Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/323830343a336637633a3a2f33322d313238203d3e20323635383936.roa
File:                     323830343a336637633a3a2f33322d313238203d3e20323635383936.roa (raw, json)
Hash identifier:          96Kmf/fQJjY1Jup+x8Yh4VcyJgeMHRVlLsCIMlydwYE=
Subject key identifier:   21:D6:EC:B1:BE:A0:D7:2B:7E:AC:FA:F5:AA:7C:88:90:4D:A9:52:F9
Certificate issuer:       /CN=6F5278DB8F876783903A082AEFA62867B10AC72E
Certificate serial:       71A0267650D868203737C9034E7BB1D568828064
Authority key identifier: 6F:52:78:DB:8F:87:67:83:90:3A:08:2A:EF:A6:28:67:B1:0A:C7:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/323830343a336637633a3a2f33322d313238203d3e20323635383936.roa
Signing time:             Thu 04 Apr 2024 08:37:01 +0000
ROA not before:           Thu 04 Apr 2024 08:32:01 +0000
ROA not after:            Thu 03 Apr 2025 08:37:01 +0000
asID:                     265896
IP address blocks:        2804:3f7c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.crl
                          rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:26:76:50:d8:68:20:37:37:c9:03:4e:7b:b1:d5:68:82:80:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5278DB8F876783903A082AEFA62867B10AC72E
        Validity
            Not Before: Apr  4 08:32:01 2024 GMT
            Not After : Apr  3 08:37:01 2025 GMT
        Subject: CN=21D6ECB1BEA0D72B7EACFAF5AA7C88904DA952F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:df:06:8e:b6:92:74:3b:8e:3d:bf:cf:ee:cc:
                    c6:85:67:6d:4a:24:f1:0c:08:55:23:39:78:9f:ef:
                    af:ec:a0:6b:f7:55:d7:05:d3:af:05:74:53:21:fc:
                    2a:5e:9a:1d:9c:f6:3f:a3:ec:d0:7c:42:56:44:3b:
                    9f:7b:d4:b7:37:18:60:72:1c:ad:dc:c8:ec:98:99:
                    c6:04:e5:a8:4c:48:e6:51:9c:3f:40:79:48:70:a2:
                    49:76:07:00:cf:71:b8:77:b5:94:4c:a2:0d:b0:39:
                    13:a6:17:10:8d:71:fa:e7:fb:ca:3b:a4:a3:36:cf:
                    5c:70:15:d6:e8:70:74:f8:53:eb:7e:65:75:70:8d:
                    18:7f:31:07:2b:77:34:e9:0b:6d:ff:73:b0:88:d0:
                    81:a7:da:b3:85:2b:0f:95:fb:eb:db:af:99:75:f4:
                    a8:6d:3a:9a:ac:b5:39:fd:98:27:00:d6:62:74:63:
                    95:1d:41:dc:10:7a:a2:f7:fb:1a:86:70:1c:5c:c2:
                    b6:6e:13:6f:06:fa:44:45:c4:b4:a4:08:ea:90:b1:
                    85:23:0b:ab:58:62:9c:9e:b3:7f:6a:d7:7a:9b:3b:
                    71:8c:b0:d0:ff:18:46:18:1a:e0:52:d4:4e:0c:ef:
                    4c:97:6b:c2:98:e3:8c:65:05:3d:f7:0d:e7:42:ff:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D6:EC:B1:BE:A0:D7:2B:7E:AC:FA:F5:AA:7C:88:90:4D:A9:52:F9
            X509v3 Authority Key Identifier:
                keyid:6F:52:78:DB:8F:87:67:83:90:3A:08:2A:EF:A6:28:67:B1:0A:C7:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/323830343a336637633a3a2f33322d313238203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:bc:7e:0e:cb:c7:54:da:3a:2a:7e:a0:57:16:dc:51:f7:
         bd:da:d4:b2:ae:3d:be:c2:1e:20:c0:50:91:3d:2b:7e:ed:19:
         1e:6c:b3:88:de:05:04:18:4f:a4:f0:74:2a:fb:ca:1b:ae:a6:
         9c:29:ec:79:93:5e:55:41:ae:81:76:7c:70:ec:44:1a:06:b6:
         80:00:9d:73:a1:85:3e:2b:17:c5:83:98:9a:48:f7:45:db:6c:
         8a:4a:4c:99:73:cc:c7:1e:83:27:15:f6:fb:bd:8d:18:3c:ba:
         4d:11:1c:b4:f7:36:7a:4a:4c:51:30:3c:7c:6e:7a:36:fa:96:
         af:34:fd:66:d5:09:1c:17:12:45:29:ea:2d:8e:ef:95:63:49:
         1d:b4:dd:3b:09:72:d6:71:0e:4f:9d:ac:b9:a3:c4:38:a2:4f:
         02:99:47:6b:0b:9e:d8:88:4a:a7:cf:5a:b8:13:c8:78:4a:60:
         a6:cb:6c:a8:c1:20:bd:e3:55:fa:ff:4f:a4:07:da:a4:d0:fc:
         7e:ff:47:c6:fd:e9:cc:1a:f5:6d:ef:fb:89:a1:49:0a:6a:21:
         02:68:a1:87:35:69:18:2f:0d:3a:89:b7:a8:38:f6:f4:bb:e4:
         c9:a8:3f:46:d8:e8:47:56:7c:cb:f5:ec:d3:10:21:b5:88:df:
         66:90:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 05:34:08 2024 by rpki-client on console-ams.rpki-client.org