Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a343030303a3a2f33342d3334203d3e20323730353935.roa
File:                     323830343a366536383a343030303a3a2f33342d3334203d3e20323730353935.roa (raw, json)
Hash identifier:          5NPDvMK3Y0v5S1oDxbONX8oUzzOZ7xE54y3Os/D9nlE=
Subject key identifier:   05:69:C8:27:7C:0A:AF:63:96:2A:34:66:CD:2A:F3:61:F3:FF:27:54
Certificate issuer:       /CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
Certificate serial:       78121F217D6F3BEC267976D28F0AC85045A8BBCB
Authority key identifier: 41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a343030303a3a2f33342d3334203d3e20323730353935.roa
Signing time:             Fri 16 Aug 2024 13:19:50 +0000
ROA not before:           Fri 16 Aug 2024 13:14:50 +0000
ROA not after:            Fri 15 Aug 2025 13:19:50 +0000
asID:                     270595
IP address blocks:        2804:6e68:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl
                          rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:12:1f:21:7d:6f:3b:ec:26:79:76:d2:8f:0a:c8:50:45:a8:bb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
        Validity
            Not Before: Aug 16 13:14:50 2024 GMT
            Not After : Aug 15 13:19:50 2025 GMT
        Subject: CN=0569C8277C0AAF63962A3466CD2AF361F3FF2754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:7c:85:aa:06:27:7e:9e:e6:f8:1d:e6:cc:
                    4e:f9:b8:6e:47:f0:4f:51:12:2e:ef:e4:7b:25:ea:
                    90:73:1f:a8:19:c3:e9:45:4d:d1:bc:c1:a3:af:2e:
                    97:b0:4a:2a:ca:ea:a0:62:00:09:04:ac:0c:62:33:
                    b7:b0:44:17:04:48:b6:fb:38:1e:e3:34:b1:52:03:
                    24:dc:3b:b2:ff:2b:4b:82:7c:bd:a7:30:e7:55:2f:
                    52:c5:e0:a0:9e:45:a9:d3:47:45:7c:96:71:86:fd:
                    d1:a5:3e:4b:2c:f4:c1:e2:9a:14:6d:3b:18:ca:65:
                    ec:bb:5d:cf:79:c6:f4:21:dd:09:7c:10:fe:0a:4d:
                    6a:8f:6f:54:ca:ce:ea:18:d5:51:02:f9:18:ed:ab:
                    7c:a5:ee:97:d0:ad:41:79:8c:53:d8:49:ec:8d:93:
                    4c:43:3f:dc:9e:94:30:16:3a:0f:21:f0:05:29:da:
                    2b:dd:49:ab:b0:04:27:45:a7:5f:3d:00:41:da:3c:
                    71:87:7c:54:8e:b7:f3:71:63:f8:71:e5:e0:06:ab:
                    96:78:07:c5:f1:ba:dd:bd:5c:39:30:87:36:87:98:
                    5e:8d:f5:14:6a:b2:e5:51:5b:fa:6f:8a:2d:30:98:
                    2a:07:7f:47:38:78:52:c5:11:b2:01:a8:95:59:17:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:C8:27:7C:0A:AF:63:96:2A:34:66:CD:2A:F3:61:F3:FF:27:54
            X509v3 Authority Key Identifier:
                keyid:41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a343030303a3a2f33342d3334203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e68:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:65:dc:6d:4b:12:3f:72:cf:2c:d4:b8:ed:b9:d4:bb:e9:1c:
         46:3b:92:1f:49:d6:ad:f3:8b:20:92:ce:ff:41:94:a8:5c:c3:
         d8:d1:f1:b2:b6:46:f7:1d:c9:43:94:b9:a5:cc:b6:25:8d:e7:
         2f:38:0e:dd:f8:17:63:96:61:ff:d3:7a:2e:62:f8:cb:16:76:
         f5:bd:f5:8c:70:59:89:04:6b:c6:79:75:d1:4e:58:aa:13:5a:
         8b:0a:97:94:48:4d:f9:7e:68:c6:be:cb:9f:3b:26:5e:9e:e7:
         e6:8f:f9:7d:5b:26:90:3b:b4:21:a1:6f:6e:3f:17:e7:54:53:
         dd:14:d1:e7:30:22:af:27:2b:f6:eb:0a:66:d2:fc:6c:16:23:
         d5:aa:76:06:94:bb:f6:8c:ef:1d:da:d8:62:88:bb:44:67:32:
         ae:f8:88:93:5f:e7:e8:e4:04:54:24:31:d5:1c:58:54:b5:ab:
         3b:f0:1b:de:78:54:de:d8:99:77:55:e3:ae:41:2a:b1:69:52:
         d9:18:77:20:d5:02:3d:f8:59:da:52:e9:4e:d6:b2:52:08:c9:
         cd:df:c9:a6:65:40:d4:80:5c:a7:49:51:fa:9a:9e:16:01:2c:
         5f:6a:5f:83:96:da:62:f9:d4:0e:3a:bb:9a:36:ba:55:ba:48:
         58:02:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:58 2024 by rpki-client on console-ams.rpki-client.org