Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a633030303a3a2f33342d3334203d3e20323730333635.roa
File:                     323830343a366165383a633030303a3a2f33342d3334203d3e20323730333635.roa (raw, json)
Hash identifier:          wyk6fekhY1122wODocYjSyqhDsDgqUJc6Od23auxEfw=
Subject key identifier:   D7:8B:40:5A:59:42:BC:4C:3C:F4:EB:B0:09:F2:55:60:42:85:F6:F9
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       62A88EF88BE05724DB7BA74A648686BEAF7C6141
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a633030303a3a2f33342d3334203d3e20323730333635.roa
Signing time:             Thu 04 Apr 2024 06:42:24 +0000
ROA not before:           Thu 04 Apr 2024 06:37:24 +0000
ROA not after:            Thu 03 Apr 2025 06:42:24 +0000
asID:                     270365
IP address blocks:        2804:6ae8:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a8:8e:f8:8b:e0:57:24:db:7b:a7:4a:64:86:86:be:af:7c:61:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Apr  4 06:37:24 2024 GMT
            Not After : Apr  3 06:42:24 2025 GMT
        Subject: CN=D78B405A5942BC4C3CF4EBB009F255604285F6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:10:3e:94:da:3d:47:2f:21:00:6c:fc:49:43:
                    61:8e:9f:43:c0:10:67:a8:1a:06:40:7e:91:a5:b2:
                    7e:4b:f2:c6:e2:35:f9:69:fb:8a:b9:a2:99:f5:20:
                    c4:d2:89:62:05:ae:b2:6d:e7:47:bf:c3:ab:3d:f0:
                    1b:d0:35:fa:8b:69:77:b0:12:30:b6:b6:a1:bc:bd:
                    d9:4b:6b:75:29:92:46:e7:a9:94:7a:d6:45:12:3a:
                    5f:8d:16:44:3d:b4:87:00:9a:ce:04:84:2d:2c:b6:
                    e1:5e:e5:7d:1b:96:f0:8b:6d:6e:7e:83:86:80:dc:
                    a9:5b:c1:c3:20:75:e6:de:a5:9a:02:78:5f:12:f5:
                    8b:d5:1e:c3:18:82:f5:9c:c5:b5:45:a6:8c:47:04:
                    fd:17:af:b8:c4:30:ca:b7:31:13:e1:a2:31:36:b5:
                    8f:b8:92:a6:df:d5:b2:a5:8a:08:e9:e2:b8:36:22:
                    f7:d8:74:06:d3:de:c5:20:c1:f9:9f:88:b2:b8:bf:
                    a6:61:58:ad:6c:51:38:e6:2e:ba:9a:bf:55:94:5f:
                    8f:84:0c:61:c2:e1:72:74:8c:92:59:82:d2:bc:64:
                    aa:04:a7:71:e0:05:45:41:26:5e:55:f7:fe:7e:66:
                    47:35:73:66:23:32:aa:a7:bb:88:ba:d1:1f:03:10:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:40:5A:59:42:BC:4C:3C:F4:EB:B0:09:F2:55:60:42:85:F6:F9
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a633030303a3a2f33342d3334203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ae8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:43:14:77:e8:e5:cc:5c:75:44:fc:d9:1c:85:9f:b1:ea:
         ee:34:6c:9a:99:14:7f:71:29:76:13:b4:40:b3:fc:f8:64:61:
         12:b5:23:7d:29:8b:5b:f1:33:5c:8a:05:18:85:b6:1a:62:a9:
         e1:3a:37:0c:4b:6c:39:06:2e:ad:dd:a0:87:86:c1:76:65:c6:
         9a:8c:4d:b9:7c:fb:38:c9:13:f7:1f:2d:1b:75:af:e4:4c:2a:
         bf:78:15:d3:04:27:84:27:92:dd:a8:1d:19:f9:b7:77:b8:9a:
         30:44:ca:03:e1:90:a2:c1:87:eb:2d:f0:41:5d:0f:41:7b:56:
         f0:8d:d3:e4:85:9a:f4:13:bf:43:d2:0e:20:03:8e:cf:88:14:
         0d:4e:e3:40:3b:7a:a3:80:80:cf:40:88:98:9b:41:b1:0d:0d:
         44:10:f3:60:4b:78:16:56:f9:71:55:d5:64:31:ff:15:9d:0e:
         13:1b:0a:78:8a:49:c6:16:58:00:2d:d1:13:52:15:ca:fe:29:
         fe:ba:ca:1f:67:95:a2:f3:f5:de:50:10:04:a3:59:8e:e1:5a:
         ac:c6:13:5f:db:fa:53:b8:98:cc:3a:ea:75:8d:f3:6f:7c:a7:
         03:5b:c6:07:b7:f8:81:b0:5b:32:db:39:a2:98:85:7e:9b:c7:
         ac:06:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:20 2024 by rpki-client on console-ams.rpki-client.org