Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a363030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          p8SZ4Za75iegi+spZsGv+Wtfq1CYBCoJX0s1S7VugRU=
Subject key identifier:   64:CD:30:A6:C0:B9:BA:3B:58:00:F1:B1:58:45:87:E2:FA:EE:B1:5B
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       0634B53B3F57EB8324393EE201CE4B076AB872B1
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:39:56 +0000
ROA not before:           Tue 06 Aug 2024 13:34:56 +0000
ROA not after:            Tue 05 Aug 2025 13:39:56 +0000
asID:                     270266
IP address blocks:        2804:6960:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:34:b5:3b:3f:57:eb:83:24:39:3e:e2:01:ce:4b:07:6a:b8:72:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:34:56 2024 GMT
            Not After : Aug  5 13:39:56 2025 GMT
        Subject: CN=64CD30A6C0B9BA3B5800F1B1584587E2FAEEB15B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ba:d6:f3:0a:3a:64:d5:62:d9:80:f4:21:31:
                    88:e2:40:3c:13:37:6f:30:b7:37:d5:0e:a6:8a:33:
                    7e:90:e2:73:d4:d5:72:6d:bc:af:e8:14:28:60:30:
                    9b:16:92:b7:18:ee:4b:9d:c8:54:ad:6e:29:90:f7:
                    72:7b:c4:4c:ce:45:d1:45:bd:ef:f6:15:bf:1a:c5:
                    3d:84:ed:ec:1f:dd:b6:88:8a:fc:d5:87:00:8d:e9:
                    33:7c:7c:15:61:32:d2:c1:10:1d:7e:71:cf:98:99:
                    c9:01:74:ce:51:1b:39:39:66:74:98:9d:88:4e:2e:
                    a2:f7:66:de:a8:0e:ae:c0:b1:72:9b:ab:08:79:79:
                    f5:5d:3f:54:dd:c8:ae:1f:7a:5f:9a:67:9f:5d:71:
                    32:51:e5:ed:d0:f3:f8:15:6d:df:1b:89:e9:9c:14:
                    37:b4:a1:e7:c6:21:10:9e:cc:1e:fd:80:8c:87:e6:
                    6c:aa:1b:e0:00:b0:ed:d2:30:1d:c1:d6:f5:ae:fb:
                    de:90:c9:99:19:c4:81:d2:8e:8a:50:0c:bb:23:3b:
                    5c:ea:34:15:e3:ba:bb:a6:76:9a:68:d6:d1:a0:04:
                    61:ed:3e:75:78:0a:e4:fb:68:8d:10:b8:a7:7d:d7:
                    a6:d9:42:90:3a:ff:a7:6b:07:87:29:ca:7f:10:dc:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CD:30:A6:C0:B9:BA:3B:58:00:F1:B1:58:45:87:E2:FA:EE:B1:5B
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a363030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         e0:e9:8a:14:32:fb:a9:6a:53:3c:f9:9d:b2:ab:1e:d2:71:51:
         06:97:d7:bf:38:4b:a8:20:3f:53:8e:49:a5:32:de:3a:7b:48:
         06:77:c6:bb:5e:9d:7d:29:cc:e4:44:7f:ba:57:09:bb:fc:d4:
         de:54:3c:b4:51:f7:ba:c8:c9:f0:03:dc:4f:ad:88:b7:bb:a1:
         f5:7a:5b:57:aa:72:52:69:98:0c:58:b8:a0:78:a4:61:09:41:
         8c:7e:44:50:50:aa:54:ca:35:f9:ab:eb:08:98:f0:2d:09:e5:
         df:2d:0c:ac:9e:09:e8:d4:1b:bc:a8:78:bf:fe:e2:e5:7f:a4:
         83:c6:7c:b8:38:f7:36:ea:a9:f0:2c:a4:31:ca:bd:5c:64:25:
         ef:4d:e2:fe:6a:64:78:d8:f8:c3:9f:97:3e:6c:00:7e:92:66:
         56:4f:54:39:7d:4e:37:47:1e:5c:1f:0f:3c:5e:97:f0:b4:cd:
         be:e7:fa:ef:51:e3:7f:8d:05:f6:0c:6a:9b:a5:4d:9e:4d:d3:
         b0:79:67:bc:30:e4:a9:3e:c6:2c:da:25:7e:a7:1f:1d:8d:18:
         06:c4:d2:60:d9:ca:6d:66:97:8f:06:23:05:45:3f:74:be:71:
         cb:f1:6b:ec:e8:d4:20:e7:b2:4d:a2:d1:f9:5b:d5:a1:1f:c1:
         9c:ae:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:21 2024 by rpki-client on console-ams.rpki-client.org