Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa
File:                     323830343a343261383a3a2f33322d313238203d3e20323637353137.roa (raw, json)
Hash identifier:          BvlwcS06Aomjs2Vd10QCQfMKSjFlSuNXTsmio/HhXe0=
Subject key identifier:   58:E9:D1:7B:99:04:70:14:C2:57:9F:8F:65:70:33:55:79:71:3E:98
Certificate issuer:       /CN=2AB2AB753BA9D5CF469AF90AA02562FBA8369A1C
Certificate serial:       755607A59DE632ABAA920825BDE2EEC1DBA023E8
Authority key identifier: 2A:B2:AB:75:3B:A9:D5:CF:46:9A:F9:0A:A0:25:62:FB:A8:36:9A:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB2AB753BA9D5CF469AF90AA02562FBA8369A1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa
Signing time:             Tue 17 Sep 2024 15:51:34 +0000
ROA not before:           Tue 17 Sep 2024 15:46:34 +0000
ROA not after:            Tue 16 Sep 2025 15:51:34 +0000
asID:                     267517
IP address blocks:        2804:42a8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/2AB2AB753BA9D5CF469AF90AA02562FBA8369A1C.crl
                          rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/2AB2AB753BA9D5CF469AF90AA02562FBA8369A1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB2AB753BA9D5CF469AF90AA02562FBA8369A1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:56:07:a5:9d:e6:32:ab:aa:92:08:25:bd:e2:ee:c1:db:a0:23:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB2AB753BA9D5CF469AF90AA02562FBA8369A1C
        Validity
            Not Before: Sep 17 15:46:34 2024 GMT
            Not After : Sep 16 15:51:34 2025 GMT
        Subject: CN=58E9D17B99047014C2579F8F6570335579713E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:d6:40:c6:45:70:37:57:22:f6:31:30:66:
                    f3:17:8a:3e:33:bc:65:d5:fe:f9:77:b6:1b:7b:74:
                    9e:fb:6c:21:62:e8:ea:9c:92:37:09:93:0c:d6:cf:
                    61:83:75:32:b3:78:29:2f:17:b0:a0:60:1c:06:58:
                    00:55:27:09:3b:7a:8f:32:a1:f1:eb:aa:b7:2b:de:
                    90:00:8b:0c:55:c2:d2:63:52:36:8e:c1:d2:ca:22:
                    7c:5e:b1:2b:7e:0e:bb:a2:26:c9:93:d7:b1:8f:04:
                    31:39:44:c7:e6:3d:b8:2b:71:c1:19:52:35:3d:b8:
                    c5:d3:e4:7d:a9:a3:8b:d5:3e:6b:1f:7a:29:b8:ad:
                    4e:3f:a8:3a:a5:00:9d:15:06:0d:ac:c2:fa:93:3e:
                    0f:cd:8e:f8:cc:54:7e:40:27:25:c7:3c:d5:e4:3b:
                    eb:2e:27:c6:a1:20:b5:f1:46:f8:7c:14:e0:82:f9:
                    dc:eb:b2:66:c3:08:04:a6:c5:b2:4c:a0:28:f6:63:
                    c2:eb:6d:0b:ed:5e:8d:d6:bf:bc:4f:18:a9:81:26:
                    df:e5:3e:76:fc:70:ab:54:24:59:5b:cf:e8:32:67:
                    58:11:b4:f4:e4:4e:0c:86:47:40:41:ff:3a:0f:0b:
                    4e:bb:59:ae:9a:1f:3e:da:1f:b6:c2:ed:22:0f:ed:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E9:D1:7B:99:04:70:14:C2:57:9F:8F:65:70:33:55:79:71:3E:98
            X509v3 Authority Key Identifier:
                keyid:2A:B2:AB:75:3B:A9:D5:CF:46:9A:F9:0A:A0:25:62:FB:A8:36:9A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/2AB2AB753BA9D5CF469AF90AA02562FBA8369A1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB2AB753BA9D5CF469AF90AA02562FBA8369A1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:00:20:29:7d:f5:2b:54:bf:8c:51:d6:33:49:9d:32:b5:
         f2:d6:e7:b2:81:9c:85:fc:f9:b5:58:01:e1:6d:48:4c:3b:32:
         d7:58:c9:36:e9:03:92:d9:d8:4a:53:e1:38:30:7a:04:0c:2f:
         a8:56:9e:76:eb:7a:16:94:ba:95:93:11:8f:82:c6:de:8d:6b:
         e7:77:a1:17:db:1e:e4:6b:27:c2:14:d8:6a:bd:ed:3e:78:d5:
         ec:fa:dc:66:f7:a2:8c:d8:1b:a0:94:05:bc:1d:3a:8d:aa:e9:
         4d:96:33:8e:a2:15:c2:ce:de:01:06:67:d2:44:ae:4c:bb:5b:
         c9:ad:67:83:a6:4a:8a:60:ec:f1:1c:cd:9b:f9:08:ca:5b:68:
         ae:29:2f:d4:0f:c8:dd:a3:bb:5c:3f:7d:4d:f2:21:83:d3:44:
         ab:4c:a8:3e:ee:14:29:36:2b:b0:56:40:f1:49:20:e8:39:f0:
         8d:46:d9:17:58:f2:63:fb:2d:fd:15:42:99:55:f8:7a:86:9d:
         26:d2:f8:86:af:0a:94:5e:11:9a:5c:82:61:fa:85:b4:55:d1:
         1c:e8:00:ff:2e:7a:71:69:aa:49:f8:84:22:ba:27:ca:32:c3:
         82:5f:0c:ef:5e:39:81:76:fa:b6:e0:94:22:4b:30:9c:5e:19:
         11:9b:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:46 2024 by rpki-client on console-fra.rpki-client.org