Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          zKdDDDhTDk3TeQPJDaJF1s7orchoq3V7FVHLNxLRgpI=
Subject key identifier:   6F:D7:EA:80:42:F3:36:7D:B0:4A:2B:79:F9:0E:B4:86:41:F1:10:08
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       141229061299676BDA6804FEF6B56C16A48C8E24
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:02:01 +0000
ROA not before:           Thu 04 Apr 2024 15:57:01 +0000
ROA not after:            Thu 03 Apr 2025 16:02:01 +0000
asID:                     268726
IP address blocks:        2804:59cc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:12:29:06:12:99:67:6b:da:68:04:fe:f6:b5:6c:16:a4:8c:8e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:57:01 2024 GMT
            Not After : Apr  3 16:02:01 2025 GMT
        Subject: CN=6FD7EA8042F3367DB04A2B79F90EB48641F11008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:81:04:1e:e4:7e:68:3c:fa:63:b4:9f:89:
                    29:a5:cb:6e:4c:a9:23:54:8b:87:69:6a:96:a4:58:
                    32:71:ad:df:f6:4b:0f:61:11:5b:bf:7e:4a:72:54:
                    d2:55:b4:d9:5c:50:f2:30:3e:fc:37:32:43:d3:cb:
                    79:18:2b:45:9e:f9:c2:3c:37:18:8e:21:be:bc:a6:
                    16:f8:3c:31:28:66:33:9f:6c:df:ce:fc:a6:92:4a:
                    c3:8b:45:9f:b1:05:06:fc:8c:a9:46:2f:97:f6:6e:
                    26:d5:7f:d3:2e:94:9d:7a:e8:64:c9:91:3f:11:47:
                    cc:c6:42:1e:c6:b5:02:39:ec:1c:1e:0a:da:9d:65:
                    97:1c:be:55:95:15:64:42:e0:ea:b1:d4:74:b1:9c:
                    85:66:a0:a1:e7:ea:c0:6e:81:da:23:67:68:5a:36:
                    bd:4b:0f:15:51:b9:07:11:d0:6f:36:42:04:a2:12:
                    99:b2:e6:c8:64:4a:61:59:6a:ea:c4:99:cb:2d:f8:
                    79:98:09:4e:31:2e:41:60:00:b3:66:7e:f5:fa:01:
                    78:17:e6:c4:76:f5:46:5e:18:e2:ad:4f:2f:84:15:
                    44:9c:f7:45:06:d4:1d:5a:31:d2:85:bf:1f:bd:7f:
                    5d:74:32:cd:f7:01:67:69:4d:74:bc:ee:84:7b:b8:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D7:EA:80:42:F3:36:7D:B0:4A:2B:79:F9:0E:B4:86:41:F1:10:08
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:e1:80:80:bc:f9:dd:68:2b:72:56:c5:7a:89:10:73:81:35:
         67:37:12:f7:c4:48:15:1c:fe:3f:5d:ea:84:29:af:7f:83:1e:
         46:4e:89:17:44:ef:e2:95:88:e0:f0:16:d1:66:15:35:46:7d:
         ba:6c:06:07:89:c2:06:c7:45:f4:dc:3f:d9:c9:d9:c5:88:7f:
         7a:39:1f:e1:af:c8:15:6d:c6:88:bd:9d:df:8b:6e:fa:ed:6f:
         73:d2:9b:42:ff:00:8b:77:ac:3a:d1:ab:9a:3f:ab:3e:32:aa:
         57:37:81:5d:ed:a7:2c:fb:a7:1b:5e:65:a1:6b:76:29:15:57:
         93:ce:52:4c:0a:57:9f:cb:8b:86:54:80:dc:17:8d:57:54:42:
         dc:0b:af:7c:39:ae:89:f2:db:c7:4f:50:f0:45:e7:d2:db:89:
         cf:54:18:16:32:db:1a:88:3d:a7:9a:52:15:5b:22:31:96:86:
         1f:ec:a6:66:1c:80:ff:48:8a:31:d3:0f:78:55:84:58:ee:9a:
         d5:f4:0e:af:c7:e3:e8:64:3a:77:21:ec:c0:9f:c0:09:69:da:
         03:c5:46:cf:1e:4a:09:a9:26:9a:e2:4f:80:f6:fc:04:ec:39:
         8c:cc:58:51:63:85:c4:9b:dd:68:a3:ab:36:d1:de:d4:e3:11:
         de:11:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:50 2024 by rpki-client on console-fra.rpki-client.org