:0f:aa:7a:
                    f3:d4:7e:c4:40:df:54:f9:30:a5:4f:08:1a:d4:74:
                    00:38:ab:48:e0:5e:89:71:7c:3b:f4:a5:c7:5f:5e:
                    b9:47:79:15:89:70:5d:e4:0a:86:da:05:f4:71:bb:
                    2f:43:4e:ae:15:fe:4e:c2:d5:1b:fa:46:1b:5a:cc:
                    89:5f:46:8f:bd:5d:53:1f:77:f4:b7:57:61:a4:12:
                    e9:77:f3:43:3d:5c:27:65:e5:93:7c:63:9d:75:df:
                    84:f7:05:3f:4f:d2:5b:8d:c7:42:31:60:88:bb:f1:
                    ea:83:40:3c:8d:3d:03:d3:f8:41:33:9f:07:36:d9:
                    11:b2:a5:63:58:bb:f0:02:67:03:85:c8:14:5a:4c:
                    7c:ee:0a:f1:08:6b:86:9f:28:4d:03:64:9b:cb:e4:
                    32:68:20:c9:40:60:8a:4a:af:7e:f2:85:a3:ba:17:
                    bc:46:d5:21:0a:4c:53:35:c6:6c:69:e1:a6:06:4d:
                    f0:9c:a1:b9:bb:1a:6a:12:e1:19:7f:19:b0:5f:21:
                    2a:c7:6d:bc:97:7d:fc:c2:48:7b:3e:44:75:5e:b5:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:60:9E:38:FE:C2:A3:C5:74:55:06:66:DE:01:3D:B9:D6:21:2A
            X509v3 Authority Key Identifier:
                keyid:9B:D2:7D:2D:73:3E:E4:04:F1:45:01:7F:55:43:20:9E:8B:6B:11:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/323830343a343663383a3a2f33322d3334203d3e20323637303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:10:97:45:0e:b0:50:aa:00:a6:64:6e:26:b9:a1:42:92:
         0c:31:09:80:5e:b8:70:74:b6:19:0c:4f:0c:ba:dc:6d:92:10:
         6b:30:27:4b:94:b5:49:12:d7:9b:c1:f0:0e:55:c1:b6:a4:0e:
         69:73:17:8b:1a:18:a9:9d:9d:6f:7a:34:0e:ab:c5:6a:d8:1c:
         d8:c6:60:99:0f:f4:c6:02:fd:5f:db:d2:0a:29:eb:74:c8:d2:
         4e:93:02:af:73:b5:eb:7d:2c:3b:dd:3e:dc:04:5e:9f:af:7d:
         6d:34:4a:4b:c0:f0:aa:cc:44:ee:e6:39:87:96:06:12:f5:d2:
         1c:e5:0c:8b:c4:ba:3d:46:d6:7e:ac:57:07:c8:71:09:ac:b0:
         ba:d6:ee:44:b0:a9:5b:2a:f5:61:3b:27:fe:15:02:25:4f:09:
         11:11:e2:12:a2:b7:31:d7:c7:b3:63:55:26:9f:e2:c9:16:a6:
         ae:5f:6b:1b:6c:e4:79:e2:ec:e1:3f:4a:a5:f4:e7:c4:6c:2a:
         1e:6f:46:5e:0c:90:d8:77:d1:36:06:f1:a2:2d:67:1e:b7:f1:
         b5:af:7d:f3:f4:11:a4:16:48:fb:b1:9d:30:ae:a2:b3:61:a5:
         cf:8c:8c:6c:9a:8f:dc:37:a3:3c:28:7d:f8:14:b9:98:eb:ef:
         f1:d0:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:46 2024 by rpki-client on console-ams.rpki-client.org