Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          nr8S9yU65tjE0ntGpxblu5+Y8C2cwxDQbBzDCjE/P1Y=
Subject key identifier:   B5:B4:C4:08:1D:94:F9:EF:80:2A:D5:84:7E:04:5A:3A:D3:55:C4:AB
Certificate issuer:       /CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
Certificate serial:       5EB2D8814FDB4BD27883E6FA2E08EF2B9E327565
Authority key identifier: 1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Mon 08 Jul 2024 13:08:49 +0000
ROA not before:           Mon 08 Jul 2024 13:03:49 +0000
ROA not after:            Mon 07 Jul 2025 13:08:49 +0000
asID:                     269566
IP address blocks:        2804:6688::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b2:d8:81:4f:db:4b:d2:78:83:e6:fa:2e:08:ef:2b:9e:32:75:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
        Validity
            Not Before: Jul  8 13:03:49 2024 GMT
            Not After : Jul  7 13:08:49 2025 GMT
        Subject: CN=B5B4C4081D94F9EF802AD5847E045A3AD355C4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:69:03:fd:80:ef:18:6d:bc:92:0b:57:7d:
                    48:e9:15:62:a5:61:f5:5b:b7:46:1e:a3:3b:a2:ca:
                    8a:f2:91:08:8e:70:10:81:f0:21:e1:16:81:06:6f:
                    37:07:ff:68:ba:21:56:6b:94:2c:19:26:60:cf:4e:
                    95:7c:40:a8:f8:af:10:d1:4b:6f:6f:b5:1f:ec:61:
                    52:ea:38:c0:e0:1b:8d:ff:9f:ab:08:e1:0b:80:78:
                    c5:7f:29:05:3a:8b:3d:be:14:11:49:eb:23:e6:06:
                    57:5a:ec:a3:48:bf:53:49:c0:bf:f3:10:58:14:c6:
                    37:7e:cf:50:36:f4:51:d4:83:2f:50:2d:79:47:f9:
                    4d:45:10:bb:cb:dc:29:b5:dd:23:ea:db:87:31:20:
                    50:c1:33:82:13:ec:44:e6:a4:e2:de:b9:d2:de:89:
                    98:fd:25:5f:fc:32:24:de:76:77:4b:17:6c:d0:68:
                    72:17:cd:a7:1e:59:54:b3:69:7b:34:5d:8f:2a:81:
                    c7:4e:5b:91:27:ae:97:c3:1e:80:4a:06:d2:7b:e3:
                    e7:2a:6a:99:f8:e1:45:08:4c:98:cf:f7:ec:1f:34:
                    01:1b:97:47:15:ac:65:04:62:2a:1e:8a:9d:67:ea:
                    2e:53:ae:56:8a:e3:8d:f4:aa:c4:20:d2:47:7d:ff:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B4:C4:08:1D:94:F9:EF:80:2A:D5:84:7E:04:5A:3A:D3:55:C4:AB
            X509v3 Authority Key Identifier:
                keyid:1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:c1:4d:e8:24:af:36:0e:dc:40:b8:b9:ed:4c:1e:f2:87:c8:
         01:69:fe:6e:55:a1:f3:3a:01:7f:65:e0:de:92:75:77:de:71:
         ea:dc:e5:43:6d:75:ed:a1:4c:17:6b:ad:44:e8:18:2d:75:5d:
         0a:77:37:f4:5b:f6:9e:64:49:8f:d0:38:08:47:9b:64:5f:61:
         de:e1:85:c5:9a:c9:ef:5f:23:2a:6c:c7:31:e7:ec:95:74:b0:
         20:57:96:db:e4:c4:6c:4c:ca:0b:50:7f:08:d3:30:bc:32:db:
         ee:51:a6:9f:ce:d3:e9:88:a4:03:63:5d:6a:d1:11:9d:57:16:
         11:3b:2e:55:03:20:e7:de:42:ee:87:a4:31:a6:a7:6f:7e:42:
         e7:f1:76:9d:81:8c:a9:43:ab:31:e4:76:11:7b:a0:6e:f2:59:
         41:7b:2d:b8:46:ae:4d:3d:a0:99:5d:a3:a7:76:b7:05:9a:db:
         14:5e:a4:58:fd:41:1f:e8:d8:0b:49:fc:3d:a6:8a:d4:db:86:
         a5:c8:96:3b:8f:79:bd:1c:2e:0d:17:70:10:9b:f9:21:b8:a9:
         8d:dc:5d:12:ce:00:f1:7c:a3:5e:0b:a6:5d:56:48:ef:87:57:
         58:f6:32:03:8b:6b:02:af:dc:b2:77:5e:0b:ae:e1:64:af:3a:
         07:7e:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:52 2024 by rpki-client on console-ams.rpki-client.org