Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a383030303a3a2f33332d3333203d3e203631373738.roa
File:                     323830343a313933343a383030303a3a2f33332d3333203d3e203631373738.roa (raw, json)
Hash identifier:          aPJMF+3Gouw73Om2s6/r7owD+0SPLohgPFzSXT/IzWU=
Subject key identifier:   57:69:C8:14:15:65:B0:2C:21:51:B0:33:7B:FD:5B:E1:7C:13:C7:E6
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       730A6735784647F1742A5AFD5B775C08D41DB205
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a383030303a3a2f33332d3333203d3e203631373738.roa
Signing time:             Wed 10 Jul 2024 16:35:37 +0000
ROA not before:           Wed 10 Jul 2024 16:30:37 +0000
ROA not after:            Wed 09 Jul 2025 16:35:37 +0000
asID:                     61778
IP address blocks:        2804:1934:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0a:67:35:78:46:47:f1:74:2a:5a:fd:5b:77:5c:08:d4:1d:b2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jul 10 16:30:37 2024 GMT
            Not After : Jul  9 16:35:37 2025 GMT
        Subject: CN=5769C8141565B02C2151B0337BFD5BE17C13C7E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:99:b7:1f:1b:3b:43:31:0d:e3:ce:e9:8a:
                    34:31:6f:74:ab:7a:77:9a:71:bb:89:74:46:18:c3:
                    a2:01:fa:75:3e:cd:ef:0b:d3:cf:ce:bc:12:7e:62:
                    03:69:6f:41:44:0d:85:4c:bc:f4:c4:1f:62:24:f4:
                    81:5f:8e:21:d5:3a:09:04:09:c6:d2:80:9e:a8:3d:
                    80:85:e9:a9:f9:6d:bd:bf:35:e5:d6:7c:59:44:20:
                    32:12:24:b2:b4:01:70:71:4b:cb:2e:ba:41:e1:9a:
                    b9:bb:0b:6c:ce:96:ba:a8:a6:3e:e3:bf:21:dc:bf:
                    0e:97:bf:b8:9f:7d:5b:cd:8e:f8:23:3f:4f:2a:bf:
                    d9:50:31:40:8f:f5:6a:ca:56:d5:9b:9f:9b:5f:9b:
                    8e:4a:7d:ac:f6:16:fe:62:c8:46:b6:c7:6f:4d:ac:
                    07:dd:1a:07:86:c1:e2:aa:84:58:c1:03:8a:7a:d1:
                    62:89:e0:42:57:d9:d9:d0:ed:28:29:fc:47:e6:d5:
                    c6:83:57:f0:6e:11:8b:61:05:d3:cb:5b:98:f4:28:
                    3b:61:a7:0f:cb:06:f6:ae:17:52:a1:07:7e:0b:a7:
                    5c:64:35:3e:0b:7e:d8:3f:41:40:81:b1:ef:39:0a:
                    1f:1c:cd:91:7a:a5:37:a3:de:a0:14:34:3a:8b:36:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:C8:14:15:65:B0:2C:21:51:B0:33:7B:FD:5B:E1:7C:13:C7:E6
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a383030303a3a2f33332d3333203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1934:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:8a:b4:1c:84:19:62:44:05:f6:24:f1:4e:f2:f9:64:d8:8d:
         fd:40:31:b4:14:a9:c7:1b:f3:3b:42:d4:03:e4:61:5f:b5:cc:
         f2:b6:16:6c:51:51:78:8b:16:78:44:ab:e8:0e:1a:8a:5b:35:
         0d:a5:7a:1f:f5:5e:f9:cd:7f:69:78:48:5f:4c:ec:16:26:0d:
         99:80:90:a0:c1:88:0a:8b:73:f7:f7:c7:33:02:52:14:c0:34:
         e7:df:91:15:30:45:33:b1:e8:78:5c:bd:02:8d:3b:36:87:47:
         83:77:f0:6d:e9:5e:f3:29:4d:61:37:77:82:65:87:11:5c:2d:
         52:8b:64:11:62:86:25:7a:28:30:72:e2:f3:c4:c4:5a:aa:c6:
         3b:65:1e:a2:97:2a:44:fb:99:64:83:9d:39:4a:00:19:cc:2b:
         46:ee:19:5f:8a:29:91:90:47:65:27:f3:2a:d6:bd:8a:fa:1c:
         85:c0:72:c7:a7:0a:ae:f9:53:34:72:a6:0d:9c:d8:1d:c8:8f:
         1c:0f:86:30:b6:c7:8c:de:79:bf:db:51:b2:78:50:d9:7d:bf:
         a8:8a:48:ce:f6:ef:d8:f8:a3:06:d7:3e:49:5c:00:a4:20:22:
         06:c7:0f:e4:fe:b0:d4:01:e8:4b:c7:ba:d3:62:58:84:2b:53:
         2d:3a:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:35 2024 by rpki-client on console-ams.rpki-client.org