Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/1/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa
File:                     323830343a313563633a3a2f33322d313238203d3e20323633343131.roa (raw, json)
Hash identifier:          BOf6gf8CqbqRvlnBJTIkn0oZJpd4dC9Adn96GwKYGdg=
Subject key identifier:   6A:5B:6B:83:97:EF:0F:C4:C3:78:6A:AF:DB:40:75:91:75:D7:2C:79
Certificate issuer:       /CN=916466AB852F56DF66209DF790F05D1301ABFC54
Certificate serial:       3654CF3E1BAACD82F8E1C9552186733972AD727A
Authority key identifier: 91:64:66:AB:85:2F:56:DF:66:20:9D:F7:90:F0:5D:13:01:AB:FC:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916466AB852F56DF66209DF790F05D1301ABFC54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/1/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa
Signing time:             Thu 04 Apr 2024 03:26:36 +0000
ROA not before:           Thu 04 Apr 2024 03:21:36 +0000
ROA not after:            Thu 03 Apr 2025 03:26:36 +0000
asID:                     263411
IP address blocks:        2804:15cc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/1/916466AB852F56DF66209DF790F05D1301ABFC54.crl
                          rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/1/916466AB852F56DF66209DF790F05D1301ABFC54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916466AB852F56DF66209DF790F05D1301ABFC54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:54:cf:3e:1b:aa:cd:82:f8:e1:c9:55:21:86:73:39:72:ad:72:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916466AB852F56DF66209DF790F05D1301ABFC54
        Validity
            Not Before: Apr  4 03:21:36 2024 GMT
            Not After : Apr  3 03:26:36 2025 GMT
        Subject: CN=6A5B6B8397EF0FC4C3786AAFDB40759175D72C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:7a:40:de:fb:fc:f3:3f:a6:da:bc:35:16:
                    59:9c:53:98:5d:cc:86:26:ba:d8:a2:27:d1:39:9d:
                    b3:a1:bb:d3:29:06:c7:16:75:14:16:0f:88:17:61:
                    82:e3:7c:35:27:d0:3e:a9:98:79:42:37:07:18:ca:
                    14:18:30:eb:5f:90:1d:f8:91:b8:06:a2:33:04:ed:
                    6c:a6:83:03:f1:ea:b7:24:1f:72:25:9e:64:f6:34:
                    e4:c7:9f:b8:8a:e8:a1:e2:0f:e9:67:6b:46:7b:c0:
                    6b:df:50:de:55:07:ea:c7:a3:38:eb:9d:34:94:98:
                    94:61:84:7e:92:38:f2:0b:59:be:d1:66:25:ce:01:
                    5d:d1:c9:b2:97:04:e9:5d:42:b4:66:2e:98:7b:dc:
                    99:db:6d:f9:a6:14:2a:ab:c7:d2:bd:94:9e:35:92:
                    c7:f7:8d:f6:29:2e:38:df:44:67:cf:95:4e:6c:cb:
                    22:e0:d7:ee:f9:49:8c:45:a6:87:5b:f8:4c:4f:8d:
                    ea:78:c4:60:28:ee:33:a4:73:88:2e:95:ee:77:73:
                    48:2a:87:99:64:d6:6a:3f:91:d1:88:ea:78:87:cf:
                    69:9f:df:02:23:55:64:0d:34:d7:b7:c8:07:bb:29:
                    ba:02:91:e5:98:ff:89:d0:2d:71:c1:61:48:32:c9:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5B:6B:83:97:EF:0F:C4:C3:78:6A:AF:DB:40:75:91:75:D7:2C:79
            X509v3 Authority Key Identifier:
                keyid:91:64:66:AB:85:2F:56:DF:66:20:9D:F7:90:F0:5D:13:01:AB:FC:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/1/916466AB852F56DF66209DF790F05D1301ABFC54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916466AB852F56DF66209DF790F05D1301ABFC54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/1/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:0c:e6:d4:45:bb:38:3b:4c:d7:f5:8d:a5:df:50:14:07:
         30:08:a9:c1:82:41:1a:d2:8a:7e:8b:57:7e:af:8b:eb:c5:ba:
         88:21:9e:76:b2:e9:86:bd:7a:3f:71:54:0c:a2:f8:b5:f8:ce:
         d1:8d:67:53:a6:c5:7c:58:7f:63:15:98:9e:55:26:a1:04:d8:
         1f:3a:e2:c6:df:45:90:8f:45:75:57:94:b9:00:e5:ce:ba:b1:
         3f:8c:8c:92:86:2d:cb:0c:5d:3b:e6:f8:89:fc:b0:33:13:04:
         5e:00:46:ad:2e:be:a8:81:5c:fd:ca:91:69:ec:17:00:88:da:
         4e:6d:25:9e:30:4b:72:b4:27:47:39:79:48:1c:1e:14:00:51:
         2e:96:b8:c3:85:51:ec:84:fb:46:b6:05:7d:62:82:e0:aa:d9:
         a4:a8:7e:d5:1c:e8:10:3a:ca:48:08:a7:21:0e:83:04:ae:a1:
         97:20:ca:0d:5e:f6:d4:ef:3c:83:ef:32:89:a2:4b:11:95:db:
         cf:dd:e1:d3:26:89:39:3b:e7:68:32:d8:f4:33:e4:15:71:05:
         2b:52:64:3e:7b:e6:11:2b:1f:f1:2d:1a:32:60:51:a6:95:22:
         88:9c:89:42:06:1b:33:39:f1:9e:df:af:81:b6:2d:0c:41:0d:
         9c:80:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org