Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa
File:                     323830343a333531633a3a2f33322d3438203d3e20323636323639.roa (raw, json)
Hash identifier:          2DKGUo4bcaDfJ7SVDYMRNIrkMhPMG0RG2Cpz63hpyuY=
Subject key identifier:   2E:50:CA:73:E9:18:B4:AD:65:F8:4E:69:70:C7:9F:10:98:27:D6:9A
Certificate issuer:       /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Certificate serial:       2A3928B53898B1E44C6D802AA1BF1050DDDE54BA
Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa
Signing time:             Thu 04 Apr 2024 23:44:49 +0000
ROA not before:           Thu 04 Apr 2024 23:39:49 +0000
ROA not after:            Thu 03 Apr 2025 23:44:49 +0000
asID:                     266269
IP address blocks:        2804:351c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
                          rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:39:28:b5:38:98:b1:e4:4c:6d:80:2a:a1:bf:10:50:dd:de:54:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
        Validity
            Not Before: Apr  4 23:39:49 2024 GMT
            Not After : Apr  3 23:44:49 2025 GMT
        Subject: CN=2E50CA73E918B4AD65F84E6970C79F109827D69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:25:5b:dd:eb:0d:34:83:6a:ac:d8:25:fc:
                    21:17:fe:71:dc:b4:ea:9f:3f:92:97:d6:b8:46:ec:
                    d5:3f:63:7c:51:e0:97:08:dc:57:af:4d:34:71:f6:
                    a5:b1:cb:e0:ce:04:8d:43:69:c8:83:e1:48:02:bb:
                    fd:b5:d7:3c:3c:bc:6b:ee:f6:d8:63:3b:e6:ce:0e:
                    c4:fc:f3:68:6b:f6:2d:b8:64:10:5c:6e:60:f2:29:
                    9d:84:62:01:3c:36:40:2b:ad:ff:c7:a9:6c:d3:6d:
                    d7:6c:2e:a2:b9:ae:41:8a:b1:0b:e0:59:c5:05:ce:
                    2a:14:47:a9:f2:93:29:4c:e7:40:ec:5c:29:6b:b5:
                    13:2d:6a:89:93:93:a3:11:8e:a7:8d:0d:f7:50:f7:
                    4f:90:36:ae:df:8c:58:eb:16:52:93:07:68:c3:12:
                    4a:5b:d1:8e:b6:dd:0f:a9:a5:28:16:e9:21:5e:54:
                    5a:08:75:27:c2:05:d3:76:f4:81:ca:99:a6:c3:68:
                    44:7d:df:45:fd:4b:0a:54:de:c7:48:68:ad:e2:b9:
                    26:80:ec:46:c6:02:94:3e:7a:50:24:63:50:40:35:
                    8f:e6:df:f7:6f:24:55:c6:43:a4:63:a9:77:4f:cc:
                    b2:33:8e:b7:a3:4b:b2:00:af:34:da:90:ce:f6:85:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:50:CA:73:E9:18:B4:AD:65:F8:4E:69:70:C7:9F:10:98:27:D6:9A
            X509v3 Authority Key Identifier:
                keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:351c::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:ad:ac:9e:62:39:36:59:5e:11:1d:15:a4:45:7f:98:e6:5e:
         22:9a:91:73:c1:57:2a:9d:39:3e:2f:15:42:cd:a7:87:11:d9:
         18:20:0f:77:63:f9:3e:70:36:d2:85:02:a7:0d:ef:eb:14:9d:
         c0:cf:52:cf:2b:a9:7c:d2:b9:45:c6:3b:41:34:d2:07:dc:f7:
         ab:bf:5a:77:68:d9:22:d9:df:6a:13:01:23:d0:04:95:8d:d6:
         ec:f2:bf:bf:e9:e0:8c:9f:b1:51:85:63:d6:7d:22:ed:77:18:
         53:5b:4c:b7:8e:10:87:b1:30:ba:83:9c:f4:1b:e2:18:ca:c8:
         d1:0c:87:b2:8a:87:0c:be:7b:ad:6d:6d:37:33:1c:1c:3a:8b:
         6d:a6:07:e7:b3:ff:37:d8:6f:0d:d9:b6:76:f2:3c:5f:1b:3b:
         ce:f0:34:43:0b:78:da:b1:da:d9:51:ca:3c:f5:ad:74:07:d3:
         bd:60:66:8c:13:5f:3a:85:50:d5:e3:0d:6c:75:82:e0:93:c6:
         bd:e0:5e:d4:47:b3:00:88:8b:21:89:49:b0:af:e6:f1:2d:df:
         44:40:f4:5c:b1:60:4d:0f:b5:e6:41:59:51:e8:61:41:36:1f:
         17:7a:d3:bc:ac:70:d9:1b:e2:99:e0:28:00:2d:fe:e2:3c:42:
         76:4e:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:04 2024 by rpki-client on console-fra.rpki-client.org