Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa
File:                     323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa (raw, json)
Hash identifier:          3do2ZS4CMxmif65T/CeCey1VmqkLYpydRanr6RPCeOM=
Subject key identifier:   E9:66:5C:DB:04:7F:EC:6F:55:E1:83:A1:B9:95:B8:B6:EE:4C:9A:96
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       73F2DCD953BAF1DC16FFB0A4DC0BFA94FF9BDB48
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa
Signing time:             Thu 04 Apr 2024 06:42:24 +0000
ROA not before:           Thu 04 Apr 2024 06:37:24 +0000
ROA not after:            Thu 03 Apr 2025 06:42:24 +0000
asID:                     270365
IP address blocks:        2804:6ae8:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f2:dc:d9:53:ba:f1:dc:16:ff:b0:a4:dc:0b:fa:94:ff:9b:db:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Apr  4 06:37:24 2024 GMT
            Not After : Apr  3 06:42:24 2025 GMT
        Subject: CN=E9665CDB047FEC6F55E183A1B995B8B6EE4C9A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:81:44:e2:33:e7:34:ca:56:94:45:93:6a:ed:
                    6e:f0:4a:f5:23:5a:55:d0:ac:98:92:56:c5:c0:ee:
                    a7:2b:2c:c0:76:43:25:4e:35:ef:36:6e:5f:28:6c:
                    c8:0f:43:9d:80:3e:ec:b1:09:8c:38:1e:cb:8b:bc:
                    ca:3a:2f:4f:c1:b8:f1:1a:02:cb:c8:fe:3d:e3:7f:
                    65:8c:14:d4:d9:5d:da:04:05:78:63:01:63:36:fb:
                    f4:16:3c:86:fa:dd:b9:c0:28:d5:ab:b5:0a:7d:07:
                    35:a5:ed:27:5c:a9:16:bc:c4:3e:3b:6e:ec:0c:63:
                    10:c7:52:0f:df:54:2f:4a:e1:a3:20:c1:89:41:12:
                    00:c4:3c:2b:40:78:56:55:70:db:22:3f:d6:5d:91:
                    13:53:bd:be:ff:db:99:73:d9:de:88:64:f2:5a:fa:
                    3e:30:35:8f:d3:75:3d:41:e5:cc:02:92:b1:ff:74:
                    aa:fd:a5:62:5f:14:6c:90:dc:64:27:1a:da:df:95:
                    da:7a:55:22:64:77:ee:ae:bc:1a:89:5f:ca:84:3b:
                    11:69:04:35:e7:ad:90:71:46:53:1f:fc:2c:2a:98:
                    4b:0a:76:c0:8e:b0:56:5a:e2:90:d6:45:23:10:b9:
                    ca:4b:ef:6d:11:ef:34:a4:66:cf:f9:99:5d:93:1d:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:5C:DB:04:7F:EC:6F:55:E1:83:A1:B9:95:B8:B6:EE:4C:9A:96
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ae8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:f7:c5:8e:b7:d1:d1:0f:bb:91:70:08:fb:a6:ac:85:0d:78:
         eb:0f:b4:2f:05:5f:d4:3b:16:73:fc:7c:b9:6b:7e:8a:11:98:
         ab:47:d1:1a:63:dd:65:55:d9:66:00:52:84:a0:1d:85:a5:cc:
         af:fe:be:f7:b0:0a:a7:3e:fe:01:28:30:59:25:ee:d8:f2:ae:
         be:ca:cf:7a:ee:bd:75:d9:7b:ae:40:6c:54:15:4b:78:88:90:
         78:81:37:88:a9:fe:a0:35:c4:68:4a:be:1f:7a:62:d2:60:ae:
         3b:9d:2f:5b:14:ca:a8:4e:a4:cf:b0:68:2f:62:22:f8:9e:26:
         90:e3:33:34:e5:ea:92:65:20:94:7f:6b:4e:68:96:11:7a:20:
         c5:91:d2:ec:ab:84:13:58:f4:0f:ce:ca:8c:60:c6:96:64:4c:
         45:14:c3:03:80:55:19:27:88:eb:c7:85:57:81:b5:99:23:ec:
         e1:26:5f:7e:5b:4a:b4:ff:6c:16:1d:58:1f:9b:38:65:60:14:
         0c:0f:0e:a8:fa:db:3f:c2:9a:3d:c6:cb:56:89:44:ee:cc:1f:
         72:57:33:52:19:63:2f:51:bb:ec:b6:c8:aa:79:48:9a:e7:fd:
         f5:fe:8b:38:b9:57:00:ef:f5:68:0e:4c:32:c4:a0:7d:de:8b:
         df:b6:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:20 2024 by rpki-client on console-ams.rpki-client.org