Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          /YRKy/gGOEcAn1Yo2rjKUK2qGwjyC8KuFr2wRjfHZqk=
Subject key identifier:   90:0D:6E:49:D5:39:D3:89:17:EE:E4:EE:64:0A:7D:95:9F:58:A1:5E
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       5BD51098038B584228F68C4B030A01D15223525B
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:29:00 +0000
ROA not before:           Thu 04 Apr 2024 07:24:00 +0000
ROA not after:            Thu 03 Apr 2025 07:29:00 +0000
asID:                     263146
IP address blocks:        2804:1778:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d5:10:98:03:8b:58:42:28:f6:8c:4b:03:0a:01:d1:52:23:52:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:24:00 2024 GMT
            Not After : Apr  3 07:29:00 2025 GMT
        Subject: CN=900D6E49D539D38917EEE4EE640A7D959F58A15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:34:6d:f6:c1:ac:ac:77:5b:9d:ef:72:c4:
                    2c:02:a5:93:bb:d1:7a:44:f9:a8:d8:6c:99:71:69:
                    88:c7:87:99:83:9e:0f:32:7e:de:6f:fc:0e:e2:9c:
                    af:7b:c9:a4:cd:85:4a:7b:a2:e5:4d:68:94:f7:79:
                    47:ac:24:09:c9:14:16:2a:59:4d:a0:e1:91:ea:30:
                    28:50:b9:ae:47:23:65:a6:e8:61:41:3c:8a:e7:87:
                    03:d8:f5:2e:d0:87:de:8d:0e:0a:59:3f:53:7e:be:
                    5c:a9:8a:a9:04:97:07:8b:49:b8:51:13:12:d6:17:
                    43:66:1f:17:be:75:82:75:6b:78:83:8b:31:10:f8:
                    ef:ff:45:71:97:2f:6e:8d:be:ad:a7:46:02:51:b7:
                    d9:a8:76:bf:ef:b5:b6:55:1e:ac:7a:5a:bf:68:21:
                    82:cd:18:87:0d:b7:56:9f:b9:1e:5c:94:af:83:7e:
                    ac:22:e1:0a:3c:5d:d4:9f:b9:c1:89:5e:3e:0e:ca:
                    97:26:d6:fe:1c:ed:21:da:86:3e:91:af:fd:55:fd:
                    20:39:c5:46:40:08:93:ca:e0:7d:aa:54:4a:5b:67:
                    74:25:f2:df:d2:b2:32:12:7e:90:22:f8:e4:47:7b:
                    dd:b0:c8:29:d9:a8:76:02:ac:b9:41:de:70:4e:1c:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:6E:49:D5:39:D3:89:17:EE:E4:EE:64:0A:7D:95:9F:58:A1:5E
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a2:70:31:15:e5:db:0c:b2:55:45:ba:99:1c:d3:59:49:21:8a:
         98:e9:c3:17:96:12:d6:30:07:68:f6:4c:fb:e5:88:0c:95:62:
         c1:9b:f2:50:8b:b9:ad:2d:96:d0:7d:aa:cd:a3:af:9c:07:ce:
         70:c6:1f:eb:48:77:8d:30:a3:36:12:ac:a7:66:3a:7f:0b:79:
         49:11:be:4a:97:36:8e:89:d7:dd:d4:a7:11:50:62:f7:31:f5:
         e1:6e:de:17:b4:d9:c2:c7:c0:04:d8:03:17:c0:b2:4b:c8:20:
         b7:7c:b2:6b:4c:a7:67:97:6b:f0:88:a8:0d:de:98:ab:af:e2:
         20:72:81:50:f2:8a:fc:c7:98:36:8e:60:48:84:77:9d:d3:90:
         18:7f:fe:66:31:d8:8e:b4:96:93:23:af:ee:e9:ce:62:1d:b8:
         e3:0a:5d:e7:1d:97:39:d3:7c:8f:16:56:68:02:96:dc:6c:a9:
         72:9e:b9:09:4e:4e:e1:18:e7:51:64:ff:7c:71:a2:31:80:78:
         86:d9:6f:ca:97:91:a3:21:21:b8:81:f6:19:ae:59:5c:02:5d:
         c7:87:22:9b:5b:f5:7a:53:b9:28:b8:15:b7:fd:fd:dd:f4:db:
         01:6e:10:bc:2a:ab:06:90:ae:d8:3a:42:9a:cc:eb:dc:2f:c8:
         30:f9:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org