Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa
File:                     323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa (raw, json)
Hash identifier:          KzkDNUATRq3bjpi/ptuGJMwutr0D4mNoMkksItuFtkU=
Subject key identifier:   1A:DB:74:6D:28:E6:B0:51:93:49:A2:06:FB:26:F0:9C:C8:3C:EF:0D
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       4CD855A27C208FEB0320F506E15F28854FF219E9
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa
Signing time:             Thu 04 Apr 2024 20:39:05 +0000
ROA not before:           Thu 04 Apr 2024 20:34:05 +0000
ROA not after:            Thu 03 Apr 2025 20:39:05 +0000
asID:                     267995
IP address blocks:        2804:5664:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d8:55:a2:7c:20:8f:eb:03:20:f5:06:e1:5f:28:85:4f:f2:19:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: Apr  4 20:34:05 2024 GMT
            Not After : Apr  3 20:39:05 2025 GMT
        Subject: CN=1ADB746D28E6B0519349A206FB26F09CC83CEF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:82:a4:cb:ca:b7:9a:c3:80:51:de:f8:ae:
                    d2:56:de:27:5e:23:db:76:69:e3:c9:fd:b9:42:21:
                    d8:cc:8d:4f:4d:4c:e3:ef:2d:2d:c6:51:89:66:bf:
                    3f:be:9f:c0:dd:bc:00:91:c2:94:ef:b0:7b:57:c6:
                    21:7e:d1:24:53:59:2c:37:27:46:bf:b5:4d:e7:bd:
                    6d:fd:29:be:9e:ae:30:06:4e:74:b2:e9:0c:33:b2:
                    44:60:2d:c9:cc:da:e7:d8:e4:77:5e:09:ab:84:e6:
                    66:b2:e4:cb:1b:b1:47:18:9a:74:b4:18:98:01:d4:
                    8e:59:be:05:66:73:57:fe:bf:12:31:e5:7e:de:f5:
                    e7:36:d5:01:c6:b7:3f:15:21:bf:0c:64:a6:c4:38:
                    33:e1:32:00:37:a5:d0:af:c0:e5:48:a1:51:1c:f2:
                    3a:9f:92:a8:39:1a:fc:10:02:3a:93:52:29:f1:bd:
                    09:af:05:39:9b:fe:46:48:c3:5a:a9:83:ce:05:5b:
                    7a:05:31:ca:5f:ee:74:1f:61:c9:49:00:20:03:2f:
                    42:8c:a9:cf:f4:52:9c:91:f5:cb:a5:13:c5:c6:9b:
                    ff:07:bc:75:91:ab:d7:da:23:c2:14:9d:75:68:e9:
                    0e:01:9b:af:c3:30:98:0d:78:01:f1:79:37:38:a4:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DB:74:6D:28:E6:B0:51:93:49:A2:06:FB:26:F0:9C:C8:3C:EF:0D
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5664:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:e0:02:79:e9:d1:da:9b:2b:a4:5a:c3:98:54:c6:66:10:f4:
         80:dd:db:c4:ba:8a:e0:0c:c3:a9:da:51:74:45:98:76:5d:b4:
         2a:db:b7:8f:9b:99:69:c7:61:99:f6:b0:54:f0:05:6c:9e:36:
         eb:b3:9e:ea:41:ec:db:f0:87:3d:58:68:72:3c:c5:fa:b9:b4:
         30:76:52:15:8c:2b:65:e2:61:de:d8:ac:3a:76:a4:53:ba:06:
         d7:6c:a7:68:10:55:07:31:2e:d8:be:42:1e:a7:eb:43:d8:e5:
         ee:b7:1c:53:d1:6d:62:0f:a2:af:55:f4:f7:5e:29:9b:59:21:
         2c:19:a9:ba:80:48:7c:3e:57:f2:ee:df:d4:fe:49:25:e1:2a:
         0f:75:8b:09:a2:7d:05:8b:53:f1:56:bf:b8:77:68:02:b2:f8:
         89:a2:bf:7d:ec:07:96:3c:7b:99:51:4a:d4:96:7d:17:04:3c:
         22:c6:7b:93:a3:34:95:07:1d:e8:1c:0f:42:94:fc:d2:58:c5:
         67:91:dc:00:6f:6e:9a:69:f9:e4:18:cd:5f:ce:7a:5f:30:ce:
         d1:c7:3a:61:35:b4:db:c7:cb:d9:86:56:f9:d1:62:ef:57:6a:
         9d:c4:fd:89:ab:a0:fe:a3:a7:c6:af:09:f6:51:af:89:37:8e:
         02:88:4f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org