Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa
File:                     323830343a366530303a3a2f33322d3438203d3e20323730353639.roa (raw, json)
Hash identifier:          /PkkV5IupmJ2ftBk8ynlDCGSFd+QJTcu9YhvHZYVq3U=
Subject key identifier:   86:65:55:EE:F3:01:C1:F0:0C:22:CC:A2:71:13:4C:6D:A4:94:61:B2
Certificate issuer:       /CN=072B7E06D438A56222390C3DCE8D0145589533BD
Certificate serial:       4BCFD71B315605AAD5850977CA0C346D9FA33B41
Authority key identifier: 07:2B:7E:06:D4:38:A5:62:22:39:0C:3D:CE:8D:01:45:58:95:33:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072B7E06D438A56222390C3DCE8D0145589533BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa
Signing time:             Thu 04 Apr 2024 08:48:30 +0000
ROA not before:           Thu 04 Apr 2024 08:43:30 +0000
ROA not after:            Thu 03 Apr 2025 08:48:30 +0000
asID:                     270569
IP address blocks:        2804:6e00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.crl
                          rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072B7E06D438A56222390C3DCE8D0145589533BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cf:d7:1b:31:56:05:aa:d5:85:09:77:ca:0c:34:6d:9f:a3:3b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072B7E06D438A56222390C3DCE8D0145589533BD
        Validity
            Not Before: Apr  4 08:43:30 2024 GMT
            Not After : Apr  3 08:48:30 2025 GMT
        Subject: CN=866555EEF301C1F00C22CCA271134C6DA49461B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:5f:ff:cd:0b:f9:ea:b1:e9:60:e8:98:a6:
                    0f:ab:f2:7a:d5:63:51:7b:37:b3:9e:23:e1:74:6d:
                    18:04:78:a9:a6:fa:f5:cf:28:99:a6:29:0d:7d:09:
                    bb:c7:38:fe:b0:28:47:77:44:af:8c:75:82:e3:5b:
                    04:10:ee:f5:88:46:95:5b:aa:a7:fd:9b:80:1c:57:
                    f6:a7:92:27:f6:a6:a9:2d:cd:6c:23:ea:f7:12:1b:
                    52:fb:6b:55:4a:f6:1f:63:d4:96:47:c8:a2:29:0e:
                    a5:0d:90:62:a8:83:00:5b:3b:29:52:15:cf:c1:a5:
                    5f:37:90:10:d7:b9:ef:25:b1:2c:48:21:5c:f0:1c:
                    47:53:a7:e0:d9:4d:bd:72:46:36:e1:d1:2a:ed:5a:
                    72:d3:50:d0:1c:f4:c2:99:fb:32:4d:37:4e:60:b2:
                    4e:5e:ee:3e:16:53:98:52:9c:1d:07:b3:e9:b1:18:
                    a8:4a:21:6a:d3:8e:6e:00:3e:9b:82:44:ca:0d:fb:
                    9d:c3:88:b4:cb:00:a9:73:60:10:1b:9c:73:91:54:
                    06:91:1c:59:bb:7f:18:0b:ea:16:ab:1c:7f:a9:34:
                    69:66:06:17:21:67:b1:47:5f:e0:c7:92:69:83:3c:
                    0e:84:75:18:6c:aa:51:99:c4:71:c5:9d:81:98:8f:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:65:55:EE:F3:01:C1:F0:0C:22:CC:A2:71:13:4C:6D:A4:94:61:B2
            X509v3 Authority Key Identifier:
                keyid:07:2B:7E:06:D4:38:A5:62:22:39:0C:3D:CE:8D:01:45:58:95:33:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072B7E06D438A56222390C3DCE8D0145589533BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:6b:f4:ba:0b:3c:89:15:b7:3f:11:cd:e6:31:5c:77:4f:16:
         1a:fe:4f:fa:fe:bc:56:15:c6:ae:66:e8:80:5e:09:4c:e0:10:
         6b:78:82:80:5f:c0:16:1b:d0:0b:76:50:85:cc:d8:6b:17:32:
         8a:27:e2:b5:34:01:ff:e8:76:88:9f:2c:54:a4:50:3f:54:6e:
         a4:4f:57:56:49:fa:cb:9d:c0:a9:b7:38:1a:2e:e1:76:5a:28:
         00:8a:52:55:89:73:4b:f9:bd:a9:fc:a3:2c:2b:c9:f8:1c:2f:
         7d:c2:85:16:17:4d:a0:76:ed:57:7b:0d:0e:b1:fd:52:40:75:
         ce:5f:8d:26:3f:04:9f:60:5d:de:78:b0:68:79:23:db:02:65:
         29:cd:55:5d:63:91:60:2e:89:72:29:e1:21:f1:0d:31:1f:3a:
         a1:73:3d:7c:f7:88:78:b4:ab:33:ca:a3:6e:e6:f4:ba:e1:fc:
         a4:73:85:87:72:f0:f2:59:36:32:06:03:d6:9e:56:c1:bd:38:
         8f:b4:86:7e:e5:5e:a7:b0:79:48:27:ff:f9:fc:da:f4:6c:a5:
         82:99:64:44:3a:17:7f:32:7e:03:7c:f9:b2:3b:46:07:5b:02:
         44:b1:b4:d5:a3:80:ec:61:75:5a:93:79:d4:7d:6d:1b:55:e4:
         ad:63:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:53 2024 by rpki-client on console-ams.rpki-client.org