Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa
File:                     323830343a363266303a3a2f33322d313238203d3e20323639333239.roa (raw, json)
Hash identifier:          ivUSRCR55eQtc3xzdMmWRqI9sLpDvcQdCQwtHm7SFvA=
Subject key identifier:   26:E1:DF:D4:DB:92:91:87:70:33:0B:20:BB:4B:3C:B8:4B:3C:84:F6
Certificate issuer:       /CN=1B37940BBD99BD0D8ED48C883153F4D81D586516
Certificate serial:       6F83060DE01901565C74D0A6B83340D84E2F377E
Authority key identifier: 1B:37:94:0B:BD:99:BD:0D:8E:D4:8C:88:31:53:F4:D8:1D:58:65:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa
Signing time:             Wed 03 Apr 2024 23:01:43 +0000
ROA not before:           Wed 03 Apr 2024 22:56:43 +0000
ROA not after:            Wed 02 Apr 2025 23:01:43 +0000
asID:                     269329
IP address blocks:        2804:62f0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.crl
                          rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:83:06:0d:e0:19:01:56:5c:74:d0:a6:b8:33:40:d8:4e:2f:37:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B37940BBD99BD0D8ED48C883153F4D81D586516
        Validity
            Not Before: Apr  3 22:56:43 2024 GMT
            Not After : Apr  2 23:01:43 2025 GMT
        Subject: CN=26E1DFD4DB92918770330B20BB4B3CB84B3C84F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:fa:c9:ce:19:d0:30:d2:2d:c5:1e:7e:54:
                    92:ab:98:3a:9a:f2:d9:86:a2:ba:da:0c:7d:4e:20:
                    e0:92:36:87:e5:72:69:2d:ec:c3:0e:2d:a0:5a:cd:
                    cf:06:64:c0:73:90:f2:fd:c9:30:73:9d:18:96:56:
                    26:8f:ad:47:cf:67:3e:22:c2:14:f4:ec:de:9a:22:
                    01:02:70:34:a2:cd:85:61:7f:e2:7c:2e:e3:03:1d:
                    e8:c0:87:8f:76:1f:29:0a:9e:fc:27:37:27:56:53:
                    b2:94:4e:53:ed:15:c7:7d:80:24:97:ac:67:10:70:
                    c2:97:94:0b:78:57:05:b0:6d:aa:b9:56:5a:83:1b:
                    39:5e:e5:0a:08:26:f2:4f:20:a2:f3:ff:2e:e2:91:
                    5f:e6:78:7a:c9:4b:7f:91:d2:50:b6:b9:17:87:42:
                    0d:af:db:63:c9:cd:d6:0d:5f:b2:6c:df:d1:e1:8f:
                    be:a0:85:4a:36:2e:ac:f2:56:ec:b7:7c:6f:7a:da:
                    03:6d:a4:1b:af:0c:e8:9e:61:0c:ff:41:3c:83:fa:
                    32:58:e6:5a:77:6a:c9:29:a4:3f:27:db:2a:da:cb:
                    6b:44:07:92:01:3c:dc:4d:b9:08:26:01:ea:07:b5:
                    39:e6:08:b6:71:80:64:1f:06:f0:6f:5a:61:e4:f3:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E1:DF:D4:DB:92:91:87:70:33:0B:20:BB:4B:3C:B8:4B:3C:84:F6
            X509v3 Authority Key Identifier:
                keyid:1B:37:94:0B:BD:99:BD:0D:8E:D4:8C:88:31:53:F4:D8:1D:58:65:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:26:0c:b4:0b:6d:0c:60:6d:89:92:12:97:bb:ac:36:08:9f:
         7f:e7:eb:a8:b7:9f:09:23:b1:74:f8:0c:a7:97:08:b1:67:1a:
         ca:6d:44:ea:9a:b8:ee:91:32:46:7f:ef:0a:22:4a:4c:7f:68:
         a4:d6:7d:b6:fd:2e:b9:84:b5:ee:2d:c7:35:ce:14:02:d5:c8:
         c8:45:59:e6:9f:4f:80:18:27:28:34:de:33:bc:11:47:19:ac:
         11:60:57:7b:b7:a1:33:73:1b:56:93:06:fa:d2:85:9b:d2:07:
         26:54:8d:f9:7e:85:19:2f:f8:c2:80:bf:32:09:72:9c:fc:71:
         76:22:4f:f9:b6:8e:7a:88:13:56:62:af:6d:78:ca:23:01:08:
         5d:58:8b:7a:4d:e1:bf:c8:84:4a:20:f8:b2:eb:89:40:e1:67:
         d9:b2:5b:b3:a8:ba:df:39:18:23:3b:a5:93:a3:b7:ac:81:7b:
         77:73:cd:60:f0:57:59:3f:3e:1e:c0:c6:6a:3e:b8:1f:68:30:
         bc:a1:69:5c:a6:e3:4a:20:f0:10:b0:be:6a:12:58:02:21:50:
         24:c5:ef:13:a0:f6:6e:d2:b4:ab:90:19:90:b1:0b:07:81:ad:
         be:db:43:e7:f6:f5:31:93:25:0b:90:15:30:78:f1:ad:60:ac:
         b1:36:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:32 2024 by rpki-client on console-fra.rpki-client.org