Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
File:                     323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier:          aBtMVPBoQzW3jryaxFFJeeFtV+sC1I//ioKkdVXu94c=
Subject key identifier:   BB:96:C7:45:78:E8:F9:B2:D0:8F:01:4A:B7:BD:AE:6A:18:17:73:8F
Certificate issuer:       /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial:       667ECBF5A629C290BA0BBEBF6ADA69F708C9B42D
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
Signing time:             Wed 22 May 2024 14:00:29 +0000
ROA not before:           Wed 22 May 2024 13:55:29 +0000
ROA not after:            Wed 21 May 2025 14:00:29 +0000
asID:                     269411
IP address blocks:        2804:642c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7e:cb:f5:a6:29:c2:90:ba:0b:be:bf:6a:da:69:f7:08:c9:b4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
        Validity
            Not Before: May 22 13:55:29 2024 GMT
            Not After : May 21 14:00:29 2025 GMT
        Subject: CN=BB96C74578E8F9B2D08F014AB7BDAE6A1817738F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:a6:99:8d:a2:1a:38:09:81:a7:71:20:82:
                    a0:3b:df:cb:df:47:b2:29:46:1c:1c:42:7d:a6:bc:
                    d8:f5:43:c8:39:85:17:af:ff:e9:5d:39:3b:0e:37:
                    b2:75:a2:6f:27:22:ab:94:ee:80:f0:2b:5c:c9:d7:
                    00:19:2c:28:0c:d9:e5:1d:bd:89:ed:79:48:70:86:
                    db:65:0e:90:22:c3:c2:0d:44:31:19:29:c1:93:43:
                    9e:5d:91:50:e9:a4:15:19:f5:a1:79:3f:4f:b5:c1:
                    06:f6:0b:86:c5:fb:77:de:c4:d6:0f:a7:7f:d9:6d:
                    f4:2e:be:cd:18:7a:f0:24:e1:a7:0c:9e:d5:e8:c5:
                    5e:1e:f6:17:ee:4a:94:b5:a4:58:1c:1f:f9:91:bf:
                    64:30:8e:31:8b:de:ee:0d:f2:5e:3f:ad:58:35:47:
                    a0:c3:ba:86:e3:bc:06:5f:63:1d:c8:b2:08:1b:cf:
                    7b:29:85:e9:35:c0:41:ac:9e:c7:d6:44:09:37:e9:
                    47:38:ec:5f:2e:1a:5e:ce:59:56:d6:16:e3:d7:6d:
                    99:a6:24:85:d6:d4:fe:54:f9:c3:ec:de:6e:ad:e7:
                    d7:c9:c8:ae:ea:ef:3d:e6:2e:b5:e4:50:82:66:77:
                    ae:94:8f:6c:c5:fe:56:1b:db:ca:c7:80:b0:bc:ea:
                    5b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:96:C7:45:78:E8:F9:B2:D0:8F:01:4A:B7:BD:AE:6A:18:17:73:8F
            X509v3 Authority Key Identifier:
                keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:6a:e3:af:38:8e:17:3c:d8:cb:be:a7:da:cd:46:94:0f:
         7b:71:40:cc:a0:11:79:5b:4e:a9:91:a8:07:bf:24:ec:43:a8:
         7c:8b:0e:11:b1:10:c8:ef:21:ee:7e:46:65:8c:8d:9a:0f:60:
         10:f4:9d:6e:e5:c1:28:9f:0e:73:38:1b:c6:5e:73:4d:51:6c:
         34:95:57:e2:5f:8a:ff:69:29:1b:5f:0a:37:d7:ce:aa:8d:f7:
         e9:39:23:dd:12:53:e3:d8:3b:06:06:e0:d9:fc:c3:3d:d7:02:
         dc:dd:5e:b9:de:62:ef:07:1c:68:65:85:2f:59:c4:b9:6a:08:
         c5:8d:56:b0:2a:c5:3c:2c:db:eb:f8:b5:d1:a3:fe:c4:a1:00:
         b8:6f:36:4c:12:29:7e:e5:b9:52:19:b9:0e:5a:94:ba:20:92:
         1f:b0:ea:b0:02:7c:9e:85:35:32:d9:a6:fd:24:49:19:fd:72:
         48:d2:a1:36:9a:69:dd:f2:36:29:4d:73:2d:54:e0:c3:3f:5a:
         32:97:fd:43:5c:ed:06:79:e2:87:c2:a7:9d:d1:e3:90:2a:f2:
         8b:25:18:d0:d3:33:c4:76:de:6c:22:cc:32:c8:a4:1c:17:0c:
         11:38:f7:d8:62:97:78:52:76:65:7f:bc:82:a2:b3:05:4f:7e:
         65:83:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:22 2024 by rpki-client on console-ams.rpki-client.org