Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/323830343a323334343a3a2f33322d3334203d3e20323634313532.roa
File:                     323830343a323334343a3a2f33322d3334203d3e20323634313532.roa (raw, json)
Hash identifier:          PO63cIJ3KzDFzIP0mWxXnFCtI8KA5jwh2bWE85tx0gI=
Subject key identifier:   BA:8C:2B:45:9B:95:53:17:AB:0E:BB:E6:BB:93:2E:84:66:2E:EB:A3
Certificate issuer:       /CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
Certificate serial:       0947C89D8B436D28FFF8C13521FD431C89C78307
Authority key identifier: F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/323830343a323334343a3a2f33322d3334203d3e20323634313532.roa
Signing time:             Wed 03 Apr 2024 18:32:21 +0000
ROA not before:           Wed 03 Apr 2024 18:27:21 +0000
ROA not after:            Wed 02 Apr 2025 18:32:21 +0000
asID:                     264152
IP address blocks:        2804:2344::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl
                          rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:47:c8:9d:8b:43:6d:28:ff:f8:c1:35:21:fd:43:1c:89:c7:83:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
        Validity
            Not Before: Apr  3 18:27:21 2024 GMT
            Not After : Apr  2 18:32:21 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:87:5a:a3:b9:25:b0:af:a4:d6:86:ca:98:
                    84:42:c5:a4:2a:ec:c0:fb:a3:60:8a:6b:d3:a6:79:
                    3e:ab:c8:46:07:71:88:66:ab:ea:94:7d:f8:dc:03:
                    78:5c:f4:fd:8a:51:b2:62:15:be:a8:07:df:20:86:
                    7c:b4:40:ca:88:45:cd:20:de:fd:fa:59:fb:91:3d:
                    81:2d:ed:fc:83:83:4c:df:d8:c5:ba:1e:a3:6c:d6:
                    40:c1:73:58:17:97:d8:80:a9:83:f9:32:fc:84:83:
                    07:cc:d3:e7:2c:3a:5c:c0:fb:2e:55:3e:bd:0c:09:
                    8d:af:09:27:0b:f6:36:60:60:8f:23:0e:6b:a4:79:
                    fe:e8:75:68:af:e9:07:21:a0:97:ac:ea:ee:42:79:
                    59:46:88:94:f6:2c:09:cb:6a:6f:04:1d:62:fa:77:
                    c3:75:3c:88:99:67:e6:56:36:a6:e2:06:d1:ec:9e:
                    46:f7:03:d5:d1:6d:25:23:51:6f:62:23:84:f0:78:
                    b3:fb:8d:e4:84:2e:b9:4d:b2:a5:75:56:69:b5:15:
                    2c:49:f0:d0:c6:17:40:56:88:1d:1c:5a:34:80:a8:
                    96:d4:28:2a:e9:c0:7c:ef:31:8d:74:89:26:cd:d2:
                    07:20:b2:43:a0:ba:f6:62:60:5b:5e:7e:2b:3e:f8:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:2B:45:9B:95:53:17:AB:0E:BB:E6:BB:93:2E:84:66:2E:EB:A3
            X509v3 Authority Key Identifier:
                keyid:F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/323830343a323334343a3a2f33322d3334203d3e20323634313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2344::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:3c:bf:90:06:ee:e1:26:d2:d9:8c:a1:7b:09:55:d2:f8:
         a2:7c:ed:ff:e7:5f:e2:ff:91:89:46:de:fe:ba:7f:c8:93:28:
         40:fc:fc:54:b5:80:08:88:5b:27:34:10:43:94:f7:d3:06:c4:
         ad:25:05:9d:10:fd:49:f0:0b:15:cf:5f:34:38:22:96:c8:1e:
         63:4a:bc:93:62:bb:6e:25:d2:13:f2:b0:99:a6:47:ea:72:8f:
         8c:68:98:c5:fe:4b:61:a1:82:12:6c:8f:89:0f:f5:61:1d:9d:
         cc:b8:78:de:79:cc:0f:3e:de:fa:33:44:e6:00:98:ee:c0:8a:
         a1:54:66:7c:01:ff:ff:41:79:70:c7:3e:8b:7a:20:3f:8f:68:
         72:70:7e:82:54:cb:bd:74:fb:3a:b1:e9:8c:8c:e3:3a:24:88:
         0d:b6:54:33:e9:06:bd:d9:eb:f0:aa:98:94:23:2f:dc:8d:a8:
         7c:a2:3c:e8:44:9f:17:66:17:bb:42:56:8a:dd:c7:3f:9e:24:
         be:3d:fd:87:3b:ad:60:d8:95:14:c7:cf:29:39:0c:76:8b:33:
         75:ac:25:04:6a:f6:39:ad:85:df:bb:3c:92:03:d0:fc:e7:c6:
         e0:70:15:07:66:89:74:73:5c:a3:af:74:19:ed:01:b8:14:3d:
         ea:af:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:18 2024 by rpki-client on console-fra.rpki-client.org