Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa
File:                     323830343a366635343a3a2f33322d3334203d3e20323730363533.roa (raw, json)
Hash identifier:          NDJlpLpYjKbXrZjeAI20kV8D3nTn1B88OpD6PkIYEJw=
Subject key identifier:   45:6F:1F:F3:9B:7B:0E:61:D0:A2:5D:F7:43:DF:54:B8:DA:04:CF:02
Certificate issuer:       /CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
Certificate serial:       61849CA26979BA14A9E9BBB3EB46D53CD3115A44
Authority key identifier: E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     270653
IP address blocks:        2804:6f54::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl
                          rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:84:9c:a2:69:79:ba:14:a9:e9:bb:b3:eb:46:d5:3c:d3:11:5a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=456F1FF39B7B0E61D0A25DF743DF54B8DA04CF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:24:9b:f6:68:f2:00:6d:aa:b0:62:99:f4:
                    31:0f:8d:7b:8f:35:e3:94:19:6c:27:23:36:0e:8b:
                    bb:d0:f4:55:ed:0c:fd:98:7b:cc:f9:d8:e3:41:79:
                    2e:e3:d6:b3:d3:98:1d:f5:c2:79:ea:68:6d:bf:d7:
                    66:02:34:17:bb:1b:c6:db:83:58:c5:32:0f:0a:3c:
                    ce:63:1d:5e:08:2e:f0:bf:5c:66:30:e3:76:0f:2f:
                    20:66:22:0a:f0:17:ee:69:94:c2:ff:b8:b2:b6:2d:
                    e8:87:66:28:e0:7b:ff:13:c2:d7:65:f1:3b:1a:ad:
                    21:43:32:b4:08:7d:e3:d1:87:3c:1e:73:0f:04:d4:
                    63:2c:2d:76:ee:bf:70:93:b3:27:23:a6:10:cb:63:
                    3a:af:82:d5:53:40:92:3a:fe:09:32:a4:c3:2d:8d:
                    f3:68:3a:f8:d9:2e:a8:37:16:33:33:4f:d4:da:1e:
                    12:07:42:50:d0:0e:f0:ca:6e:1e:95:de:35:a3:f2:
                    12:e9:60:a0:38:21:fe:c3:c5:d8:15:6f:2e:c1:a7:
                    39:f3:29:b4:6c:f3:7f:06:98:86:95:62:ff:12:e8:
                    9d:b2:61:7c:b1:b1:13:de:dc:1b:01:dd:ea:86:7e:
                    04:6e:a3:4a:57:80:0a:62:86:fb:70:fe:b1:78:01:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6F:1F:F3:9B:7B:0E:61:D0:A2:5D:F7:43:DF:54:B8:DA:04:CF:02
            X509v3 Authority Key Identifier:
                keyid:E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:69:84:88:3c:77:aa:07:5a:76:dd:54:35:4a:b9:e1:e8:be:
         7d:23:4d:0d:5c:c3:21:76:2e:a7:81:bc:1b:62:07:87:c7:b8:
         54:8d:9d:cb:2c:fc:f0:17:55:e8:47:b2:4c:9b:7e:ee:de:0b:
         47:5b:5c:19:23:e8:93:59:62:e8:42:d5:64:1a:50:f8:99:b8:
         be:05:3a:65:09:54:3a:8e:7e:71:19:91:9a:b0:70:8e:40:a8:
         ba:ee:61:2f:0a:5c:49:5b:69:fb:b8:46:eb:b1:f8:13:39:0b:
         a4:cb:4d:9d:5f:6b:2e:eb:fe:92:23:80:09:29:8e:37:29:2f:
         76:9f:e4:ad:c3:28:02:7e:a4:eb:4b:70:8b:ba:5f:d5:b8:4f:
         e8:02:36:a0:55:f4:45:41:03:0a:6d:72:36:44:34:af:27:33:
         73:4f:ea:0c:38:4c:46:38:9e:0c:62:55:ff:a5:69:0f:79:64:
         71:e1:69:68:b3:f6:02:70:a5:d4:f4:ed:97:f4:4f:07:87:80:
         f1:55:04:f1:93:95:31:01:ba:05:6e:fa:fa:8d:bf:74:58:f2:
         84:01:b8:4d:9f:2a:28:04:fb:46:f1:eb:c2:b5:19:b3:45:b1:
         7d:18:5f:bf:21:43:2c:a4:a8:fa:09:3c:da:88:5c:49:24:98:
         78:62:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org