Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a313030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a313030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          CFPZBeKbb8YWcRIEbjQen3ygL5XNfoXVSRlehUEkgzk=
Subject key identifier:   97:00:31:51:0D:30:3E:E8:1F:51:E8:2B:D7:35:8E:D1:1A:68:83:11
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       729C8A7BD18F0847B773D3A280DBFD439F58CEB7
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a313030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:30 +0000
ROA not before:           Thu 04 Apr 2024 23:04:30 +0000
ROA not after:            Thu 03 Apr 2025 23:09:30 +0000
asID:                     270266
IP address blocks:        2804:6960:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9c:8a:7b:d1:8f:08:47:b7:73:d3:a2:80:db:fd:43:9f:58:ce:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:30 2024 GMT
            Not After : Apr  3 23:09:30 2025 GMT
        Subject: CN=970031510D303EE81F51E82BD7358ED11A688311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:da:42:fd:ab:41:39:36:c8:42:90:e7:e4:
                    42:66:4e:46:32:86:dd:fa:22:60:e6:16:6b:87:00:
                    29:0c:ad:cb:de:1e:32:a8:c8:5c:95:2d:14:be:6e:
                    69:40:60:87:6b:43:7a:9a:72:11:06:ae:06:87:e3:
                    e5:a2:6e:96:8a:8c:fa:d0:f1:a4:f6:52:35:d0:37:
                    f0:b7:bb:3c:d2:f8:87:69:34:8f:b7:e9:8a:d9:2f:
                    75:52:ed:e3:45:00:30:27:9e:fe:50:1b:9d:bb:cc:
                    03:92:36:82:8f:77:eb:5d:7c:48:ae:73:8d:4d:69:
                    8e:4e:93:34:b8:00:5b:9a:87:fb:2b:92:fd:a8:9f:
                    9a:2e:7f:69:d7:43:85:b7:0c:94:bb:3f:11:62:23:
                    d7:58:b2:d2:31:37:87:1a:6e:5f:bf:94:3a:ac:07:
                    ad:9e:91:bf:7a:38:de:89:1f:03:c0:e6:a8:95:9c:
                    d4:94:82:7f:b4:b2:6c:37:93:18:d5:e3:30:98:07:
                    c8:3a:13:3a:c2:83:20:ea:69:ac:aa:91:65:77:45:
                    c7:b3:90:cc:40:0e:42:26:8b:8c:10:53:80:aa:33:
                    50:dd:ed:9b:86:4c:52:a0:d3:87:ff:b9:b5:5d:ea:
                    f3:7d:25:bb:b9:c7:c1:11:c7:d6:20:e4:6b:77:24:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:00:31:51:0D:30:3E:E8:1F:51:E8:2B:D7:35:8E:D1:1A:68:83:11
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a313030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:cd:5e:b4:d6:6b:4f:89:a1:67:65:22:db:a4:6e:52:bf:c7:
         6a:09:c2:b7:17:62:97:fb:7c:7c:11:31:3e:b0:20:5c:af:dc:
         5e:cb:07:81:d6:6e:9f:2c:ae:4b:87:c1:6b:1a:24:77:0a:64:
         ca:4d:29:2f:83:cc:0d:30:fe:1e:90:10:9a:fc:36:68:f4:86:
         46:76:e0:79:16:bb:7b:6e:47:57:fa:0d:7f:a6:b8:0c:b9:8c:
         c3:1d:50:c0:c4:98:ee:ae:7d:d5:a3:45:c4:80:ee:e9:e1:19:
         06:c9:1f:00:10:3b:28:83:24:ad:07:6c:44:a1:4b:97:1d:92:
         c0:00:27:06:a5:43:47:91:40:74:e2:e3:c8:f1:cd:67:04:fb:
         cb:57:e0:49:11:7c:13:ab:78:54:63:9b:63:e2:19:9d:e1:9b:
         9b:1b:ca:62:62:1c:08:a3:93:62:a0:fa:e6:55:ad:f3:a9:99:
         7e:ee:2b:8c:1d:80:36:38:b1:70:1e:eb:71:f3:1d:fa:ce:4e:
         63:48:c7:f1:44:73:11:8d:e8:07:9c:5a:d2:24:40:bb:65:d4:
         00:55:18:fe:f3:b9:7e:c6:cd:94:b3:7e:39:4b:33:e7:70:d0:
         6f:8e:28:f8:14:0a:19:4c:4f:b1:03:58:a4:9d:d1:07:2a:7a:
         3f:2f:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:56 2024 by rpki-client on console-fra.rpki-client.org