Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/1/323830343a363435383a3a2f33322d3332203d3e20323639343232.roa
File:                     323830343a363435383a3a2f33322d3332203d3e20323639343232.roa (raw, json)
Hash identifier:          vSxEisvjgx+JXDjTWZtPTyoYDXpV9fZyG656caPgHok=
Subject key identifier:   A6:DF:FB:A9:7C:47:94:18:BC:E5:43:74:39:38:8C:B0:55:0E:D2:FC
Certificate issuer:       /CN=ED6E2751DBFC30B4349CEA2104A36210FEE7A82B
Certificate serial:       32E5B1812CD07A7F18D6D3D93A65468EC68CB628
Authority key identifier: ED:6E:27:51:DB:FC:30:B4:34:9C:EA:21:04:A3:62:10:FE:E7:A8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED6E2751DBFC30B4349CEA2104A36210FEE7A82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/1/323830343a363435383a3a2f33322d3332203d3e20323639343232.roa
Signing time:             Thu 04 Apr 2024 09:07:41 +0000
ROA not before:           Thu 04 Apr 2024 09:02:41 +0000
ROA not after:            Thu 03 Apr 2025 09:07:41 +0000
asID:                     269422
IP address blocks:        2804:6458::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/1/ED6E2751DBFC30B4349CEA2104A36210FEE7A82B.crl
                          rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/1/ED6E2751DBFC30B4349CEA2104A36210FEE7A82B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED6E2751DBFC30B4349CEA2104A36210FEE7A82B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e5:b1:81:2c:d0:7a:7f:18:d6:d3:d9:3a:65:46:8e:c6:8c:b6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED6E2751DBFC30B4349CEA2104A36210FEE7A82B
        Validity
            Not Before: Apr  4 09:02:41 2024 GMT
            Not After : Apr  3 09:07:41 2025 GMT
        Subject: CN=A6DFFBA97C479418BCE5437439388CB0550ED2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:bc:d3:c2:df:45:bc:d6:19:fc:75:57:24:
                    92:7f:57:cc:dd:33:a8:7f:bc:10:79:7a:ba:14:a3:
                    38:8d:6d:bf:d3:e8:7a:af:d3:a9:db:78:18:71:df:
                    21:15:d1:41:01:2a:2c:df:82:88:07:6c:45:7c:4e:
                    03:0a:d3:fd:27:d7:ee:06:5d:1e:60:27:9e:f2:9e:
                    f6:ea:1c:c7:e0:7d:9d:c7:75:56:38:d2:a9:37:0b:
                    6a:7c:df:85:f8:e5:e4:98:b3:0c:a4:db:56:d0:b3:
                    c4:1d:82:f6:88:f1:5a:6e:7f:7f:57:6a:f4:ec:aa:
                    49:33:7b:77:42:e4:3f:d7:34:e2:d3:02:b6:34:77:
                    07:da:42:d5:74:42:47:0e:4a:f7:e3:7d:4a:5a:83:
                    a8:96:9e:ed:ef:54:0f:ae:34:f2:22:1c:a9:17:2a:
                    41:bf:73:a5:ce:6f:92:f4:e4:e4:b5:95:83:32:9d:
                    c4:40:eb:79:f1:c7:53:61:be:e6:a6:b4:d8:da:c9:
                    ab:6b:4e:ba:45:12:68:8c:ae:56:f0:58:08:7d:4b:
                    67:84:ad:a0:c9:64:e8:10:57:8b:2f:d8:67:f9:be:
                    07:64:04:09:d8:d8:fc:1f:61:86:3f:3d:ea:07:ca:
                    f2:47:f6:04:c4:3e:23:80:07:03:26:ac:91:47:4d:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:FB:A9:7C:47:94:18:BC:E5:43:74:39:38:8C:B0:55:0E:D2:FC
            X509v3 Authority Key Identifier:
                keyid:ED:6E:27:51:DB:FC:30:B4:34:9C:EA:21:04:A3:62:10:FE:E7:A8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/1/ED6E2751DBFC30B4349CEA2104A36210FEE7A82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED6E2751DBFC30B4349CEA2104A36210FEE7A82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/1/323830343a363435383a3a2f33322d3332203d3e20323639343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6458::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:2b:35:1e:bd:a5:28:14:2e:fe:17:4d:ac:6e:fa:76:20:23:
         88:e7:8e:1a:22:2a:8f:00:bb:4c:ad:90:1f:c7:af:db:67:bf:
         a9:9c:05:3f:22:95:7b:7b:c7:58:94:67:59:aa:d9:ee:8f:75:
         f9:82:b9:0b:ed:b3:0e:00:46:f5:7f:43:c8:28:4d:65:80:56:
         97:07:25:c7:ce:3e:8e:b1:df:f7:c5:96:b0:01:c5:fd:9c:64:
         df:6f:11:cb:a6:9b:29:0a:95:f7:56:37:b9:f5:c3:90:a7:4a:
         c7:3e:e5:45:9c:b4:74:9e:de:8c:61:ed:a0:82:48:66:e6:6b:
         24:86:1b:56:47:33:00:fc:20:4f:e4:0f:af:32:4b:97:d2:2b:
         b1:1b:30:ae:e7:50:4c:b7:7c:20:46:0d:46:30:da:68:18:c9:
         15:91:30:a0:f6:b3:77:d2:44:44:73:05:eb:84:98:f9:90:f9:
         fb:21:8a:ee:92:2e:ef:6e:6b:f8:bf:aa:d5:07:c7:eb:fd:8d:
         4a:56:30:4b:10:e4:a8:a1:cf:87:34:c3:a3:77:1d:b1:1e:e1:
         ef:93:d7:3e:25:55:3b:86:f4:06:fe:aa:ce:c7:68:99:2f:1a:
         3d:df:1f:f1:53:db:ce:db:dd:7a:97:07:f6:e1:e5:8b:ad:fd:
         b4:cb:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:58 2024 by rpki-client on console-fra.rpki-client.org