Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          FpmMa37pjvip0lFXef1TzxuGxAF8pz8dzctFzSQlVo0=
Subject key identifier:   BB:D7:7B:A2:1A:95:EC:77:E9:E2:BE:C8:C2:E1:32:52:8E:58:5D:DD
Certificate issuer:       /CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
Certificate serial:       51A6F85BA5C8C28B0F3E6A068FA3E6D9E81ACDBE
Authority key identifier: 43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 21:08:59 +0000
ROA not before:           Tue 23 Apr 2024 21:03:59 +0000
ROA not after:            Tue 22 Apr 2025 21:08:59 +0000
asID:                     270440
IP address blocks:        2804:6c04:c000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 14:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a6:f8:5b:a5:c8:c2:8b:0f:3e:6a:06:8f:a3:e6:d9:e8:1a:cd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
        Validity
            Not Before: Apr 23 21:03:59 2024 GMT
            Not After : Apr 22 21:08:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:a8:4d:ea:9b:96:e5:9a:ad:0a:56:69:6d:
                    26:1d:91:25:fe:5f:df:d1:ad:dc:da:2b:58:49:0a:
                    c3:31:4c:11:fd:bb:54:10:36:7c:73:53:79:4f:69:
                    3c:6d:ad:ca:90:6f:3d:b3:f5:ab:7f:08:d4:6c:46:
                    ad:38:d4:68:eb:f0:d2:26:6a:07:aa:46:01:50:db:
                    1b:a6:4f:2c:e9:a4:96:24:de:1b:cf:38:ab:e0:68:
                    58:27:4e:5d:42:fe:ec:6a:9e:22:42:50:7f:96:9c:
                    b8:f2:f6:b9:e1:1a:68:cb:ca:63:c3:c2:5e:da:13:
                    66:6f:2f:0a:e0:54:34:6d:6c:8a:b9:2c:5d:bd:6b:
                    b9:83:3f:8a:23:68:e4:90:50:2f:c5:ac:ef:50:4c:
                    7e:dc:c8:b1:89:8e:2c:3a:e3:bc:20:2e:fc:69:d9:
                    0a:38:ef:7c:fd:7f:72:85:9b:ae:60:45:13:ea:72:
                    76:5d:c6:a1:5e:84:36:a9:05:50:56:b3:65:6c:08:
                    10:87:74:0f:7a:30:d1:a3:4d:8e:bf:94:c8:50:43:
                    a5:6d:b9:4d:b7:98:ac:05:ef:02:f1:76:4f:96:b4:
                    77:ce:95:37:ac:23:76:fc:16:f8:c5:b4:cf:e8:cd:
                    98:c0:81:e2:c2:32:b3:71:b9:d7:22:87:8b:3d:81:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D7:7B:A2:1A:95:EC:77:E9:E2:BE:C8:C2:E1:32:52:8E:58:5D:DD
            X509v3 Authority Key Identifier:
                keyid:43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         b4:2d:ed:b9:d9:8c:b8:91:21:f5:c8:d2:3a:25:7c:b4:4e:b6:
         6d:f7:28:a6:c4:6b:23:38:20:7a:f3:33:11:a6:1f:a3:a8:7d:
         ab:3c:2c:6a:62:60:c9:69:9d:2e:26:32:16:0a:38:c5:5a:6e:
         8c:4c:76:a1:4c:e9:83:19:57:43:7b:0a:9e:2a:a1:ed:2a:fa:
         38:bd:4d:79:11:54:b6:3a:59:7b:6f:65:1a:d1:b3:7d:15:49:
         8d:34:4f:48:0e:97:c5:8b:b1:bc:c4:68:46:e0:5d:3e:76:55:
         36:02:0f:73:a5:0c:c4:ac:04:f4:aa:cd:73:d8:b0:29:49:07:
         42:30:f4:b4:17:e5:15:e1:eb:d5:45:3d:45:83:e8:71:6b:bb:
         8c:7d:74:4b:79:24:ca:6f:c8:94:fa:34:cc:79:38:9a:d8:d4:
         bd:bf:2c:a0:d2:25:11:27:96:cc:6f:86:dd:ff:77:e5:85:13:
         f4:dc:3f:a0:56:3d:b0:6e:64:c1:b2:81:a3:16:31:44:f0:6e:
         08:69:c3:b2:22:10:ca:b8:ce:fa:0f:ad:c3:40:d8:71:01:af:
         95:c2:04:94:3e:a5:f2:46:e9:cf:b0:00:87:f8:f5:e5:f1:56:
         03:5c:81:cb:23:b9:6f:27:98:ff:99:75:bf:8c:7e:f1:0e:ba:
         fa:69:59:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:53:33 2024 by rpki-client on console-ams.rpki-client.org