Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/323830343a383134343a3a2f33322d3332203d3e20323732343433.roa
File:                     323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (raw, json)
Hash identifier:          52uDtCt/xnMxsawEdyTGwOE3kI+yVyY6drNUhtNuceE=
Subject key identifier:   3C:78:8D:84:A9:2C:AD:49:59:DD:11:5B:D2:AA:A6:B0:A0:42:94:74
Certificate issuer:       /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial:       0C880155C8DF461E859483542E7A84D8C1B0E8FD
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/323830343a383134343a3a2f33322d3332203d3e20323732343433.roa
Signing time:             Thu 04 Apr 2024 19:31:54 +0000
ROA not before:           Thu 04 Apr 2024 19:26:54 +0000
ROA not after:            Thu 03 Apr 2025 19:31:54 +0000
asID:                     272443
IP address blocks:        2804:8144::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
                          rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:88:01:55:c8:df:46:1e:85:94:83:54:2e:7a:84:d8:c1:b0:e8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
        Validity
            Not Before: Apr  4 19:26:54 2024 GMT
            Not After : Apr  3 19:31:54 2025 GMT
        Subject: CN=3C788D84A92CAD4959DD115BD2AAA6B0A0429474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:50:4c:94:0d:be:0c:c9:15:65:c7:97:ed:43:
                    ac:1d:4d:3c:3f:2d:26:7f:f3:2f:86:4f:64:be:13:
                    95:1d:47:f2:65:11:23:12:45:59:70:70:67:28:31:
                    44:c0:85:ba:d0:29:f0:bb:f0:8d:62:2e:f5:60:a2:
                    31:19:e7:a2:c9:42:b3:5b:0a:d9:72:bf:05:73:cd:
                    db:ae:ef:29:57:b6:7d:b4:8a:13:f0:a7:5c:23:65:
                    20:73:45:eb:3b:ac:06:4b:2e:06:c9:f3:11:09:c3:
                    c3:ec:06:42:aa:38:61:ba:5b:16:91:5a:ba:f1:85:
                    fb:7b:db:e1:2a:60:0b:d6:5c:66:7b:67:20:8e:2c:
                    67:c1:22:2c:30:2e:35:c3:0a:57:dc:09:d6:36:cd:
                    02:9d:bc:04:33:90:e6:04:31:c0:74:e8:f3:95:a5:
                    84:ac:c0:a1:55:ac:db:15:b3:19:c8:95:dd:ee:c5:
                    1e:bb:03:67:dd:30:fc:00:90:2a:62:f0:e3:47:71:
                    75:0d:fb:76:73:aa:60:ee:eb:b8:ae:49:17:d8:e0:
                    cb:95:ca:b8:57:52:de:7c:8e:8e:5c:24:c7:7b:66:
                    d7:51:c9:0c:2d:bb:70:34:e4:97:32:07:01:e0:23:
                    60:a7:1c:da:25:23:8e:da:62:aa:5f:9a:6b:07:05:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:8D:84:A9:2C:AD:49:59:DD:11:5B:D2:AA:A6:B0:A0:42:94:74
            X509v3 Authority Key Identifier:
                keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/323830343a383134343a3a2f33322d3332203d3e20323732343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8144::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:58:17:bd:a2:fe:bd:e0:fe:b3:ca:14:10:90:61:34:32:
         54:2e:39:f5:80:24:c8:61:25:b4:6c:f1:e4:56:9a:46:bf:7c:
         07:67:bb:30:49:c8:69:09:49:45:b5:6c:74:cb:f7:08:41:f1:
         3a:9d:23:c9:16:3d:c5:e5:bd:01:f4:e9:66:0f:c6:e4:e2:f8:
         bd:2e:76:32:b2:85:71:72:66:55:b1:61:47:8c:93:f9:34:d8:
         b5:a3:c7:f0:41:67:af:33:7b:c6:df:73:35:ab:0b:b5:30:d1:
         23:d9:f9:70:de:5b:e4:59:3d:ef:2f:b2:7c:26:6a:86:86:cf:
         7c:bb:66:8b:71:3e:fd:e2:d5:a1:60:f9:77:7a:c7:86:10:45:
         95:3d:bd:ee:35:10:ab:98:ed:6e:de:40:87:46:5a:e6:c1:b3:
         b2:1a:bc:ff:81:f1:e2:c6:46:7c:06:97:34:36:ca:e5:da:28:
         8f:b8:06:48:46:70:7b:32:dc:04:09:57:dd:ed:46:df:1d:e7:
         5d:43:09:d6:56:b7:b3:83:86:15:38:24:ad:e2:70:04:5a:a5:
         75:0a:29:45:8d:f9:cc:74:7a:41:6a:83:09:3b:1e:51:83:45:
         e2:a1:7e:15:94:98:9f:b3:2f:c7:83:9a:94:88:59:aa:fd:d3:
         b7:27:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:28 2024 by rpki-client on console-fra.rpki-client.org