Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/323830343a313662303a323030303a3a2f33362d3336203d3e203631393130.roa
File:                     323830343a313662303a323030303a3a2f33362d3336203d3e203631393130.roa (raw, json)
Hash identifier:          /zN9KMpv/2npUy/NFp30+4i+OYcYXXiYmg7ZNRXPNY0=
Subject key identifier:   78:E8:43:54:70:AC:C1:F7:FB:F5:30:A0:72:BD:94:8F:97:3E:56:15
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       75CE2581CE91D3CE60CCCA3A1771DFE4F840B116
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/323830343a313662303a323030303a3a2f33362d3336203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:43 +0000
ROA not before:           Wed 03 Apr 2024 20:58:43 +0000
ROA not after:            Wed 02 Apr 2025 21:03:43 +0000
asID:                     61910
IP address blocks:        2804:16b0:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl
                          rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ce:25:81:ce:91:d3:ce:60:cc:ca:3a:17:71:df:e4:f8:40:b1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:43 2024 GMT
            Not After : Apr  2 21:03:43 2025 GMT
        Subject: CN=78E8435470ACC1F7FBF530A072BD948F973E5615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6a:86:92:17:7c:af:a1:15:51:a6:3e:b2:cf:
                    a4:fd:14:66:aa:3d:bb:c9:b6:53:cb:0b:5e:8d:3a:
                    28:cd:09:e1:05:21:01:d2:51:14:e6:84:4c:f5:b8:
                    3d:bb:fb:72:7f:fa:bb:2b:94:d9:0c:9a:d8:51:53:
                    65:30:50:02:c2:2d:d2:59:ce:3f:b6:73:07:58:bb:
                    2d:3e:66:9b:15:0e:0b:f6:da:a0:c1:ba:39:6a:88:
                    e6:de:5b:92:3b:99:30:0b:4a:fd:c5:6e:f5:0c:34:
                    0c:05:3c:6b:54:03:b4:eb:69:bc:fd:d9:b7:72:d8:
                    35:ff:f0:79:d2:55:db:25:af:7d:6a:90:4f:7f:a4:
                    ff:21:83:90:22:1d:da:7a:0a:78:f2:91:67:6b:25:
                    aa:b8:b8:f1:af:5b:05:db:a1:27:1e:b9:da:43:ff:
                    f3:55:cb:19:70:a2:03:ea:83:2d:75:cd:00:05:0a:
                    06:4e:0f:53:8e:89:74:53:6e:aa:36:fd:f9:ab:97:
                    c9:b9:72:6e:17:c4:17:a0:10:4f:31:d9:f7:a5:bc:
                    14:83:71:83:15:0e:88:a8:39:cc:27:8a:85:13:39:
                    bc:d4:ee:2a:b1:e0:0b:d5:18:c3:9f:50:b0:34:65:
                    9e:97:9d:80:0d:f0:09:5a:68:73:e9:b3:02:06:6c:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E8:43:54:70:AC:C1:F7:FB:F5:30:A0:72:BD:94:8F:97:3E:56:15
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/323830343a313662303a323030303a3a2f33362d3336203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16b0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:99:da:a1:5b:f7:08:a1:a6:6c:ba:6f:bd:dc:6d:e9:6f:7c:
         63:c0:c2:17:52:0d:a7:d7:08:d6:2c:35:fe:ea:eb:79:cd:48:
         f1:55:ab:1b:0c:1e:66:98:df:38:14:aa:47:83:82:83:76:3c:
         d4:d5:ca:33:1a:02:10:18:49:b2:a1:89:1b:c5:29:03:6f:81:
         1c:08:32:f0:43:25:26:e9:7f:fb:60:a1:be:8a:6b:8e:1a:37:
         20:11:5b:bb:cf:a7:56:c8:a9:f3:14:4a:c2:82:80:28:1c:fc:
         71:f4:59:af:8f:72:35:e9:6f:54:70:9b:54:16:68:f7:77:db:
         1d:74:36:e4:08:21:e1:e2:36:3c:41:e9:ec:fa:ce:dc:d7:c7:
         b7:32:44:36:76:4f:98:34:b4:cd:6a:53:67:69:92:68:d1:85:
         b6:1d:43:4f:a3:01:fe:63:20:34:b1:54:ca:cf:46:83:a6:b0:
         19:56:0e:e8:89:3d:c0:0f:6a:3e:a7:77:02:08:5d:6f:2a:e4:
         e0:8e:5a:49:68:d7:0d:f3:ea:c0:42:50:3e:b1:cc:48:97:f4:
         1e:11:3a:19:b0:f8:69:61:0d:6d:24:bd:9e:64:47:61:d6:66:
         cd:42:83:d5:e5:b8:2b:88:39:63:e6:69:47:be:87:6d:95:76:
         1a:e5:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:53 2024 by rpki-client on console-ams.rpki-client.org