Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa
File:                     323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa (raw, json)
Hash identifier:          HkF5bBGbkdDiVlWKX5XB2tmfnit8tYDx8JJR1apDIkc=
Subject key identifier:   C6:5E:0A:92:85:55:74:37:33:9C:2D:82:C4:81:D0:E4:43:5C:0D:06
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       03EB4FB90726B19F1783DB6E191ED385AFF34403
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     268732
IP address blocks:        2804:59e4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:eb:4f:b9:07:26:b1:9f:17:83:db:6e:19:1e:d3:85:af:f3:44:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject: CN=C65E0A9285557437339C2D82C481D0E4435C0D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:ed:eb:f7:0a:6d:ab:a9:a6:b1:ae:ed:a0:
                    11:e5:ba:3c:c3:cf:8c:fd:87:74:70:92:7b:fb:ef:
                    fb:b6:f9:dd:20:12:9c:57:0c:f6:5d:34:a1:a5:95:
                    42:22:65:d5:50:b8:b4:a7:c9:f8:b5:a1:4e:f9:7e:
                    7d:3a:2d:3c:6f:ab:5d:b4:24:2e:bf:c1:9a:bf:8f:
                    a3:2c:03:df:03:fd:39:4b:4a:32:9e:3e:96:fd:c8:
                    84:db:14:57:01:0e:1a:0f:a6:8f:b1:39:b9:ce:a6:
                    1b:e2:42:a1:93:e9:ce:13:aa:02:9c:11:50:d6:14:
                    cc:47:58:9a:a9:06:68:1d:ed:63:ec:bb:87:2c:23:
                    36:2b:2a:23:5e:f5:42:fe:f5:67:6e:53:e5:d7:dc:
                    25:a8:6f:08:1e:60:c9:38:f2:d3:27:20:13:dc:84:
                    92:c7:c5:5d:33:ea:af:e9:76:40:a4:c4:73:04:c9:
                    f7:e0:be:ca:dc:6d:8a:8d:81:7d:57:c2:3a:09:17:
                    45:58:74:44:30:cc:51:eb:23:8a:b5:13:a9:d2:62:
                    b0:6a:40:3f:49:59:14:97:f3:03:ba:c7:f2:22:b7:
                    32:b2:24:26:f4:37:2f:8a:70:75:fc:d8:da:4c:6f:
                    1e:2d:01:30:ea:c9:bf:fd:69:e8:27:22:cf:f4:10:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:0A:92:85:55:74:37:33:9C:2D:82:C4:81:D0:E4:43:5C:0D:06
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:42:f4:74:10:1f:fc:d9:f7:b6:2a:b8:06:5b:3a:3f:52:d3:
         cb:90:14:6d:b1:51:4b:08:ff:ed:bd:c5:30:91:98:9e:f7:ac:
         22:2e:fa:2c:39:75:2f:92:cb:9a:50:e1:51:97:53:3f:af:bf:
         86:15:c6:dd:5d:c6:9b:fc:b0:0e:32:b9:ec:a4:3b:59:a3:ac:
         dd:5a:7e:32:2b:d9:77:b1:a4:66:1c:6f:3a:bc:ff:1d:b0:19:
         7d:3e:cd:30:21:c6:c5:04:62:78:d2:56:78:21:2f:40:1e:cf:
         d0:fd:85:b6:ee:d0:bd:a4:38:6e:89:40:90:f3:ca:4d:11:81:
         92:36:b4:d5:8d:8a:28:7e:6d:ad:02:21:c4:2d:9c:aa:d5:97:
         75:8f:1e:24:48:25:9a:db:2f:77:53:db:69:68:94:40:f5:c8:
         75:ba:ff:f0:06:8d:4c:2f:c8:88:97:a0:97:0a:61:40:f2:72:
         8d:bd:65:49:e1:ab:b3:6a:54:94:05:bf:0b:38:8d:ee:5d:04:
         46:89:60:73:3a:c7:a3:d9:b4:d1:e1:be:83:81:b5:25:94:c3:
         cc:62:5f:29:03:75:b4:25:b3:8c:05:e6:19:59:fe:e0:c4:68:
         e1:23:61:62:b9:6a:65:ad:61:28:31:99:ba:bb:37:93:5d:43:
         6f:95:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:10 2024 by rpki-client on console-fra.rpki-client.org