Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a343030303a3a2f33342d3334203d3e20323730343430.roa
File:                     323830343a366330343a343030303a3a2f33342d3334203d3e20323730343430.roa (raw, json)
Hash identifier:          5ofLBXSSPamBO/Y0l/55r2/Y3z0CkfzNKpsoVl86kfc=
Subject key identifier:   A8:5F:75:5D:27:D9:57:FD:EC:B5:90:E1:F3:1F:91:DF:6E:7F:94:17
Certificate issuer:       /CN=88F8C25C5F36E30578C91973467F9861B5E60B72
Certificate serial:       7060739768B9E403CA534AB65CD81BFD64EDFE28
Authority key identifier: 88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a343030303a3a2f33342d3334203d3e20323730343430.roa
Signing time:             Thu 27 Jun 2024 13:50:16 +0000
ROA not before:           Thu 27 Jun 2024 13:45:16 +0000
ROA not after:            Thu 26 Jun 2025 13:50:16 +0000
asID:                     270440
IP address blocks:        2804:6c04:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:60:73:97:68:b9:e4:03:ca:53:4a:b6:5c:d8:1b:fd:64:ed:fe:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F8C25C5F36E30578C91973467F9861B5E60B72
        Validity
            Not Before: Jun 27 13:45:16 2024 GMT
            Not After : Jun 26 13:50:16 2025 GMT
        Subject: CN=A85F755D27D957FDECB590E1F31F91DF6E7F9417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:0f:68:37:da:15:6d:fc:fa:c3:b0:66:e1:
                    00:a4:77:b1:9c:a0:6f:eb:87:a1:73:c4:09:e0:10:
                    81:e0:d1:9d:e1:d9:94:36:2f:85:bb:3d:41:55:cd:
                    7f:e1:da:fc:06:3f:b9:ff:64:a5:0d:c3:3c:51:fc:
                    55:c3:70:9d:08:d4:87:7e:ae:f8:ba:55:8e:c2:32:
                    d8:68:59:ec:c2:a2:ea:81:12:7c:92:c6:cb:95:cd:
                    51:c0:49:a7:e3:4e:30:f4:5c:2c:f9:2c:c6:67:75:
                    24:c2:85:6f:c7:3f:85:e6:9b:5a:44:17:24:21:ba:
                    2e:c6:44:e5:82:98:76:be:11:18:52:82:0d:96:e5:
                    de:51:ba:9a:86:e8:2b:6a:3a:9e:c3:20:d7:cf:59:
                    bd:c2:f3:cb:2b:ee:36:16:cd:67:80:dc:02:ce:a2:
                    26:9f:59:cb:5b:45:e6:eb:38:7c:82:4d:62:ba:f7:
                    00:3f:1a:e6:d6:3b:e2:56:cd:af:b9:2b:65:b6:26:
                    61:fb:51:6e:be:40:be:cd:3f:a8:3b:1e:34:7b:fa:
                    f5:8b:99:7a:6c:fc:5d:25:3a:0d:43:67:99:55:5b:
                    b7:95:34:fa:79:dc:07:89:a7:2c:3e:ed:88:64:db:
                    30:ca:1e:73:9d:47:21:28:d1:09:32:dd:ac:cc:a0:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5F:75:5D:27:D9:57:FD:EC:B5:90:E1:F3:1F:91:DF:6E:7F:94:17
            X509v3 Authority Key Identifier:
                keyid:88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a343030303a3a2f33342d3334203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:b0:89:d9:3f:38:97:97:90:96:bd:66:94:ac:69:59:31:a7:
         41:62:7f:a7:7d:94:50:3f:88:84:7a:a3:a4:32:26:d3:27:27:
         8b:bf:6a:64:f3:24:95:ab:44:40:37:b6:d8:70:63:e9:f7:08:
         f1:1c:c3:24:a1:a4:02:5c:c2:ee:a9:a3:61:cb:ec:c9:cf:32:
         22:ca:30:15:75:c6:b9:f7:9b:9c:93:0b:e7:75:80:f1:0e:e0:
         30:ab:e8:ad:3d:f2:9b:2f:87:5c:02:cb:69:0e:5f:95:e3:60:
         94:b2:84:1c:68:b8:20:7f:95:8b:bb:63:d2:29:48:6a:cc:6d:
         5e:3f:64:eb:b9:6d:05:ba:d9:fa:54:b0:91:61:60:81:f9:25:
         93:af:34:a3:90:c3:bb:90:99:b9:04:57:07:42:78:17:70:cf:
         e6:31:61:7d:20:ec:ca:35:ce:2c:49:21:34:c7:11:80:33:3c:
         7e:25:4c:23:96:f6:ad:1d:b2:ed:29:35:37:03:97:fb:f6:61:
         e9:00:68:79:44:04:3c:9e:53:71:ac:69:ba:61:38:37:a6:63:
         e3:04:fa:68:8a:f3:06:50:16:c1:5d:2b:7f:4f:7b:db:20:1c:
         ec:18:1d:c0:1b:8a:8b:41:dd:46:0f:b3:bc:17:98:d0:9d:3f:
         22:9d:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:42 2024 by rpki-client on console-ams.rpki-client.org