Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a333030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a333030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          qb2vOMV6nWaQ4Vx3UG2rEipWZEm0Df2knDp4E8PXWRg=
Subject key identifier:   9D:1A:C7:37:14:13:EC:D9:69:8F:79:E3:91:49:FC:4B:B2:4B:AA:B1
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       202EA96546EE7D78356357A5CE7532E9D3AA29FE
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a333030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:26 +0000
ROA not before:           Thu 04 Apr 2024 23:04:26 +0000
ROA not after:            Thu 03 Apr 2025 23:09:26 +0000
asID:                     270266
IP address blocks:        2804:6960:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2e:a9:65:46:ee:7d:78:35:63:57:a5:ce:75:32:e9:d3:aa:29:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:26 2024 GMT
            Not After : Apr  3 23:09:26 2025 GMT
        Subject: CN=9D1AC7371413ECD9698F79E39149FC4BB24BAAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:66:d6:c2:6a:ac:35:45:7a:1b:31:7a:5a:
                    3c:80:61:ec:f5:a6:e0:00:d7:f3:3a:ee:7e:9f:2d:
                    23:55:e1:18:ca:7a:17:36:8a:c5:52:fa:dc:ce:26:
                    7b:f6:ee:8c:aa:30:45:53:a7:06:d7:2e:c1:a2:1a:
                    99:de:57:e7:ee:e3:87:52:42:5e:4e:75:bf:2f:fc:
                    0f:23:b0:16:dc:dc:2e:86:01:2c:e7:59:8f:e3:e8:
                    ea:58:70:da:3d:b4:e5:c1:dc:a2:14:77:ab:45:c3:
                    d3:7f:a4:ce:48:43:fe:e3:56:33:3c:06:73:6b:a3:
                    39:c9:3a:30:c9:d4:45:b4:79:55:16:7a:c2:a6:83:
                    02:7d:cb:0f:68:f1:53:2e:ba:f6:04:23:3b:30:3e:
                    84:fe:aa:03:ba:eb:cb:bc:46:ea:4a:51:55:da:1a:
                    94:22:3d:6b:8a:a4:12:a0:4c:79:a4:36:2c:69:97:
                    04:ec:e4:30:0c:b3:7c:db:96:28:de:9d:5d:e9:50:
                    2a:05:8c:ba:cf:76:07:0f:a8:e5:db:bc:92:97:0b:
                    46:b4:8b:f2:71:61:6b:a9:ea:cf:54:c7:a4:8a:ec:
                    c8:7f:e5:ad:60:36:22:4d:e0:a7:d3:71:11:7a:25:
                    59:65:83:a9:a4:11:ab:27:d5:bf:d5:f9:e7:69:da:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1A:C7:37:14:13:EC:D9:69:8F:79:E3:91:49:FC:4B:B2:4B:AA:B1
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a333030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:e7:2c:a8:8f:fb:6d:a3:fe:03:24:23:c1:38:50:ea:e9:69:
         c1:b1:30:45:47:d4:b6:4a:62:f0:1d:d9:d3:f2:3e:d8:53:f0:
         6d:2e:82:da:52:3f:5a:55:89:6a:38:3d:10:34:f4:20:e0:73:
         ff:f3:2c:3f:d2:a9:6a:f4:44:45:9b:5f:6f:76:53:f5:16:a6:
         28:47:1f:0a:2e:80:d5:77:73:75:ae:c8:39:5c:3e:95:fb:dd:
         ba:6d:d6:de:ce:e8:47:d7:28:36:9a:48:6c:b1:d3:b0:b2:85:
         8c:d0:84:af:82:90:81:3d:1a:84:7d:93:6c:09:64:d3:94:ba:
         e2:b9:a1:b0:76:30:9b:18:89:e4:8d:84:40:61:3a:a8:94:52:
         2e:c0:b5:83:64:63:d3:e5:6b:5a:e8:b1:87:19:1d:c4:49:a1:
         9a:f8:0b:d7:21:f2:8d:e4:04:40:99:e5:79:dc:7c:cb:8f:59:
         34:ee:38:b2:44:2d:ff:a4:6d:67:4c:c3:bb:96:cb:04:ba:fd:
         00:8f:0d:db:f1:f5:53:52:a3:38:01:22:56:ca:de:8d:e7:ef:
         5a:44:9c:27:74:f1:1e:8e:e0:9a:85:9b:f4:56:4b:bf:19:0f:
         c9:06:d7:56:da:5e:7e:cc:9b:42:55:ad:9a:03:63:76:a4:22:
         15:b9:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:38 2024 by rpki-client on console-ams.rpki-client.org