Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a393030303a3a2f33362d3336203d3e20323632363338.roa
File:                     323830343a3736303a393030303a3a2f33362d3336203d3e20323632363338.roa (raw, json)
Hash identifier:          Yow8Dr7QwGAwG0xj13huu2xwP72Vvu2695ZpBIZHh1E=
Subject key identifier:   64:11:5B:50:92:42:ED:14:25:2F:C6:09:12:AF:7C:28:F2:CD:A5:23
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       33E474A2A84432EFE0CF716C9684034658D9812F
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a393030303a3a2f33362d3336203d3e20323632363338.roa
Signing time:             Tue 21 May 2024 19:48:24 +0000
ROA not before:           Tue 21 May 2024 19:43:24 +0000
ROA not after:            Tue 20 May 2025 19:48:24 +0000
asID:                     262638
IP address blocks:        2804:760:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e4:74:a2:a8:44:32:ef:e0:cf:71:6c:96:84:03:46:58:d9:81:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: May 21 19:43:24 2024 GMT
            Not After : May 20 19:48:24 2025 GMT
        Subject: CN=64115B509242ED14252FC60912AF7C28F2CDA523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:78:5a:32:6c:3e:76:78:7f:35:8c:fb:0a:
                    b1:15:52:b6:07:4f:81:df:9a:ab:01:ee:13:e8:ba:
                    c3:dd:e8:ed:c0:a5:23:07:8f:0e:cb:d8:87:e1:94:
                    fe:51:0d:1c:64:f7:da:f7:4f:f1:31:23:2f:63:47:
                    12:62:29:e0:cd:a7:35:53:d4:b3:57:b7:c9:af:a3:
                    a3:56:d5:f0:5b:2c:bc:bc:7c:bc:3a:60:46:2e:65:
                    3e:33:d3:fa:5c:f4:64:2e:4c:f8:d6:c8:41:1e:cc:
                    7c:13:28:1e:cb:a2:ba:5f:50:f7:b8:65:06:af:a5:
                    c6:64:45:79:55:38:ab:63:b7:c4:9a:7a:54:08:14:
                    b9:99:29:7d:6a:ef:69:a0:d8:31:f7:70:22:7f:06:
                    4d:72:db:b4:9d:82:0c:32:39:1f:aa:70:86:7e:1e:
                    cd:18:85:ca:35:56:9d:e5:d9:96:52:4e:5f:7f:f4:
                    2f:a6:9e:19:9c:dd:e1:50:80:63:9f:10:14:65:93:
                    a7:87:eb:6c:ec:15:93:01:dd:14:fd:79:81:ff:59:
                    e3:07:2f:d5:b7:d8:2a:6c:6e:ad:6f:04:eb:1a:e8:
                    d7:a3:a6:e6:a5:02:59:ee:13:d6:43:49:79:78:38:
                    84:ee:2d:14:65:76:4c:8c:d4:ed:30:64:c9:ef:5a:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:11:5B:50:92:42:ED:14:25:2F:C6:09:12:AF:7C:28:F2:CD:A5:23
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a393030303a3a2f33362d3336203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:760:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:cb:da:d5:5c:1b:87:8c:ec:46:e7:76:3d:50:82:2c:b8:fc:
         2f:65:59:be:23:da:96:1a:46:2a:bf:f5:d7:59:aa:3c:16:aa:
         4e:a8:56:57:85:ff:a6:37:e6:4f:79:3a:22:9e:86:00:5a:97:
         7d:19:5e:19:7e:f8:65:78:44:17:3d:63:f2:43:a0:51:53:c0:
         99:35:58:72:bf:f2:c2:41:1f:6e:a9:1a:79:32:68:be:05:8e:
         3b:80:65:cc:0f:57:98:f0:af:14:fd:47:04:79:65:cc:06:02:
         19:b3:e7:e2:46:0c:91:7e:f6:17:14:41:8b:26:bb:3a:e0:d3:
         dd:85:9b:c9:53:b4:af:3a:2d:33:11:20:a6:ba:95:50:9e:9e:
         2e:12:11:5c:cb:4c:25:a4:db:ae:68:30:ce:20:b6:00:81:dc:
         58:63:4a:db:96:8e:31:d3:55:d8:5f:59:b0:3e:b4:69:08:1f:
         0f:be:92:cd:70:78:24:39:7b:b4:0d:9d:03:7f:6e:31:7c:12:
         71:75:60:de:f8:3e:fc:9a:db:f7:31:6e:65:42:7a:36:6f:0a:
         80:21:c5:a9:7d:93:53:ae:01:71:16:f9:57:a4:58:dc:89:68:
         b8:52:d5:9a:3e:c9:ed:d8:fb:9d:aa:89:05:75:a8:08:07:6d:
         40:42:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:36:56 2024 by rpki-client on console-fra.rpki-client.org