Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
File:                     323830343a353734303a3a2f33322d3332203d3e20323638303534.roa (raw, json)
Hash identifier:          06jXvBH8hSACNZyU4RAiuROyZ85hbQX2ym+VgYhI4oc=
Subject key identifier:   61:AF:78:69:E8:08:A8:21:0D:E2:55:24:C8:AB:DD:58:44:2E:52:CE
Certificate issuer:       /CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Certificate serial:       7D19E8406853F162C589998F9895199A3DAF9D79
Authority key identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
Signing time:             Fri 12 Apr 2024 01:53:41 +0000
ROA not before:           Fri 12 Apr 2024 01:48:41 +0000
ROA not after:            Fri 11 Apr 2025 01:53:41 +0000
asID:                     268054
IP address blocks:        2804:5740::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl
                          rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:19:e8:40:68:53:f1:62:c5:89:99:8f:98:95:19:9a:3d:af:9d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
        Validity
            Not Before: Apr 12 01:48:41 2024 GMT
            Not After : Apr 11 01:53:41 2025 GMT
        Subject: CN=61AF7869E808A8210DE25524C8ABDD58442E52CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:71:ae:55:f8:8c:ee:37:16:fb:90:fc:d5:
                    9f:85:91:3e:3e:24:2f:f5:c4:c0:41:af:84:4e:18:
                    8e:09:60:f4:e3:1a:58:35:86:00:f4:6f:bf:28:57:
                    9b:d9:a6:31:05:2b:3f:9d:93:89:90:00:b4:88:f0:
                    09:3d:7b:c2:a4:e5:da:f2:e3:45:59:60:c2:f8:b1:
                    aa:78:85:e4:15:1b:48:24:a2:cc:6d:20:81:eb:09:
                    09:fe:59:f1:ac:f0:0b:07:88:c5:df:30:b5:f8:9a:
                    4c:e0:56:44:f2:d7:68:a4:9e:13:64:43:45:3e:fd:
                    25:00:96:0b:f9:b9:85:b0:f5:05:a3:01:48:e4:32:
                    e0:03:66:82:cd:9a:19:7b:2e:61:95:e4:dd:90:47:
                    cf:6e:a9:b0:08:c2:b4:5e:a8:24:b0:82:59:95:b3:
                    6a:96:6e:62:7b:4e:84:48:04:d5:e3:d5:47:71:d8:
                    dc:d6:b2:31:aa:28:11:42:10:0d:bd:c5:45:23:4e:
                    1c:89:0e:dc:ae:64:6a:e5:98:61:4e:89:e0:90:d2:
                    7d:12:09:f1:4a:9c:4a:a7:18:fc:f5:f2:39:15:95:
                    31:e9:5c:47:09:fa:eb:69:f8:7f:33:0e:fe:dc:61:
                    6d:0c:78:b8:8a:3f:8b:a7:9c:96:88:c6:e5:d6:91:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AF:78:69:E8:08:A8:21:0D:E2:55:24:C8:AB:DD:58:44:2E:52:CE
            X509v3 Authority Key Identifier:
                keyid:A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5740::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:79:3d:8f:23:77:e1:0c:7d:a1:98:53:86:2c:6d:2d:d2:
         fe:16:82:2b:d6:1e:10:65:03:72:b2:d5:87:85:d8:11:59:9e:
         49:5c:c1:38:48:63:23:0d:70:6f:aa:aa:1b:5f:1d:2d:85:90:
         34:42:63:fd:6d:8e:77:2c:da:73:ef:d6:e5:a3:5b:a3:ee:18:
         25:81:d1:e8:c4:70:95:37:5d:6e:8f:d5:9b:e9:84:24:df:e1:
         ac:ed:47:60:b1:76:54:3d:6a:ca:55:72:9d:28:bd:71:89:dd:
         0e:24:b2:18:31:4e:62:5f:31:d2:2d:15:82:7b:c4:3b:45:27:
         91:13:36:e2:25:19:54:07:e9:a6:83:4f:f5:fd:ec:3c:5c:ef:
         5b:be:b8:b1:03:12:8a:dc:90:90:d9:02:a2:e7:ff:01:53:37:
         67:dc:06:b1:89:16:19:c0:2a:49:9e:eb:2c:b4:07:4e:5c:a6:
         b5:73:c1:0f:2c:b8:27:a0:2e:96:65:22:b3:fa:0d:b9:12:24:
         58:0f:d6:e3:ba:fb:24:4e:3f:9c:77:e1:e8:a1:7c:d3:8c:dc:
         1e:de:79:3a:a7:fc:f9:d7:0d:15:92:6a:94:3f:49:9e:ad:a1:
         f9:28:93:37:fe:06:aa:8b:cf:f8:46:b5:a3:5d:7f:e0:88:ef:
         36:ab:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org