Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353030303a3a2f34302d3430203d3e20323730373634.roa
File:                     323830343a373131303a353030303a3a2f34302d3430203d3e20323730373634.roa (raw, json)
Hash identifier:          DQPipuyEEBHKOWkA7eTsj3CLiTH6NEQB14Zps04sopk=
Subject key identifier:   9F:3E:C9:C0:2A:8C:BF:F3:5B:C2:BB:3D:C7:1E:E2:10:8A:90:1F:C1
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       1E8FA687228A69D822919316AC8A5F25F7E8EA89
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353030303a3a2f34302d3430203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:38 +0000
ROA not before:           Fri 31 May 2024 22:35:38 +0000
ROA not after:            Fri 30 May 2025 22:40:38 +0000
asID:                     270764
IP address blocks:        2804:7110:5000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8f:a6:87:22:8a:69:d8:22:91:93:16:ac:8a:5f:25:f7:e8:ea:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:38 2024 GMT
            Not After : May 30 22:40:38 2025 GMT
        Subject: CN=9F3EC9C02A8CBFF35BC2BB3DC71EE2108A901FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:f2:e0:4e:4e:56:b9:ff:65:87:08:fe:da:
                    9d:0f:21:f2:0e:57:91:3b:16:06:fd:91:b4:cc:9e:
                    c6:56:62:5c:83:45:2b:25:b1:b5:3c:01:09:af:52:
                    d9:0c:50:e3:16:3d:c7:40:9a:88:b6:3f:70:55:f8:
                    b7:9a:ab:5e:78:69:a6:b3:78:ed:54:fe:e3:4a:70:
                    6d:b7:a8:af:76:5d:df:80:da:7f:82:50:fb:1d:02:
                    8e:d8:2e:7e:59:a6:3d:d0:a3:19:22:b6:a4:ef:21:
                    6a:87:8c:35:99:e8:26:a7:85:79:e3:e9:07:51:a5:
                    ee:ae:74:db:8a:25:16:78:d2:9a:a3:f8:b6:b8:e1:
                    be:7f:ee:7c:ee:10:c4:bb:b4:00:91:8c:e6:18:bd:
                    92:bd:38:a5:b0:09:8e:ea:2f:c0:59:49:45:a4:7a:
                    f3:47:15:71:66:2c:db:08:55:bd:35:33:83:4c:d0:
                    f0:79:62:2b:a1:6e:2f:c6:cc:c7:da:e5:94:9c:3b:
                    f0:06:1f:48:cc:b2:5d:3f:35:9d:f2:87:bc:e3:ea:
                    9f:f2:0d:ba:b2:cd:7c:46:4f:60:09:00:64:cf:53:
                    c5:d1:6d:28:a6:6b:3c:1a:2f:3d:5e:47:43:f2:31:
                    11:a6:8b:8d:bc:ea:7b:4c:3b:0b:75:16:62:db:11:
                    93:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3E:C9:C0:2A:8C:BF:F3:5B:C2:BB:3D:C7:1E:E2:10:8A:90:1F:C1
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353030303a3a2f34302d3430203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:2e:f7:d3:50:88:4d:03:a4:01:c0:3a:f3:53:62:25:e4:19:
         28:89:2c:8a:c3:79:fd:0f:28:08:7e:3b:b5:fa:ab:30:7c:18:
         4d:1e:e0:89:ae:d5:cf:b4:ed:79:72:0b:9d:cf:43:9a:26:d1:
         46:f6:2b:1d:ac:80:2b:1f:6c:2a:fb:dd:97:70:1c:c9:91:e6:
         ea:ad:85:e5:05:f3:46:84:3c:96:ae:20:38:9e:c9:c5:f9:08:
         aa:45:64:59:67:cc:57:1d:c1:33:00:08:81:c6:7a:8a:15:a6:
         f4:3a:26:cd:fb:e4:07:1b:33:4c:f0:27:af:22:24:d3:86:b1:
         bb:ec:db:8f:21:7f:98:1f:6a:c7:e3:55:e7:df:54:41:c5:79:
         48:1a:30:f7:28:f1:63:7b:92:43:53:7b:15:b8:74:1a:ea:3e:
         87:f1:43:dd:38:b0:4a:21:84:4f:22:62:21:e8:97:db:c5:df:
         ac:9f:63:38:85:8e:6e:37:af:30:8f:80:fc:e8:a7:6e:b3:f2:
         3c:8f:4d:a2:59:91:b9:0d:af:b0:be:3c:67:3f:b9:b8:92:31:
         c9:48:8b:a2:ea:2e:38:e2:35:d8:45:9a:b9:be:f6:e8:a9:cc:
         24:f6:7a:43:6d:1c:10:06:85:69:c2:c3:ee:9e:65:2c:da:d5:
         81:88:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:14 2024 by rpki-client on console-fra.rpki-client.org