Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a323030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          9fwoc+7bghJ6Isp4vTY1aXpU8RCizJMYHBhz55WCL3k=
Subject key identifier:   6B:69:72:6C:4B:FA:B8:38:44:2F:99:4E:72:41:D6:A9:79:D8:3D:30
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       463884777EF33DBF017DA33900443A5ECA77F622
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:39:48 +0000
ROA not before:           Tue 06 Aug 2024 13:34:48 +0000
ROA not after:            Tue 05 Aug 2025 13:39:48 +0000
asID:                     270266
IP address blocks:        2804:6960:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:38:84:77:7e:f3:3d:bf:01:7d:a3:39:00:44:3a:5e:ca:77:f6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:34:48 2024 GMT
            Not After : Aug  5 13:39:48 2025 GMT
        Subject: CN=6B69726C4BFAB838442F994E7241D6A979D83D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9e:4d:da:f6:e2:b6:08:31:9d:f5:1d:03:fc:
                    2f:39:65:61:dd:c1:b4:96:84:ca:a7:39:c1:65:95:
                    78:0b:b5:bd:20:ed:91:6b:09:32:b2:de:18:50:a4:
                    11:66:7d:37:7e:aa:fc:eb:db:b4:02:f9:eb:f7:d1:
                    a2:7a:64:01:ae:37:7c:2f:b9:c5:4a:ed:69:f4:74:
                    79:1f:7c:c0:c7:04:b9:bd:ff:15:fc:df:37:61:11:
                    a8:e9:af:e7:f2:59:e6:b0:d5:65:0f:19:5a:db:fa:
                    e3:d1:4d:68:ad:64:ef:de:2b:f8:56:51:b8:f2:b5:
                    96:13:e8:76:cb:1d:9e:ef:72:92:d0:11:4f:b7:0d:
                    7a:b0:3a:e6:15:70:91:c7:f4:dd:fe:6c:75:5d:20:
                    ca:71:de:61:fe:2e:97:79:7a:f0:f2:49:a6:b8:9d:
                    1e:cb:84:b3:0f:4c:6f:03:5e:52:9f:76:9e:5d:7e:
                    71:3a:e8:13:32:7b:a5:14:c4:ba:21:d9:4c:29:c7:
                    03:e4:7f:74:0a:a5:cc:1f:60:ee:72:e9:be:ce:31:
                    9b:88:e0:aa:f3:aa:2a:81:06:ee:21:6f:9f:dc:b4:
                    0c:e5:69:4a:20:05:71:02:8d:42:a9:45:bd:30:26:
                    c7:e8:19:a4:e8:c3:0b:9a:22:d2:53:9b:04:ba:01:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:69:72:6C:4B:FA:B8:38:44:2F:99:4E:72:41:D6:A9:79:D8:3D:30
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:73:f9:19:b6:2a:bd:04:7c:08:5e:66:05:b1:6f:3c:ca:
         83:b5:39:4e:fc:4e:c0:e5:7a:2a:16:d0:65:3d:c9:26:fa:2a:
         45:7b:41:5b:65:bc:10:fc:dd:2c:ef:34:88:5a:28:10:fe:69:
         05:05:96:5f:71:a3:91:68:76:0d:2d:c1:fd:48:9d:e4:f4:2e:
         83:b0:ee:6c:e2:08:f4:9c:c3:6f:04:21:e2:a3:4c:8b:58:10:
         df:0a:93:b0:0a:07:4f:1d:2c:c9:a5:02:7e:c6:3c:c8:d6:0f:
         e8:42:e4:fc:d2:bb:67:05:2b:e1:07:c1:ec:e0:a3:b4:b9:1d:
         00:bb:85:ad:ea:28:7b:dc:3f:5c:91:9e:41:41:92:4e:bf:88:
         e5:f7:4e:5c:86:7a:f1:8e:19:02:7a:f9:75:c6:b3:26:fc:89:
         a0:17:54:c4:de:4b:0a:55:11:2b:b8:26:6c:67:43:99:ea:b4:
         28:ba:21:69:9f:42:07:b3:ae:6d:ed:a8:19:25:d7:83:c7:72:
         a5:0c:bd:3e:a0:1f:d0:56:8c:13:bc:e7:65:67:84:45:e1:6e:
         3c:b9:bb:a7:23:79:a6:6e:2c:1c:f5:20:74:0a:bf:ff:35:ec:
         66:2f:c5:ca:45:20:c1:f3:d4:9f:f7:09:60:6f:50:67:72:0f:
         e5:c9:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:18 2024 by rpki-client on console-fra.rpki-client.org