Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa
File:                     323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (raw, json)
Hash identifier:          TfbUNiaxjOUguqV0QsYkPJajWif13lH0TgO6BegP57k=
Subject key identifier:   85:9F:31:FF:CF:F6:C0:B2:B1:CC:A4:07:A2:4B:92:64:A8:8E:77:3E
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       055A6DE82B84AD6A95CD832F23E89EEE004AEB88
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa
Signing time:             Thu 04 Apr 2024 08:36:29 +0000
ROA not before:           Thu 04 Apr 2024 08:31:29 +0000
ROA not after:            Thu 03 Apr 2025 08:36:29 +0000
asID:                     269145
IP address blocks:        2804:6018::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5a:6d:e8:2b:84:ad:6a:95:cd:83:2f:23:e8:9e:ee:00:4a:eb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Apr  4 08:31:29 2024 GMT
            Not After : Apr  3 08:36:29 2025 GMT
        Subject: CN=859F31FFCFF6C0B2B1CCA407A24B9264A88E773E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:28:e1:d5:cc:38:03:e3:5c:af:df:db:d4:
                    d5:66:cd:79:61:81:b7:73:c4:2b:eb:39:17:29:92:
                    96:87:11:9d:c2:f6:5a:70:22:ab:ae:51:e9:7c:3f:
                    9d:1a:9c:58:62:dd:1c:ee:bf:d6:8c:9f:04:cf:61:
                    33:c9:49:f8:d0:75:12:4c:48:bf:8e:6d:df:48:5d:
                    e4:03:8e:00:29:05:12:49:a7:20:0e:0c:12:99:02:
                    b9:6c:f2:58:dc:12:de:b4:8f:23:0e:c9:5f:76:81:
                    d7:57:59:af:3b:81:41:6b:37:47:9b:a9:b7:60:65:
                    67:b7:c4:19:54:eb:33:9c:34:85:fc:d3:b9:d2:0c:
                    7e:58:a3:cf:75:ba:52:ff:9e:9d:62:e7:22:2b:d1:
                    f3:8c:00:88:01:51:3e:a5:ab:b9:36:d0:df:37:40:
                    c0:83:fd:41:1a:26:de:17:a3:9d:7b:88:78:e0:81:
                    c9:6c:28:17:52:69:77:09:98:90:53:20:0f:93:b2:
                    c3:ac:0c:02:74:ec:57:67:10:83:5b:11:d9:e9:37:
                    3a:c9:e7:bc:6b:55:b0:8a:73:29:49:a9:bc:63:61:
                    53:59:c5:52:c6:f7:aa:53:65:00:39:ed:d7:c2:65:
                    73:1b:b8:42:95:0a:87:25:9a:85:8c:8b:3e:9c:37:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9F:31:FF:CF:F6:C0:B2:B1:CC:A4:07:A2:4B:92:64:A8:8E:77:3E
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6018::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:75:e2:5a:a5:db:0e:22:dc:7f:16:15:9f:dd:e9:07:f4:01:
         41:a1:a9:60:6c:fa:b4:af:90:00:90:eb:71:3f:ec:40:29:d7:
         31:f7:ba:ae:fb:55:2e:57:7c:ef:db:81:05:51:6b:9e:42:08:
         cc:e9:67:80:b4:9f:f1:6b:0a:77:61:9b:a2:32:f7:cf:c1:24:
         ee:37:dd:29:2f:fa:e0:d8:a7:db:25:17:9f:32:96:7b:96:07:
         b6:f5:5c:9c:a4:37:9b:0a:b4:d1:96:9e:b1:0d:f0:03:2e:e6:
         8a:56:76:50:f3:7a:6b:47:fe:b8:0f:b1:f9:f0:e2:a6:32:60:
         48:c5:bc:f9:96:e9:38:72:fe:b1:2e:7d:f3:57:0e:c7:dc:4a:
         a0:5f:0d:d6:c2:c4:1e:23:74:04:25:ce:ac:53:7e:f5:77:a3:
         4d:a8:0c:43:79:90:4c:29:10:d5:c0:46:91:a0:81:32:40:8a:
         84:0b:fd:0d:38:f1:fd:8c:49:9c:56:a5:80:b4:bc:17:c7:6a:
         c9:17:e8:1c:99:6c:4b:2e:6f:0e:72:39:56:a4:ba:3e:52:6f:
         26:bc:4b:48:bf:65:88:62:de:a9:2c:6f:8b:f7:32:90:2a:70:
         41:c6:70:9d:0d:f7:43:b3:32:db:3d:c2:7d:56:a4:7c:8f:b8:
         f1:c1:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:19 2024 by rpki-client on console-fra.rpki-client.org