Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a3a2f33322d3332203d3e20323638353835.roa
File:                     323830343a353337343a3a2f33322d3332203d3e20323638353835.roa (raw, json)
Hash identifier:          pMDBfXnnjNhmpFywjhHT57vkmTYKPz3L9WDpBSRTUF0=
Subject key identifier:   34:7A:6A:E7:D8:15:EF:64:AF:7C:06:74:92:E2:C1:B8:76:50:AF:BE
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       5C77B3ABFEA956BBB88A1CE615FBDE0FB8119DFB
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a3a2f33322d3332203d3e20323638353835.roa
Signing time:             Thu 04 Apr 2024 21:54:18 +0000
ROA not before:           Thu 04 Apr 2024 21:49:18 +0000
ROA not after:            Thu 03 Apr 2025 21:54:18 +0000
asID:                     268585
IP address blocks:        2804:5374::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:77:b3:ab:fe:a9:56:bb:b8:8a:1c:e6:15:fb:de:0f:b8:11:9d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Apr  4 21:49:18 2024 GMT
            Not After : Apr  3 21:54:18 2025 GMT
        Subject: CN=347A6AE7D815EF64AF7C067492E2C1B87650AFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:83:47:41:88:15:ad:01:ad:0b:3e:e2:42:
                    83:b2:fa:95:9d:15:05:50:86:8f:88:4e:7b:de:1d:
                    90:6d:d1:f4:2b:ab:72:b5:2e:70:d8:f1:9d:a5:0f:
                    97:c1:24:05:81:63:79:2a:2c:29:dd:86:7f:9e:8c:
                    07:3d:94:98:49:85:1c:b4:bb:4d:b1:d2:b3:30:1f:
                    e9:c8:2f:73:f6:23:2c:ea:77:a8:c6:78:0d:6e:87:
                    51:08:be:62:99:6a:8e:fc:7b:03:7e:87:e1:a6:5d:
                    71:46:dc:c1:eb:47:e6:ac:e5:6a:e7:61:0c:78:ef:
                    4e:e7:bc:93:04:16:ef:ea:d3:a8:dc:96:7c:90:c9:
                    31:a5:13:fa:75:8c:8c:f9:56:19:23:f8:9d:f2:7d:
                    b9:35:c0:31:6e:12:dc:a5:df:61:74:39:14:2a:ca:
                    fc:99:2b:86:94:35:41:e3:6d:40:8a:e5:2b:a5:79:
                    08:6c:5c:0c:ed:2c:27:05:3c:ca:7d:fa:43:cf:05:
                    6c:64:ba:cc:9d:fe:1a:c2:fe:bc:7e:a2:eb:d8:63:
                    54:26:24:46:3a:82:32:ae:b5:ff:d5:0a:c8:09:23:
                    76:0a:39:02:74:6b:15:ff:c1:59:6e:f7:79:da:42:
                    6d:55:b6:75:30:c4:8a:38:5f:e8:26:23:5f:8d:56:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7A:6A:E7:D8:15:EF:64:AF:7C:06:74:92:E2:C1:B8:76:50:AF:BE
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a3a2f33322d3332203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5374::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:72:ed:b9:26:4a:bc:09:31:1d:dc:10:a9:2e:74:72:4b:
         e6:40:9c:d0:3e:bd:76:a0:6d:75:84:e2:58:61:c2:b0:eb:9e:
         fc:7b:50:0b:b8:9b:dd:ed:d8:6d:53:56:43:eb:88:dd:4f:64:
         30:7d:e3:8c:88:9f:71:7f:df:89:cc:33:66:71:19:7f:13:31:
         6c:2e:7a:0d:f6:92:71:2c:ed:db:0b:a5:62:c2:e3:ec:14:55:
         af:83:ab:9c:90:e2:9c:36:2c:31:11:49:d1:93:19:5f:d9:98:
         d4:3e:d4:23:a5:1d:df:7c:f2:2a:c4:d6:b9:90:8d:04:bf:34:
         c0:0d:aa:92:82:36:49:fc:e1:dc:f9:93:b8:89:1d:01:05:04:
         fc:e6:24:11:06:c4:01:ce:fe:61:8f:68:8f:41:94:ed:ea:39:
         bd:bd:ba:10:45:17:f3:37:12:c4:ec:91:42:78:34:a3:db:3a:
         03:16:59:a9:f2:82:31:36:45:c2:a0:91:93:d1:74:54:62:c9:
         ff:40:b4:7b:a3:73:49:dc:c9:ac:d7:5a:d6:e5:f0:c5:02:ae:
         06:8e:86:61:23:87:e8:bb:b2:90:df:77:56:68:be:1f:8b:5c:
         f3:b4:86:e9:86:d0:b9:de:5f:72:17:8b:b8:40:6f:c2:99:3d:
         7d:bd:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org