Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/323830343a383132343a3a2f33322d3438203d3e20323732343335.roa
File:                     323830343a383132343a3a2f33322d3438203d3e20323732343335.roa (raw, json)
Hash identifier:          26RVtcT5CzAauseTZ1LULRA9J/2BMOGsR2TgjBvV+nY=
Subject key identifier:   6F:E2:53:9A:8E:78:0B:A9:E1:FA:62:3F:F1:6A:85:F6:80:A9:3B:4B
Certificate issuer:       /CN=D74EFE2D47A320A7B31005AF365FC275085C95CE
Certificate serial:       76AA312E884308D609A841E5E48BD1F54210623A
Authority key identifier: D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/323830343a383132343a3a2f33322d3438203d3e20323732343335.roa
Signing time:             Thu 04 Apr 2024 11:12:51 +0000
ROA not before:           Thu 04 Apr 2024 11:07:51 +0000
ROA not after:            Thu 03 Apr 2025 11:12:51 +0000
asID:                     272435
IP address blocks:        2804:8124::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl
                          rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:aa:31:2e:88:43:08:d6:09:a8:41:e5:e4:8b:d1:f5:42:10:62:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EFE2D47A320A7B31005AF365FC275085C95CE
        Validity
            Not Before: Apr  4 11:07:51 2024 GMT
            Not After : Apr  3 11:12:51 2025 GMT
        Subject: CN=6FE2539A8E780BA9E1FA623FF16A85F680A93B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:9d:2b:7e:bc:89:46:66:e0:45:d6:6a:b0:
                    48:96:77:b6:9b:fa:c9:41:d1:d9:ef:8c:ca:8a:c6:
                    79:b5:e4:fa:7b:ea:8d:37:39:ce:c4:28:b7:46:6e:
                    71:49:3a:c4:bc:1c:98:ed:91:3b:e8:6c:ed:2c:8b:
                    5b:66:0d:fb:5d:2f:97:9f:4c:74:6b:e1:98:c3:38:
                    2c:48:a1:4e:c3:e5:09:7b:9c:59:e1:90:5a:26:f1:
                    ec:8c:60:97:1b:fa:19:24:ab:db:45:29:25:b9:10:
                    74:dd:23:d3:9a:c6:6c:3e:1c:72:3d:42:9d:f0:4e:
                    23:4f:c2:77:4c:89:2f:23:d6:29:4b:66:61:cc:57:
                    b8:3b:59:fc:23:1d:f7:8f:e0:98:6c:21:47:6c:18:
                    6b:c4:0b:70:58:f7:bd:09:4c:3e:9e:66:72:34:0a:
                    b8:03:5f:18:1b:5d:4f:4e:00:d2:ce:e7:14:49:96:
                    4e:ed:52:6e:8b:5f:ee:2e:66:a7:d5:37:c1:ee:12:
                    db:9c:63:bd:32:a2:6b:ef:f6:76:2f:38:29:12:48:
                    7b:5b:33:e8:95:11:98:3e:80:dd:b7:56:77:c6:4a:
                    a1:0a:33:33:62:24:e2:26:4f:22:b7:c6:88:82:6c:
                    0b:cd:44:80:ac:f8:31:fe:e8:15:16:33:e4:4a:30:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:53:9A:8E:78:0B:A9:E1:FA:62:3F:F1:6A:85:F6:80:A9:3B:4B
            X509v3 Authority Key Identifier:
                keyid:D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/323830343a383132343a3a2f33322d3438203d3e20323732343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8124::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:ae:71:95:15:5e:0e:22:f8:03:23:6c:15:8f:e6:04:cd:
         0f:fd:91:61:67:71:e2:55:6f:8f:a1:9d:eb:73:bc:fd:c3:da:
         52:93:fc:aa:31:f5:10:11:62:95:b1:cc:5c:1f:90:a2:61:a4:
         f6:b1:1e:1b:4c:e2:37:39:c4:7b:0b:4c:b4:48:9f:79:c6:de:
         91:04:4f:bc:13:73:20:bd:c6:e4:79:b4:f9:83:85:be:b3:8f:
         a1:ff:dd:90:02:8c:e8:bf:78:12:8c:59:f4:04:05:26:8f:47:
         10:f4:00:0e:1b:5a:4a:46:bd:c4:a8:76:62:f1:43:78:3e:5f:
         71:05:74:4a:43:c0:08:01:b2:22:95:6f:9f:3f:a2:a4:ee:5e:
         26:e0:8d:9e:43:62:54:df:93:00:04:bf:b9:5f:b8:ac:53:f1:
         b0:da:41:f1:78:f6:04:20:b5:7f:f6:5e:3b:9a:df:4f:39:33:
         51:34:00:77:30:88:8b:9f:c4:85:7c:76:83:4a:a4:5b:c9:be:
         0f:6e:43:29:c8:dd:15:8c:5c:1b:1e:7a:2e:77:6c:d1:94:4e:
         29:23:92:7e:a3:33:5f:88:da:f3:53:0e:e9:22:ef:8f:f5:57:
         a1:1b:d0:eb:bf:64:87:30:ae:bb:08:92:8f:69:8d:6d:df:d3:
         15:f5:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:42 2024 by rpki-client on console-fra.rpki-client.org