Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa
File:                     323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (raw, json)
Hash identifier:          fVpbD9X6wqpPxrOPbXlB5CCy9FGeM3cXsa7bEyoIlQA=
Subject key identifier:   F3:9F:E2:37:46:B9:4E:0C:03:06:FA:EA:7F:04:82:1B:08:5B:29:DE
Certificate issuer:       /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
Certificate serial:       64796D187400335A0C4ED05CAD8760586136EF92
Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa
Signing time:             Thu 04 Apr 2024 10:07:10 +0000
ROA not before:           Thu 04 Apr 2024 10:02:10 +0000
ROA not after:            Thu 03 Apr 2025 10:07:10 +0000
asID:                     269337
IP address blocks:        2804:6314::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl
                          rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:79:6d:18:74:00:33:5a:0c:4e:d0:5c:ad:87:60:58:61:36:ef:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
        Validity
            Not Before: Apr  4 10:02:10 2024 GMT
            Not After : Apr  3 10:07:10 2025 GMT
        Subject: CN=F39FE23746B94E0C0306FAEA7F04821B085B29DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:87:0e:88:34:37:3f:82:38:05:1a:14:48:
                    da:f6:cb:44:06:65:b0:3e:ca:d7:39:60:07:d5:03:
                    e3:79:65:8f:e2:a5:5e:67:78:95:52:90:59:e4:31:
                    44:b6:a9:b3:b3:92:6b:90:4d:f1:07:f4:d0:1f:2a:
                    9f:78:d2:62:b2:79:3f:a8:67:ef:f6:70:23:60:c6:
                    78:e6:d7:5a:02:0b:e1:cf:a5:e9:94:5a:e8:ad:2c:
                    d1:e2:e7:e2:9c:fc:1f:70:22:26:4e:d5:d7:ba:e4:
                    9d:5b:2a:00:4a:30:c1:f8:3f:84:96:ec:71:90:58:
                    cf:db:aa:a8:cc:01:87:2f:09:63:41:d5:df:52:25:
                    19:6f:2a:76:6b:d7:2b:e6:b1:0c:0e:16:41:94:91:
                    0a:84:28:b4:25:8d:e6:9a:79:b5:d6:93:65:99:f6:
                    9b:00:2b:04:b3:65:3b:8c:ae:6f:a4:cc:c8:a4:5d:
                    3d:e5:26:41:6e:b6:48:2e:85:2f:09:5b:66:8f:e1:
                    f3:04:b6:dc:ca:81:7c:bb:3c:f2:82:8a:a6:0b:ac:
                    3d:d8:a3:ab:42:e2:86:b8:6d:dd:fc:b5:b4:a1:f4:
                    46:50:82:28:9c:90:da:61:86:03:eb:ac:98:8d:ce:
                    ae:de:81:b9:bc:74:b4:2c:b3:6c:96:55:a2:51:29:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9F:E2:37:46:B9:4E:0C:03:06:FA:EA:7F:04:82:1B:08:5B:29:DE
            X509v3 Authority Key Identifier:
                keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6314::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:90:14:1c:bc:44:3e:9a:17:25:79:13:63:a0:21:d2:19:6a:
         53:6b:1d:af:e0:d6:60:d4:00:f1:cf:48:8f:ed:49:5c:1e:d6:
         9e:fb:96:16:b3:09:c1:4a:c2:26:a7:87:9e:73:fb:ed:fe:96:
         3d:3d:7a:de:c9:e3:62:d1:84:b5:7d:e5:6a:10:95:34:97:14:
         69:84:90:a1:cd:2c:1f:4f:24:36:48:ee:ed:b3:a3:3f:d1:94:
         81:07:d6:aa:ac:2b:b2:69:ef:9e:9d:7a:62:b8:d3:d2:25:2b:
         96:b5:86:56:0a:5c:7d:97:72:53:16:93:90:6a:ea:66:2c:ed:
         bf:9d:69:1a:ea:fe:f4:21:32:1e:0a:8d:d3:cd:55:d1:07:e7:
         6c:f1:cf:cc:73:01:46:50:45:e7:42:c3:35:a4:ea:9a:cb:6a:
         94:59:a6:64:0b:45:46:82:6e:e7:eb:e5:36:a1:69:3a:ff:42:
         81:bc:4a:b2:98:33:19:fc:45:36:f3:ac:67:54:44:14:32:d5:
         c6:21:a0:a8:26:1f:7d:d8:9f:01:88:4e:18:5e:6a:1a:65:14:
         f4:fa:94:f9:ac:fc:75:ea:cc:5f:09:82:90:a9:c7:7b:26:0d:
         a4:45:da:7a:c6:1f:e4:e0:22:cf:40:6d:22:71:fc:ad:8d:e4:
         5f:87:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:12:57 2024 by rpki-client on console-fra.rpki-client.org