Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa
File:                     323830343a353934303a3a2f33322d3332203d3e20323638313739.roa (raw, json)
Hash identifier:          fg3i2Piqu4H/xakWb6kIn6YRA2K07HiLFpclqYwkT+M=
Subject key identifier:   7F:94:88:4F:5A:13:8E:DC:B5:D2:21:D7:1E:4A:A1:1A:CC:1B:B1:03
Certificate issuer:       /CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
Certificate serial:       79B14456277CFDF95695A045E1DD777FC1F761ED
Authority key identifier: 7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa
Signing time:             Thu 04 Apr 2024 11:22:43 +0000
ROA not before:           Thu 04 Apr 2024 11:17:43 +0000
ROA not after:            Thu 03 Apr 2025 11:22:43 +0000
asID:                     268179
IP address blocks:        2804:5940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl
                          rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b1:44:56:27:7c:fd:f9:56:95:a0:45:e1:dd:77:7f:c1:f7:61:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
        Validity
            Not Before: Apr  4 11:17:43 2024 GMT
            Not After : Apr  3 11:22:43 2025 GMT
        Subject: CN=7F94884F5A138EDCB5D221D71E4AA11ACC1BB103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:04:ff:2d:39:92:ad:fd:96:35:8b:d7:b8:
                    7a:e6:20:20:76:7e:20:37:1e:dd:2d:d4:56:e2:33:
                    4f:56:1c:37:24:53:73:d3:50:6f:ec:b1:80:15:3d:
                    41:d6:02:9c:88:6f:a4:7f:a5:12:e3:e1:d4:89:01:
                    da:57:e4:a6:60:8e:f8:08:71:30:2f:e6:27:e5:6e:
                    83:61:0c:9a:cf:1f:fe:6d:73:fa:6f:c9:93:8a:e5:
                    6a:be:81:6a:45:a2:f6:a5:c7:c1:ca:9e:8b:a8:09:
                    65:fb:76:5c:1d:5d:1e:54:38:63:cc:9f:85:8a:ac:
                    5a:73:3d:9d:9f:46:09:3c:f1:8f:71:4f:0e:f4:0a:
                    cc:c5:a0:cd:2e:c4:c9:b6:d3:76:fa:94:6a:9e:9b:
                    e0:47:55:08:e3:c4:be:1b:6e:b7:08:64:ab:a4:d2:
                    d7:ae:5b:3c:2d:39:c1:30:ad:45:f0:04:b9:1e:4d:
                    3b:ec:60:29:c1:7a:93:f8:04:7a:da:e4:61:3f:5b:
                    2d:2e:e6:e2:5d:6f:ed:72:d5:18:6e:08:10:f7:9e:
                    6d:5c:bd:6d:96:ab:ce:2f:72:ec:96:79:5d:58:24:
                    3a:ed:84:0d:cc:d6:a8:11:19:39:e7:8c:f6:02:1d:
                    4e:cd:e5:be:c2:7a:74:66:8c:af:a1:4a:5e:c6:77:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:94:88:4F:5A:13:8E:DC:B5:D2:21:D7:1E:4A:A1:1A:CC:1B:B1:03
            X509v3 Authority Key Identifier:
                keyid:7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5940::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:de:30:3b:3b:b2:c7:4b:e8:af:ec:a3:62:7b:ef:50:63:e5:
         45:a0:6c:b6:97:77:97:42:c9:9a:1d:3f:9d:9c:a1:a6:7e:4a:
         75:4a:05:87:ad:8d:78:44:a7:56:ca:b2:8f:e4:4b:4f:7a:4b:
         d1:5f:c7:69:b1:d2:e4:9b:87:12:9f:9e:60:03:87:8d:c2:21:
         38:d7:f5:a0:a4:dc:34:7f:8a:b0:79:59:e1:27:ff:89:1c:4d:
         a2:c5:c8:f8:0b:f8:51:70:9f:b2:1b:a4:97:e3:78:3a:09:95:
         76:75:69:71:78:64:a4:62:cf:82:e7:1d:5c:91:06:41:fb:8d:
         94:24:40:a3:77:34:a7:28:65:64:99:be:3f:46:6a:6b:37:16:
         d6:f0:9a:81:e2:f3:60:6c:50:d6:7d:f0:c9:81:db:8a:0b:4d:
         44:20:d3:fa:2f:d8:f3:be:32:6f:ee:ca:1e:d3:27:f1:39:70:
         d9:4d:16:9d:6f:17:52:ae:d3:cf:8c:7c:c3:be:c8:74:a7:fd:
         2d:11:49:80:47:96:fb:be:4e:75:3b:39:dd:35:03:95:15:d5:
         ec:96:58:e7:b9:05:ab:5d:d3:5f:44:17:40:89:63:6d:59:fe:
         60:df:ac:09:0a:47:e0:4f:78:77:95:23:80:ed:dd:43:b5:9f:
         fe:b7:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:44 2024 by rpki-client on console-ams.rpki-client.org