Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/1/323830343a376238383a3a2f33322d3438203d3e20323731343337.roa
File:                     323830343a376238383a3a2f33322d3438203d3e20323731343337.roa (raw, json)
Hash identifier:          UkkEfozqW8gIrbM9RA5L50iiGGjn1FnRkdUafHAYVA8=
Subject key identifier:   1E:BD:CC:CB:37:5F:7F:E8:25:81:50:5F:8D:A1:44:BE:98:75:0B:A1
Certificate issuer:       /CN=6D1492B094A5DC7BCD73D23DC2CF1F01FB46AE8E
Certificate serial:       7F52657A3255E8AC770A9712162646F1DCDFFE1D
Authority key identifier: 6D:14:92:B0:94:A5:DC:7B:CD:73:D2:3D:C2:CF:1F:01:FB:46:AE:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D1492B094A5DC7BCD73D23DC2CF1F01FB46AE8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/1/323830343a376238383a3a2f33322d3438203d3e20323731343337.roa
Signing time:             Thu 04 Apr 2024 19:01:43 +0000
ROA not before:           Thu 04 Apr 2024 18:56:43 +0000
ROA not after:            Thu 03 Apr 2025 19:01:43 +0000
asID:                     271437
IP address blocks:        2804:7b88::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/1/6D1492B094A5DC7BCD73D23DC2CF1F01FB46AE8E.crl
                          rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/1/6D1492B094A5DC7BCD73D23DC2CF1F01FB46AE8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D1492B094A5DC7BCD73D23DC2CF1F01FB46AE8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:52:65:7a:32:55:e8:ac:77:0a:97:12:16:26:46:f1:dc:df:fe:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1492B094A5DC7BCD73D23DC2CF1F01FB46AE8E
        Validity
            Not Before: Apr  4 18:56:43 2024 GMT
            Not After : Apr  3 19:01:43 2025 GMT
        Subject: CN=1EBDCCCB375F7FE82581505F8DA144BE98750BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:a6:44:eb:0a:c1:1a:9d:2c:8a:c5:ee:70:
                    0e:c6:40:26:a0:7a:09:06:a2:bf:c8:8c:da:f5:90:
                    93:4b:74:db:47:35:c0:c2:a0:e4:39:49:e1:85:3b:
                    69:29:85:e8:9c:de:02:49:12:8a:55:25:e4:3f:b5:
                    8b:9a:49:2a:7a:e5:a0:31:f4:ca:de:ca:99:3f:5e:
                    a4:9a:c1:89:07:ac:b1:9b:a9:6c:e3:4d:6c:a4:d6:
                    1f:55:14:81:73:8b:1c:0a:f0:52:58:df:a4:b9:4d:
                    75:3f:4a:81:e4:70:27:7f:df:78:0a:41:04:b5:4f:
                    d2:76:1f:cb:d1:01:ef:19:b1:b4:5b:5c:7a:76:41:
                    e1:1a:de:06:62:68:d2:d7:b1:5c:88:96:78:7b:3a:
                    66:e2:8c:ac:41:d0:3d:d4:50:0b:bd:3e:ec:cb:9a:
                    32:02:fa:b7:ad:5a:21:8f:7d:e3:66:9c:57:24:28:
                    4b:36:9f:2e:10:95:d0:72:3b:04:ab:c0:7b:77:0b:
                    35:98:97:18:63:1d:ea:c7:b9:dc:3d:ef:75:65:17:
                    5e:95:31:c4:79:7a:8e:4b:e1:a7:ab:31:06:8d:cf:
                    ff:fa:de:e8:1f:cd:94:7b:71:5f:9e:11:df:cf:4d:
                    68:1f:d2:07:56:15:17:f7:84:81:e4:3d:c3:e1:97:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:CC:CB:37:5F:7F:E8:25:81:50:5F:8D:A1:44:BE:98:75:0B:A1
            X509v3 Authority Key Identifier:
                keyid:6D:14:92:B0:94:A5:DC:7B:CD:73:D2:3D:C2:CF:1F:01:FB:46:AE:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/1/6D1492B094A5DC7BCD73D23DC2CF1F01FB46AE8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D1492B094A5DC7BCD73D23DC2CF1F01FB46AE8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/1/323830343a376238383a3a2f33322d3438203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:39:3b:93:71:07:42:8f:57:ad:cd:5e:98:ed:d5:ce:8f:47:
         af:df:0c:03:4d:99:2d:0a:72:94:54:e3:44:63:d1:c7:79:d4:
         32:ca:37:00:82:10:f9:e1:3d:8a:60:1a:80:2a:ad:eb:3d:67:
         2e:6e:3c:94:e1:70:aa:2c:94:90:ea:87:be:6a:d7:b5:58:0a:
         98:81:7d:be:2a:bd:e2:ff:65:f2:3c:7d:e4:1d:a6:d5:46:cf:
         e1:4b:d6:a9:52:5f:05:01:65:37:e7:06:61:14:70:3f:2d:26:
         91:96:60:6a:06:fe:00:cf:f1:21:6b:3c:89:0f:79:74:d3:fb:
         f1:00:b4:1f:7f:aa:29:72:f2:5e:c9:74:fb:a0:0f:2e:c0:b9:
         94:5b:d7:3f:6f:03:dd:27:c6:1e:e8:cf:d4:45:f5:00:42:b2:
         60:63:87:b1:ec:6b:7c:4e:76:23:45:f9:be:8b:59:34:ed:97:
         a1:68:e9:e1:eb:12:e6:93:56:07:9a:ca:05:fd:47:58:fc:50:
         42:3f:42:bb:06:5f:67:ee:2a:f8:17:57:99:4c:67:05:9f:0e:
         49:e1:b4:48:de:00:22:99:bf:06:19:4b:f3:fe:3a:99:7f:01:
         12:11:e5:3b:d6:00:ce:22:bd:cb:3b:ca:44:43:3b:ac:a7:8d:
         18:00:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org