Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa
File:                     323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (raw, json)
Hash identifier:          wpDbmIvjZJ2PZwjWg1k9Y8oX/tSXxeeWyZoARsy7THI=
Subject key identifier:   D5:73:2A:7B:4A:66:0B:0F:4C:73:2C:2C:2F:F5:3D:DA:EC:4A:5A:7C
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       6DE8A4C2B33FA58BBB81D9299750913F882286B1
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa
Signing time:             Wed 04 Sep 2024 12:36:01 +0000
ROA not before:           Wed 04 Sep 2024 12:31:01 +0000
ROA not after:            Wed 03 Sep 2025 12:36:01 +0000
asID:                     264891
IP address blocks:        2804:2f70:4000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 12:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e8:a4:c2:b3:3f:a5:8b:bb:81:d9:29:97:50:91:3f:88:22:86:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Sep  4 12:31:01 2024 GMT
            Not After : Sep  3 12:36:01 2025 GMT
        Subject: CN=D5732A7B4A660B0F4C732C2C2FF53DDAEC4A5A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:e0:16:a5:9b:6d:f4:f6:17:d3:57:d5:56:
                    7d:c6:ef:fd:f9:d4:fe:c0:a2:2a:f8:39:72:3c:34:
                    5f:6b:96:17:2f:c5:b0:d7:89:53:5f:1b:3a:51:c0:
                    e4:d0:68:15:d6:fd:9e:cb:f1:ac:81:20:55:97:65:
                    c4:bc:79:af:de:b8:8e:0d:f5:86:0c:5a:7c:a7:1c:
                    aa:7c:f0:55:0f:99:91:c2:41:56:55:e0:4e:6e:10:
                    3c:ec:f0:07:b6:06:9e:38:2a:4b:49:2d:ea:91:62:
                    af:fc:20:ed:b7:12:24:7e:df:f8:7d:2c:52:76:ac:
                    0f:cc:62:5e:a7:f8:16:77:e1:ec:a9:f8:5d:35:d4:
                    49:cc:75:3c:5a:9d:89:99:e5:a0:fe:df:41:90:99:
                    6e:a6:a0:53:f4:00:00:5c:83:58:6c:39:10:04:90:
                    5e:fa:7a:88:f6:f0:f8:94:d1:8f:14:60:fe:57:2c:
                    bc:ad:20:2b:39:40:2e:53:61:18:8f:99:97:c4:36:
                    58:49:43:79:8e:86:24:cd:a6:41:61:3b:97:14:ea:
                    6d:86:ec:36:03:85:f0:d8:53:b2:e1:6f:29:19:18:
                    a0:e2:78:ce:97:2a:4b:71:b4:82:72:4e:45:71:56:
                    e8:fc:22:a1:e0:c3:3c:7e:12:7c:d4:f0:69:f2:0a:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:73:2A:7B:4A:66:0B:0F:4C:73:2C:2C:2F:F5:3D:DA:EC:4A:5A:7C
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:6d:f2:22:0e:0c:f3:4f:fb:2e:42:e8:8c:2d:e3:5e:3f:c7:
         74:ed:4c:5d:c8:bc:85:95:8a:89:a4:7a:ca:a9:6f:d6:b0:a7:
         de:2f:18:55:a1:79:81:32:be:4f:c3:ac:66:13:8d:d0:a9:5f:
         5a:76:db:f4:60:18:cf:e9:49:8d:e6:73:8c:e8:e3:13:22:e5:
         71:01:3c:14:41:9a:c1:38:d8:7e:03:3f:cf:19:d6:ef:ef:9e:
         2e:ce:6f:2c:4e:f1:74:52:20:a1:d4:d4:12:0a:e3:d3:27:f0:
         d0:32:76:19:9d:60:5f:b1:46:46:f0:a3:f8:b8:a9:4e:1b:fa:
         7f:1e:6d:3a:26:ff:41:c5:63:6b:a4:e3:b5:a5:f3:62:90:49:
         c0:9d:b6:d1:20:ca:b8:c8:d3:b0:ff:f0:e7:31:dd:80:3f:bd:
         61:3d:ed:11:73:16:53:2a:fd:4a:33:ba:80:b8:4e:96:a8:4d:
         60:fd:5b:a4:79:75:4e:21:74:23:29:63:08:be:d9:d4:78:b6:
         7f:55:a9:30:fa:44:09:91:c3:40:e7:ac:a2:56:7a:f3:bc:55:
         9d:0c:19:db:37:0a:1d:1a:3b:f0:63:ec:8b:53:0d:63:88:ef:
         67:7e:0b:49:0c:b3:6b:e4:46:27:61:c8:a4:59:5e:59:d9:c8:
         17:12:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:17 2024 by rpki-client on console-fra.rpki-client.org