Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/323830343a323866383a353030303a3a2f34382d3438203d3e20323633393930.roa
File:                     323830343a323866383a353030303a3a2f34382d3438203d3e20323633393930.roa (raw, json)
Hash identifier:          WTJ06b9ynGPTfn8UDC4LwtP4aabxXT7ktnkmlJtYW34=
Subject key identifier:   1D:7C:42:77:77:7C:E1:07:6A:F9:C9:95:52:60:AF:09:AB:86:16:B3
Certificate issuer:       /CN=663B71B179F251E89D3BDF35B60E74315CF449F9
Certificate serial:       69166BC7D06432C46139981687558F6BDF1C9363
Authority key identifier: 66:3B:71:B1:79:F2:51:E8:9D:3B:DF:35:B6:0E:74:31:5C:F4:49:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663B71B179F251E89D3BDF35B60E74315CF449F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/323830343a323866383a353030303a3a2f34382d3438203d3e20323633393930.roa
Signing time:             Sat 13 Apr 2024 16:13:14 +0000
ROA not before:           Sat 13 Apr 2024 16:08:14 +0000
ROA not after:            Sat 12 Apr 2025 16:13:14 +0000
asID:                     263990
IP address blocks:        2804:28f8:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/663B71B179F251E89D3BDF35B60E74315CF449F9.crl
                          rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/663B71B179F251E89D3BDF35B60E74315CF449F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663B71B179F251E89D3BDF35B60E74315CF449F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:16:6b:c7:d0:64:32:c4:61:39:98:16:87:55:8f:6b:df:1c:93:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663B71B179F251E89D3BDF35B60E74315CF449F9
        Validity
            Not Before: Apr 13 16:08:14 2024 GMT
            Not After : Apr 12 16:13:14 2025 GMT
        Subject: CN=1D7C4277777CE1076AF9C9955260AF09AB8616B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:43:26:52:3b:b0:25:1b:de:29:a3:fe:c6:
                    c4:3e:16:71:af:d6:0e:cc:a1:d8:42:d4:14:09:1a:
                    54:5d:75:17:dc:29:86:cb:59:6d:c1:d7:78:27:30:
                    f9:9e:76:c5:8f:3d:76:b3:94:35:4b:b5:67:07:91:
                    4d:5b:a2:73:08:51:e5:fe:77:ae:99:d6:c7:fd:6c:
                    6d:cb:60:b3:38:e3:5c:9c:2e:6b:fd:8a:b7:12:76:
                    4c:1c:b8:69:9f:70:bc:47:a6:3b:20:3e:0f:bb:b0:
                    44:5b:11:a1:17:9f:f5:c6:92:c2:48:cb:b6:c5:e6:
                    fa:d2:c4:e0:ed:d9:df:76:a7:1c:3a:e2:99:36:b3:
                    fc:29:c2:0c:26:68:54:81:36:bc:a4:95:2e:40:f6:
                    7d:c4:c1:47:67:3a:44:3e:75:8e:71:a8:9f:85:1e:
                    7a:15:19:a6:35:9b:f0:c4:46:10:b4:09:bf:e9:4e:
                    c8:e2:3f:de:85:2d:6e:25:a8:8a:d6:e8:3f:42:e0:
                    b2:29:dc:ef:7d:b6:df:39:96:ef:61:39:c3:8f:7d:
                    c0:1e:86:a4:3c:32:78:a3:70:50:a7:c8:19:d0:9c:
                    b4:af:61:36:a8:31:ea:31:c7:f9:45:53:93:bf:3f:
                    e1:2d:2d:d5:a1:fa:8c:82:1c:81:36:36:05:40:4c:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7C:42:77:77:7C:E1:07:6A:F9:C9:95:52:60:AF:09:AB:86:16:B3
            X509v3 Authority Key Identifier:
                keyid:66:3B:71:B1:79:F2:51:E8:9D:3B:DF:35:B6:0E:74:31:5C:F4:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/663B71B179F251E89D3BDF35B60E74315CF449F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663B71B179F251E89D3BDF35B60E74315CF449F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/0/323830343a323866383a353030303a3a2f34382d3438203d3e20323633393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f8:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:bd:fb:3b:ae:7d:05:1a:93:76:7b:03:98:27:de:36:8a:e0:
         6f:92:54:5c:79:6b:c7:a0:c3:44:da:79:bd:b7:8d:66:24:34:
         ec:10:0e:95:d8:3c:80:01:fc:67:ae:5a:f0:82:d4:5a:e6:1a:
         dd:52:88:15:5f:de:9c:31:29:51:a6:ac:d4:42:5e:f0:9f:76:
         40:95:e8:12:25:e3:97:e1:c6:3c:6b:4c:7d:d9:3c:e9:f1:40:
         2b:70:b7:c1:2e:7c:4c:cc:13:7f:6c:0c:1d:e9:20:b7:af:b6:
         82:b5:1e:a8:36:0b:11:24:dc:48:40:7f:59:63:a0:09:ef:04:
         e9:ff:28:5a:5c:f4:aa:5e:aa:7c:04:d7:c3:01:8a:68:07:8b:
         67:c6:93:35:8c:31:87:8f:80:ed:17:c8:57:cc:93:2b:a0:69:
         c7:2a:d9:c0:13:3e:2c:7b:3f:86:94:70:c6:3d:af:32:7e:58:
         e1:b5:e3:9e:2c:e7:a3:d3:ef:92:80:46:ff:09:c7:a6:38:7f:
         cd:ea:24:69:11:30:4c:37:84:6f:e0:34:ab:af:aa:9d:18:aa:
         b4:06:95:29:e3:1d:af:89:79:20:e7:f3:fe:51:49:3c:47:e0:
         6f:f8:8b:fb:89:a9:f7:e4:e6:13:b6:47:1c:41:27:db:1e:d1:
         c8:7f:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org