Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/323830343a383761383a3a2f33322d3336203d3e20323732373234.roa
File:                     323830343a383761383a3a2f33322d3336203d3e20323732373234.roa (raw, json)
Hash identifier:          lvwOPHaz9q/pEnSZ25h+jbY2e8RCMHphOc7VPGW9u+s=
Subject key identifier:   FF:95:F7:3E:75:FD:33:40:CD:0D:B1:1D:A7:3A:E2:7B:BE:BF:D0:2E
Certificate issuer:       /CN=A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829
Certificate serial:       10741F35A040C82C7C60F4FFC2CEEE16B4D3E47B
Authority key identifier: A1:C8:A1:A0:58:DF:2C:D3:1B:ED:8D:3D:82:EC:49:DB:5C:06:38:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/323830343a383761383a3a2f33322d3336203d3e20323732373234.roa
Signing time:             Mon 06 May 2024 16:33:59 +0000
ROA not before:           Mon 06 May 2024 16:28:59 +0000
ROA not after:            Mon 05 May 2025 16:33:59 +0000
asID:                     272724
IP address blocks:        2804:87a8::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.crl
                          rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:74:1f:35:a0:40:c8:2c:7c:60:f4:ff:c2:ce:ee:16:b4:d3:e4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829
        Validity
            Not Before: May  6 16:28:59 2024 GMT
            Not After : May  5 16:33:59 2025 GMT
        Subject: CN=FF95F73E75FD3340CD0DB11DA73AE27BBEBFD02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:ce:c0:50:9b:82:5d:97:be:79:a0:d8:de:
                    9c:70:e7:d0:ff:f4:cc:47:91:c1:00:39:2f:d8:1e:
                    97:40:34:7f:d1:1c:85:94:3f:93:12:c6:83:73:74:
                    e8:f2:21:48:07:4e:00:c0:fd:ac:d5:ab:93:62:c4:
                    e0:46:67:b3:55:af:be:0f:86:6c:5a:dc:87:22:2c:
                    41:83:fd:57:d8:86:1b:7a:a0:84:0d:22:2c:03:54:
                    c3:72:9f:42:0d:32:28:97:93:6d:3f:67:59:32:86:
                    0e:45:5f:30:83:11:25:1d:ba:3f:32:85:34:a7:ad:
                    c7:05:40:13:96:d3:f6:ab:b4:8f:d2:18:ba:c4:c0:
                    17:1a:b1:50:d3:db:71:55:a5:15:66:7c:18:8d:f7:
                    f4:64:01:c9:93:05:c7:a0:70:98:b5:b9:22:7e:74:
                    a4:7d:1e:5c:81:1e:d3:20:75:0d:7b:73:8c:74:7f:
                    af:a9:95:bf:6d:22:04:61:47:33:06:2c:d1:c4:2e:
                    4e:5e:bb:07:a4:e6:ad:31:cb:0e:4c:b1:73:cc:a4:
                    ef:2e:7f:d6:f9:e2:c0:14:fe:54:c2:b4:cd:f6:ee:
                    a3:8e:f6:2e:0e:3d:a2:26:7c:fc:1e:13:39:79:e3:
                    b0:22:a6:7c:3a:2d:03:02:37:e9:7b:70:38:32:d3:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:F7:3E:75:FD:33:40:CD:0D:B1:1D:A7:3A:E2:7B:BE:BF:D0:2E
            X509v3 Authority Key Identifier:
                keyid:A1:C8:A1:A0:58:DF:2C:D3:1B:ED:8D:3D:82:EC:49:DB:5C:06:38:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/323830343a383761383a3a2f33322d3336203d3e20323732373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:74:da:66:ee:9c:e0:1c:d1:a2:ac:ab:af:dd:ae:71:ed:9c:
         85:93:56:ca:96:be:be:8f:0a:dd:fa:90:a6:5c:1a:cd:98:57:
         5f:1c:b8:cf:e4:a4:eb:1e:c4:2f:6f:54:be:de:a4:a4:15:23:
         d2:74:4f:a6:0d:47:04:d8:2a:19:03:03:4e:dc:ba:78:30:77:
         7d:23:0c:73:11:12:26:dc:53:5e:1c:ce:38:1f:44:40:82:1e:
         3f:17:89:54:62:7d:11:ff:28:f1:0b:22:91:26:24:e0:cf:a5:
         ac:d8:57:b5:fa:98:2e:aa:f4:19:17:fc:4f:f8:a0:1f:fa:4e:
         25:f8:17:57:ce:b7:a5:db:1c:ea:92:c3:95:63:e7:77:66:c4:
         5c:70:1b:41:00:79:78:d6:75:92:fe:c6:85:a3:6a:90:60:b5:
         f3:87:20:18:e5:b6:6e:3a:6f:e3:6f:f1:72:ba:c1:86:71:e5:
         c1:7b:ec:7c:13:f4:c0:3e:a7:19:9c:4f:bf:66:c1:17:2a:d9:
         bf:ac:af:3d:8a:53:70:47:cb:8d:32:2a:1f:0e:94:fc:bc:ac:
         23:10:87:0b:81:22:4f:53:b4:13:de:67:73:7b:a8:8f:be:da:
         32:85:04:4a:14:07:9b:68:ba:e8:41:2d:b0:dd:b4:1d:ad:59:
         1c:d9:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:11 2024 by rpki-client on console-ams.rpki-client.org