Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa
File:                     323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa (raw, json)
Hash identifier:          5MwXtEydNgAvmKUDcltaWTKtyiozyIz6jRKFC1eRWqU=
Subject key identifier:   51:14:75:8E:FC:16:B8:00:74:67:B4:F5:7D:64:15:8B:92:AF:C3:3C
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       1F288BF3AEDA06BD14CC63A348A9BD471F4EC8EF
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:39 +0000
ROA not before:           Thu 04 Apr 2024 23:04:39 +0000
ROA not after:            Thu 03 Apr 2025 23:09:39 +0000
asID:                     270266
IP address blocks:        2804:6960:6800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:28:8b:f3:ae:da:06:bd:14:cc:63:a3:48:a9:bd:47:1f:4e:c8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:39 2024 GMT
            Not After : Apr  3 23:09:39 2025 GMT
        Subject: CN=5114758EFC16B8007467B4F57D64158B92AFC33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:0f:9f:99:7f:7b:9e:b2:65:f2:74:51:5f:
                    df:02:54:ac:6a:c0:3b:48:34:5e:15:ef:d6:d7:1f:
                    0f:06:0f:cc:40:e7:e9:79:ff:ea:4a:16:f0:d4:fc:
                    17:dd:1f:5a:a9:c7:d2:ef:54:af:e4:8b:4c:c8:ee:
                    8d:7f:58:7e:ef:f3:0e:e9:a4:c7:3d:b4:d7:7d:22:
                    ac:5e:49:46:93:c7:13:2c:40:61:2c:c1:ac:2c:50:
                    63:bb:93:aa:0c:f8:a7:00:e4:ce:4a:48:96:a4:76:
                    f2:5b:cb:f0:b0:92:4f:ad:7c:ea:f2:06:42:70:76:
                    c3:ed:61:f1:1a:8c:f7:6d:71:b0:2a:72:79:5c:1c:
                    e3:33:c7:95:c4:eb:fe:f5:8f:40:af:27:9c:e9:7e:
                    83:a6:a1:11:1a:3c:35:07:3b:08:72:a7:71:fb:95:
                    b2:9e:df:84:99:4d:c7:e7:b0:ab:59:e9:4e:eb:e0:
                    d8:cc:75:cd:a3:7b:78:44:12:91:61:66:6d:5b:a5:
                    45:b8:6a:22:91:01:cf:22:63:df:e2:5b:e7:09:e6:
                    28:01:3d:70:48:e7:5b:e4:b0:1a:ab:91:61:e0:de:
                    61:1a:7b:d6:ce:a2:b8:e7:7d:05:dd:0e:2e:ac:2d:
                    52:9a:f5:a1:0b:8d:7e:3b:53:ec:fb:1c:7d:ac:4b:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:14:75:8E:FC:16:B8:00:74:67:B4:F5:7D:64:15:8B:92:AF:C3:3C
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a363830303a3a2f33372d3337203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:6800::/37

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:75:48:7e:44:f0:55:ce:60:2b:e6:10:9b:69:cc:50:9a:
         07:63:8f:a8:90:3d:07:29:8f:2c:69:e4:e2:d7:1b:c4:55:17:
         94:22:34:c4:1d:1c:62:59:f6:f8:f3:b5:c4:00:98:ec:7f:bf:
         34:fc:d6:52:e9:4d:44:8f:f0:2d:0c:1a:6c:a1:e4:8f:11:cf:
         dc:49:e9:55:e0:5d:ca:45:5b:96:dc:f0:e5:b1:e8:09:91:5d:
         23:88:cf:3f:d0:ec:24:60:66:de:02:e5:7c:a7:52:7a:d8:2d:
         fb:df:4c:28:6a:1f:94:29:97:db:64:4e:82:17:40:e8:d6:ff:
         bd:37:96:80:80:76:5e:95:c3:0c:54:c4:e8:74:16:b7:44:2e:
         de:fe:a4:84:69:a7:92:98:dd:dd:b9:9f:26:c7:3f:3e:86:93:
         e3:df:31:95:5b:c6:d6:0d:71:d9:93:0d:55:cb:cc:9f:65:56:
         0b:5b:c9:57:1c:f4:35:09:1c:61:4f:7d:b9:5d:1b:2a:01:f1:
         3b:54:7c:8b:c0:df:8d:67:51:83:72:b6:38:83:92:f6:4a:b6:
         ee:c4:02:96:e9:0a:f0:65:f0:8c:48:ee:c4:32:2e:b2:3e:58:
         c7:b8:6b:77:63:0e:3d:f0:d4:56:80:94:81:97:07:19:d5:f8:
         bf:4f:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:57 2024 by rpki-client on console-fra.rpki-client.org