Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          HNyhU93NkBY44ZiXDTVCjLg/szhmGm6bd5zMTDrlaE0=
Subject key identifier:   F9:37:7C:A1:71:4E:99:9A:41:43:E1:28:E6:00:3C:7A:C4:09:96:3C
Certificate issuer:       /CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
Certificate serial:       1AF8F304BE42B5F8692F2B9258FB14808C2FEC82
Authority key identifier: 43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 21:08:58 +0000
ROA not before:           Tue 23 Apr 2024 21:03:58 +0000
ROA not after:            Tue 22 Apr 2025 21:08:58 +0000
asID:                     270440
IP address blocks:        2804:6c04:d800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 14:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f8:f3:04:be:42:b5:f8:69:2f:2b:92:58:fb:14:80:8c:2f:ec:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
        Validity
            Not Before: Apr 23 21:03:58 2024 GMT
            Not After : Apr 22 21:08:58 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:55:b3:78:53:c5:b8:64:ba:a5:04:90:9e:
                    16:3f:99:5e:9c:64:28:9b:80:20:57:57:e3:00:f1:
                    86:cb:11:88:dd:34:a3:be:6e:e1:63:0e:a5:0c:9a:
                    66:64:f0:23:3d:3b:e5:c3:f1:0b:e2:5d:36:6f:1d:
                    d2:a6:85:05:06:f3:45:43:b5:a7:86:ff:e7:6f:59:
                    90:31:d8:13:e4:40:8e:3c:be:59:03:24:43:6e:74:
                    4d:91:1a:54:fa:ed:3d:89:24:4b:b6:b8:80:f2:f1:
                    20:7d:e1:8f:6e:57:b5:95:07:9a:18:34:21:46:c8:
                    70:4d:35:cc:49:d1:2e:85:30:de:b9:2e:5e:ef:68:
                    0b:e4:c8:4a:67:24:f2:0f:2f:7a:a6:9e:59:4d:25:
                    cf:4e:fa:8c:db:7b:b8:08:a0:9c:5c:e3:32:b1:96:
                    91:79:80:90:0e:56:0e:d3:9c:5c:a2:1f:50:67:21:
                    d9:10:70:0f:88:99:58:ef:12:36:60:d5:6a:54:ea:
                    d8:5b:b2:65:6e:0b:78:40:1d:a6:5e:ad:18:9f:a4:
                    4f:49:63:65:34:1e:ec:94:22:10:8c:eb:e0:c6:04:
                    13:79:b7:66:f7:81:31:73:4f:fa:d5:1c:11:7a:31:
                    c1:7f:9b:96:b8:9a:e8:c5:c2:51:07:fc:ca:ec:aa:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:37:7C:A1:71:4E:99:9A:41:43:E1:28:E6:00:3C:7A:C4:09:96:3C
            X509v3 Authority Key Identifier:
                keyid:43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:d800::/37

    Signature Algorithm: sha256WithRSAEncryption
         82:60:6a:ea:c6:68:b5:b3:28:4f:37:09:b4:d2:6b:68:41:1a:
         a1:8b:89:4d:8f:d8:3a:02:21:81:6f:17:cc:a4:21:ef:6a:80:
         51:0c:bd:6f:4d:ac:6c:ed:fa:6e:f1:b8:c5:04:23:34:b2:f1:
         a0:a3:96:36:ef:17:a5:b0:73:bd:a1:f7:90:21:27:df:7f:77:
         9b:50:db:23:97:9a:89:5a:c6:81:fb:66:ac:52:68:73:c7:19:
         45:fd:bf:4c:1e:02:f2:4a:bb:1e:90:a8:e4:0d:e8:2e:47:89:
         30:64:e5:d4:04:67:26:a3:89:e5:77:e7:76:74:0d:d2:b5:70:
         5c:27:2e:c3:60:b7:c3:68:6d:d7:71:14:95:4e:0c:07:8b:41:
         4d:00:6f:6f:8b:71:7d:4a:60:f2:0d:54:60:f9:24:bd:32:8d:
         93:b9:80:1c:75:0c:7b:4e:a4:8a:0b:80:70:ff:ef:18:24:1a:
         0f:21:3b:04:f0:fd:46:90:0c:38:e8:81:4c:7f:49:45:a6:1f:
         80:3c:1b:ec:cd:d5:ee:b8:5e:43:b8:dc:35:c3:10:a2:12:8e:
         dd:64:84:cd:1e:bc:ab:12:35:4c:0d:7d:c4:63:d0:03:4a:45:
         a3:6e:f5:05:cc:73:b3:3e:46:bc:94:15:be:9a:b0:9f:3d:ba:
         9e:bd:99:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:53:33 2024 by rpki-client on console-ams.rpki-client.org