Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/323830343a346633343a3a2f33322d3334203d3e20323638333131.roa
File:                     323830343a346633343a3a2f33322d3334203d3e20323638333131.roa (raw, json)
Hash identifier:          Aht0L/pDZbta+zIticRZXwHjQTj1Sw8uT9Ul+rixFPA=
Subject key identifier:   D6:AD:0F:CF:09:E1:4B:9D:F5:0F:DF:3C:43:89:7F:F1:61:8A:16:A6
Certificate issuer:       /CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
Certificate serial:       63D4BF829C4BA08845FA385EA5AF7F8E44FEBABD
Authority key identifier: B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/323830343a346633343a3a2f33322d3334203d3e20323638333131.roa
Signing time:             Thu 04 Apr 2024 02:17:38 +0000
ROA not before:           Thu 04 Apr 2024 02:12:38 +0000
ROA not after:            Thu 03 Apr 2025 02:17:38 +0000
asID:                     268311
IP address blocks:        2804:4f34::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl
                          rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d4:bf:82:9c:4b:a0:88:45:fa:38:5e:a5:af:7f:8e:44:fe:ba:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
        Validity
            Not Before: Apr  4 02:12:38 2024 GMT
            Not After : Apr  3 02:17:38 2025 GMT
        Subject: CN=D6AD0FCF09E14B9DF50FDF3C43897FF1618A16A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:06:98:34:a4:0d:dd:20:8f:69:1a:7c:ed:
                    ba:a9:ed:a5:ca:e1:f7:4d:a2:c1:70:48:5c:1d:56:
                    bb:ab:b4:29:0b:ea:c3:18:29:73:51:8b:aa:7c:9d:
                    61:0c:37:50:4b:bb:29:c1:19:9f:c6:94:14:ab:fc:
                    90:8d:ba:1a:48:f8:b7:fe:af:8f:b1:7d:fe:ed:11:
                    c1:63:ec:c4:54:46:b4:a8:56:96:3f:ea:5d:16:1f:
                    21:dd:6d:b5:6f:9e:eb:b8:dd:e3:cc:e3:df:b8:a0:
                    2c:b6:09:74:7f:4e:f2:6d:a0:5b:76:e9:99:be:36:
                    2d:75:63:50:57:51:ad:90:f3:92:0a:7b:49:45:48:
                    ff:4f:f6:3d:35:00:b9:b9:43:f2:84:8b:36:99:aa:
                    9b:78:89:38:bd:df:e7:ab:0f:6d:16:87:ad:4d:af:
                    a1:75:a3:5c:0a:b7:bb:3a:a4:33:9b:ed:a9:3c:0c:
                    98:2f:7c:fc:43:80:4e:be:23:4c:19:0f:b5:c8:2b:
                    3c:89:22:48:98:8c:16:f4:73:7c:a8:21:ef:be:80:
                    18:f6:44:3f:ba:1c:03:82:0c:0e:80:81:35:ca:1e:
                    68:f8:61:70:b0:e8:6a:02:b0:bb:67:3f:81:68:26:
                    d6:4a:81:6a:52:33:52:0b:0d:f8:c8:e0:a1:e8:f0:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AD:0F:CF:09:E1:4B:9D:F5:0F:DF:3C:43:89:7F:F1:61:8A:16:A6
            X509v3 Authority Key Identifier:
                keyid:B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/323830343a346633343a3a2f33322d3334203d3e20323638333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f34::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:3a:63:16:b2:eb:8b:87:8f:8b:8c:e0:03:a6:0a:a3:0d:
         37:ba:fd:b2:5f:bc:53:55:73:c7:6e:63:12:02:3e:8d:2f:eb:
         ef:2b:14:ca:29:98:b5:d7:3b:2f:12:f9:96:48:9d:9f:c2:8e:
         df:23:9a:d3:43:66:8a:37:f9:47:1a:54:66:77:92:38:8c:fc:
         89:60:70:cf:41:c2:81:3f:95:29:d1:e0:2b:27:9d:c8:fe:2f:
         ad:00:b6:cc:18:8b:cd:ec:e1:f7:c1:50:42:6d:7e:f5:12:71:
         1f:c2:e9:42:7c:09:57:7b:43:32:04:de:db:0e:81:6e:0e:44:
         b9:14:5d:e7:33:08:c3:89:7f:50:5e:e1:f5:2e:63:34:70:0d:
         18:e2:8e:85:ed:4d:78:32:e9:52:69:ba:33:78:a7:fc:16:0a:
         cb:49:73:ee:83:84:68:31:d3:85:e0:e6:96:3f:7b:90:d6:28:
         b9:63:f9:da:8b:95:3d:15:ca:58:32:32:2b:bc:bb:ff:3d:e1:
         97:9e:17:3b:7c:03:26:99:64:50:4e:99:43:78:66:c1:eb:a9:
         41:4e:e9:24:0e:d7:2b:31:59:1e:21:4a:b9:60:e4:12:86:37:
         fb:56:c6:20:53:71:2f:9f:be:8b:ca:60:49:85:bb:74:9b:d9:
         45:d4:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:47 2024 by rpki-client on console-fra.rpki-client.org