Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/323830343a366537633a3a2f33322d3335203d3e20323730363030.roa
File:                     323830343a366537633a3a2f33322d3335203d3e20323730363030.roa (raw, json)
Hash identifier:          0adylPp3EM4ChGbzgeFAR+s1pp76hPzFl454QCaYy2A=
Subject key identifier:   B0:6A:81:60:D1:07:57:80:92:5F:4D:7D:AC:1D:EA:02:E9:61:92:4B
Certificate issuer:       /CN=8AE4EB207A648990E78CA113D88B9704FE8BCC31
Certificate serial:       49662E4D17A620B43369F0196A768E42DD6EA8AB
Authority key identifier: 8A:E4:EB:20:7A:64:89:90:E7:8C:A1:13:D8:8B:97:04:FE:8B:CC:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/323830343a366537633a3a2f33322d3335203d3e20323730363030.roa
Signing time:             Thu 04 Apr 2024 09:37:32 +0000
ROA not before:           Thu 04 Apr 2024 09:32:32 +0000
ROA not after:            Thu 03 Apr 2025 09:37:32 +0000
asID:                     270600
IP address blocks:        2804:6e7c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:66:2e:4d:17:a6:20:b4:33:69:f0:19:6a:76:8e:42:dd:6e:a8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4EB207A648990E78CA113D88B9704FE8BCC31
        Validity
            Not Before: Apr  4 09:32:32 2024 GMT
            Not After : Apr  3 09:37:32 2025 GMT
        Subject: CN=B06A8160D1075780925F4D7DAC1DEA02E961924B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:ec:0b:94:cc:f2:fe:eb:c8:3f:3f:8d:aa:
                    b6:78:89:25:a2:cc:dc:bf:20:06:7a:24:95:eb:e5:
                    e2:6c:48:6f:9b:6b:cd:82:c2:3a:cd:00:58:82:5a:
                    fc:9a:bc:f2:14:9a:56:26:8d:d9:57:8a:1c:16:fb:
                    88:cb:bb:02:b3:7c:b1:46:f5:24:a6:49:5d:ec:99:
                    44:29:b0:96:71:ac:d6:39:d8:4e:86:2e:20:87:7b:
                    a4:fa:11:8e:fd:53:cc:4f:b9:f6:6b:c4:35:4f:17:
                    b8:a5:94:46:ff:58:ee:06:ca:67:04:b4:c6:0b:62:
                    8c:af:38:40:69:d2:fa:20:30:f4:4f:f5:4a:bb:8b:
                    48:b6:ee:14:e8:07:f4:08:eb:aa:73:fd:c8:4f:71:
                    b9:2a:01:15:80:c6:90:e0:25:35:24:1b:f9:fe:1c:
                    09:f4:f6:df:49:8f:75:2d:55:04:1d:09:8d:bf:8d:
                    04:d1:a4:7f:ac:0b:3f:76:a3:5e:dc:c0:ad:10:d4:
                    91:b0:74:d3:5c:e4:d2:75:7d:33:a8:a1:8d:0e:14:
                    ec:df:c1:3c:14:39:27:03:95:db:38:fc:b6:44:d2:
                    9e:7a:9e:00:10:36:cb:3f:07:9a:0f:fe:73:aa:cd:
                    64:6b:4c:9c:36:85:42:75:30:98:04:2f:a5:c1:d0:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6A:81:60:D1:07:57:80:92:5F:4D:7D:AC:1D:EA:02:E9:61:92:4B
            X509v3 Authority Key Identifier:
                keyid:8A:E4:EB:20:7A:64:89:90:E7:8C:A1:13:D8:8B:97:04:FE:8B:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/323830343a366537633a3a2f33322d3335203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:40:75:e3:75:5b:bb:6d:f3:77:ba:ca:30:33:00:27:40:
         0c:eb:74:20:50:6c:af:ab:b6:c1:d1:f7:63:4c:94:3b:20:c1:
         3e:44:46:3c:74:63:ba:db:91:0f:1f:b0:44:2d:4b:bf:d0:8f:
         76:b3:13:04:56:7e:3e:43:16:c3:4b:6f:ea:f1:7f:c4:0a:41:
         f5:24:21:47:79:76:ac:bc:d4:d8:54:6d:48:a2:7a:2d:45:9e:
         be:20:89:03:65:d4:5a:46:7c:8a:72:45:82:47:dd:91:61:75:
         30:69:f6:a5:67:db:d5:7a:b3:f0:6d:3f:b0:ff:9e:50:03:6f:
         72:a5:a3:1d:50:6a:74:7b:ed:bb:61:a2:f1:d9:73:7d:7d:21:
         73:4d:e0:d1:5a:36:b3:82:82:73:7b:c8:b1:c4:9c:54:cb:3d:
         42:ac:3e:2a:cd:5a:d4:42:c2:57:72:f9:a7:80:23:38:58:c5:
         c3:d5:07:33:5c:55:07:5d:11:8c:6c:c7:9a:f0:c4:9c:d1:b8:
         2d:18:c1:aa:3a:f6:23:0b:dd:d1:15:9a:e3:0f:75:4a:8a:95:
         41:c2:40:c6:8e:eb:c5:26:f5:03:3b:52:5d:d2:1b:8c:31:4c:
         b4:b1:51:2a:54:fd:ff:db:25:9e:f6:35:c1:ce:6a:8b:70:63:
         2d:40:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:44 2024 by rpki-client on console-ams.rpki-client.org