Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a343030303a3a2f34302d3430203d3e20323732353534.roa
File:                     323830343a383530633a343030303a3a2f34302d3430203d3e20323732353534.roa (raw, json)
Hash identifier:          2LYMK1VWay8cOIb0MaJ9ed2y8trOk1cr0vFzB/M/zTA=
Subject key identifier:   C7:8C:92:59:63:CA:C3:2F:75:06:8B:9B:6E:9E:D2:2F:DC:FE:67:EA
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       0E4F3E28B127801F63ED41CC9300FBAC79C5E445
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a343030303a3a2f34302d3430203d3e20323732353534.roa
Signing time:             Thu 04 Apr 2024 05:06:40 +0000
ROA not before:           Thu 04 Apr 2024 05:01:40 +0000
ROA not after:            Thu 03 Apr 2025 05:06:40 +0000
asID:                     272554
IP address blocks:        2804:850c:4000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl
                          rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4f:3e:28:b1:27:80:1f:63:ed:41:cc:93:00:fb:ac:79:c5:e4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Apr  4 05:01:40 2024 GMT
            Not After : Apr  3 05:06:40 2025 GMT
        Subject: CN=C78C925963CAC32F75068B9B6E9ED22FDCFE67EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:bd:b3:b8:53:36:8b:2b:8f:dd:69:c8:d3:
                    86:49:ea:b7:9e:dd:f4:05:cb:21:da:0d:48:0a:1d:
                    07:b3:2c:fc:14:ad:91:c3:4e:cf:8b:68:8e:b0:b3:
                    f3:6c:e0:3a:bb:73:4e:17:32:d3:3e:bc:a2:13:7a:
                    6b:64:11:fb:2a:4b:20:fa:ed:8c:a2:82:d0:4a:3c:
                    28:5e:f6:d8:13:26:90:19:a5:7e:9e:36:4e:2e:56:
                    98:25:a2:fe:1e:c2:5c:81:29:1e:42:3a:f7:9b:31:
                    d8:92:c0:a6:a7:73:88:91:fd:ea:94:68:b2:7e:12:
                    2c:e7:62:76:b4:77:3d:05:01:05:e7:0f:8d:75:bc:
                    d3:c9:78:47:62:be:7a:ca:4e:54:41:59:c9:08:3d:
                    26:8e:3d:4c:0d:a9:a3:61:53:a8:b6:0e:55:2d:ac:
                    03:d9:f6:ef:50:bb:04:1d:58:f9:6d:ea:27:df:f5:
                    e3:e7:7f:9b:d0:f7:a5:51:93:50:d9:0b:e4:af:15:
                    7f:00:8b:ec:91:dc:c3:7b:96:05:17:e6:8a:ee:59:
                    4f:62:22:4c:ed:bf:65:83:0f:bd:a8:8f:d5:9e:76:
                    ef:95:0b:4b:2f:30:a7:de:0a:3a:86:b6:91:49:51:
                    d4:92:56:56:1f:24:a9:31:d6:db:16:ba:16:52:c9:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:92:59:63:CA:C3:2F:75:06:8B:9B:6E:9E:D2:2F:DC:FE:67:EA
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a343030303a3a2f34302d3430203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:0c:fc:9b:d4:5a:6f:6c:66:e6:cc:36:c9:af:c1:04:26:
         25:b0:49:f9:36:6e:51:98:4e:1b:a2:04:c2:73:e4:ca:6b:87:
         c9:e4:4d:83:6f:e4:f0:c0:b4:76:00:f9:73:21:69:ee:e1:c1:
         16:af:78:43:61:96:e0:ae:1a:fe:85:fc:a2:fd:3a:16:13:e3:
         af:fe:99:e8:6b:e8:16:ff:ee:03:ef:11:88:c3:bc:17:60:fa:
         f4:fc:81:0c:85:b7:a9:1c:e4:2e:d3:df:14:80:fb:83:7b:00:
         65:f3:5f:68:2f:52:b0:4a:75:1e:55:3a:c2:75:77:3d:ef:7d:
         50:ba:48:c4:9d:ca:51:ea:16:f4:d3:37:22:16:b6:33:51:45:
         a1:b8:55:83:9b:41:0b:53:dd:d5:86:34:47:fa:80:14:c0:33:
         98:70:37:74:b5:6e:55:f0:c1:23:68:ba:b5:c8:54:d1:b5:33:
         ca:56:08:e0:29:a0:4a:69:ce:51:63:23:13:af:63:0c:c6:49:
         89:04:d4:da:62:bc:c9:de:b8:9c:6e:49:cb:3e:4c:bb:2f:70:
         83:88:23:4e:3b:4b:86:39:34:37:19:5b:17:45:da:ab:78:6c:
         16:12:3e:89:94:1a:75:47:e0:da:f8:90:0c:c3:34:d3:e6:44:
         62:f2:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:04 2024 by rpki-client on console-fra.rpki-client.org