Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa
File:                     323830343a323930633a3a2f33362d3336203d3e20323633393934.roa (raw, json)
Hash identifier:          9m2v6X90qMhUO6zKpKsKZQw/LgA0FxWZ7KHrZiIEIOw=
Subject key identifier:   D9:7A:DD:D3:FB:FC:6B:0D:DB:EF:FE:BF:EF:24:26:A1:BE:20:D5:31
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       041F480FB9E8B3BCB8610B31E68904E193C439F3
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     263994
IP address blocks:        2804:290c::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1f:48:0f:b9:e8:b3:bc:b8:61:0b:31:e6:89:04:e1:93:c4:39:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=D97ADDD3FBFC6B0DDBEFFEBFEF2426A1BE20D531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:46:4c:48:8b:22:fa:82:75:ae:62:22:75:
                    f6:ba:96:6b:48:54:1a:8a:21:a2:cf:8c:d1:2e:d5:
                    97:06:b3:72:b3:d2:e6:a0:82:70:c3:d4:21:35:c2:
                    4a:6a:fb:cd:43:57:05:76:29:5c:fe:cb:f7:41:d9:
                    98:7f:a4:f0:0a:06:34:65:9f:af:4a:fd:dd:93:6f:
                    0a:0b:1f:8f:68:8f:23:11:2c:27:83:be:b9:13:04:
                    95:0a:cb:ab:5c:59:55:fc:99:90:c0:79:8d:16:4a:
                    0a:09:d5:95:fe:96:68:2c:3b:17:c3:a6:0c:e5:e7:
                    fa:fe:e8:76:bf:30:16:9d:e4:64:9f:63:70:89:a0:
                    34:90:92:0c:57:aa:a7:75:9a:b8:84:23:99:7d:a1:
                    8a:e6:b8:5d:4b:7d:be:e1:7d:da:0b:c3:0f:5e:0c:
                    f7:1c:4e:02:6f:dd:aa:19:25:cd:05:74:eb:d3:d4:
                    5e:cd:e1:ae:6a:0a:4c:a2:9c:d1:86:65:c1:94:f6:
                    28:de:c9:e9:94:67:34:bd:ee:c5:fc:7a:0f:b2:0d:
                    67:c7:95:db:31:9b:20:3d:fa:db:61:88:cd:69:0d:
                    e7:38:ab:e5:4b:e5:22:d5:e5:96:a8:ce:be:dd:7d:
                    13:c5:ba:2e:38:c9:bc:35:e8:64:38:d5:86:f5:dd:
                    31:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7A:DD:D3:FB:FC:6B:0D:DB:EF:FE:BF:EF:24:26:A1:BE:20:D5:31
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:290c::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:0d:f7:d3:b7:b7:df:76:2b:23:d1:69:35:47:ad:05:33:
         65:60:05:7f:40:ab:6d:15:69:04:83:57:5d:66:b0:d8:d8:82:
         82:25:72:1e:2b:d3:5c:ea:e1:26:e1:2d:d1:b1:54:04:8e:63:
         51:01:c4:a5:ac:3d:77:17:62:c1:1f:9d:f1:23:24:ef:a6:d4:
         d1:4c:1a:d3:b8:aa:9d:54:0d:dd:15:6b:6d:c6:94:0c:02:0e:
         61:a6:a4:9a:60:1a:ab:4c:6b:b0:a3:78:97:a8:e9:d5:7a:6f:
         65:15:f9:4e:d3:3a:5c:e4:7a:d2:cd:f1:e5:8d:94:87:07:75:
         f8:d2:bf:f2:38:c2:7e:21:3d:89:ab:2f:eb:11:36:83:99:e3:
         b2:1a:e5:5c:d9:04:f4:56:f4:e6:da:d1:25:7b:00:56:d3:b7:
         ef:f9:d8:af:77:fb:84:8e:2f:c6:45:a0:ea:c7:8c:a0:a0:ce:
         0e:cf:5b:8c:81:26:75:d0:37:62:a0:a8:7c:64:47:35:68:05:
         5e:0e:3e:44:24:3a:6c:3a:4d:ec:a5:cf:1a:b5:c4:ce:ab:33:
         48:79:67:0e:e9:b9:57:94:cd:5a:23:81:19:0e:3d:39:56:b2:
         4a:7e:6e:0c:4c:dc:b8:f5:2a:c4:ff:56:51:10:6d:99:4b:3d:
         39:aa:ec:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org