Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343830.roa
File:                     323830343a386634343a3a2f33322d313238203d3e20323733343830.roa (raw, json)
Hash identifier:          s1C6dfS4baVIyA9sGnMqQMXUH/dBej8e791Q36Cnud4=
Subject key identifier:   D3:50:7D:10:1E:AF:E8:FE:DB:D7:2D:26:B7:0E:8C:04:2B:80:2D:53
Certificate issuer:       /CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
Certificate serial:       7B14A517D11DA0FB438FE1877788E600EA2258D8
Authority key identifier: BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343830.roa
Signing time:             Tue 28 May 2024 18:36:41 +0000
ROA not before:           Tue 28 May 2024 18:31:41 +0000
ROA not after:            Tue 27 May 2025 18:36:41 +0000
asID:                     273480
IP address blocks:        2804:8f44::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.crl
                          rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:14:a5:17:d1:1d:a0:fb:43:8f:e1:87:77:88:e6:00:ea:22:58:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
        Validity
            Not Before: May 28 18:31:41 2024 GMT
            Not After : May 27 18:36:41 2025 GMT
        Subject: CN=D3507D101EAFE8FEDBD72D26B70E8C042B802D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:63:9f:21:ca:29:cb:8d:80:74:2b:08:4c:
                    a6:b0:09:84:bd:4e:2b:2e:e9:f5:af:f1:9c:8b:d8:
                    35:e6:63:cb:f8:49:6d:07:86:a5:77:05:2f:04:aa:
                    c3:d5:bc:bd:65:5e:10:dd:cf:81:2a:59:33:0c:79:
                    c7:79:6f:f3:10:8a:bd:57:b9:31:74:bc:ea:de:24:
                    0f:e1:e7:87:cb:08:c1:65:c6:49:6b:31:6c:ea:5d:
                    e6:80:16:83:45:e8:79:82:cc:9c:82:18:25:c4:d8:
                    08:fe:3b:b6:6f:c6:85:0b:b0:04:59:9b:bb:01:de:
                    45:c6:90:ef:56:29:5a:89:27:e7:68:22:91:07:ee:
                    5e:2f:22:62:86:6f:01:57:b5:6a:cb:25:f8:6d:eb:
                    e2:e3:8a:fc:08:93:42:34:0b:02:12:c4:d6:12:6f:
                    a3:e4:84:ff:5d:9f:f0:fe:9d:e2:5c:5e:c5:dc:01:
                    4a:6f:ea:0b:00:26:8b:55:95:98:47:f0:6b:42:c9:
                    67:4e:3a:f5:c8:5f:14:b0:5b:6e:65:55:74:f7:b4:
                    94:2d:20:72:4f:2c:be:4b:7b:67:8b:a6:36:79:cb:
                    5b:b9:12:56:aa:d4:ec:33:83:c9:4f:76:1f:a7:b2:
                    7b:0f:d5:7f:41:d3:f4:98:5a:5e:5e:b3:91:98:1e:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:50:7D:10:1E:AF:E8:FE:DB:D7:2D:26:B7:0E:8C:04:2B:80:2D:53
            X509v3 Authority Key Identifier:
                keyid:BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f44::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:57:9b:53:51:f9:b4:0d:41:fb:82:7a:f9:31:71:c8:be:f0:
         31:a0:d4:41:fc:25:c6:4b:fd:d8:0d:3d:46:60:99:94:fb:1f:
         60:ae:cf:0e:3f:e6:26:08:e9:52:b5:76:18:47:75:77:ff:79:
         f4:98:a4:44:07:a3:89:4f:d5:84:27:fd:84:3b:59:1d:2b:09:
         2b:00:de:c2:75:76:c2:d1:3a:e1:a2:fc:03:b5:49:f2:29:e2:
         a3:42:33:a8:f1:42:ec:37:63:66:04:19:76:16:c8:15:3b:90:
         0d:63:ff:8b:90:7a:72:1e:9e:2b:63:a8:fe:68:f3:d0:be:95:
         d4:29:b1:de:06:f4:68:b8:5e:e2:11:80:a4:2a:01:45:3c:09:
         0e:5d:7d:33:e3:a5:63:e2:ce:06:9a:f2:4f:7e:86:0d:0b:3d:
         66:5e:b8:57:fd:08:cc:e4:69:cc:aa:7a:a4:2e:c3:ee:e3:33:
         ef:49:9d:25:ac:1e:57:80:6b:0a:d9:e5:34:1c:f2:ea:58:e5:
         dd:65:51:b5:da:2b:7d:13:4d:30:00:0e:58:d6:fb:21:90:62:
         90:36:2e:e6:df:b5:96:be:1a:37:17:80:4c:d7:1a:52:2d:d7:
         da:79:c2:25:7a:be:99:55:ec:9c:6d:34:6e:72:75:73:29:be:
         af:39:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:27 2024 by rpki-client on console-ams.rpki-client.org