Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/323830343a346264383a3a2f33322d313238203d3e20323637333332.roa
File:                     323830343a346264383a3a2f33322d313238203d3e20323637333332.roa (raw, json)
Hash identifier:          FooHbmmyfrwSJq4aOrfQUYjoijr6DC2OvQiQp67KvjU=
Subject key identifier:   EE:DB:43:38:31:53:12:60:7F:93:D7:AC:21:57:BC:AB:19:0F:4A:27
Certificate issuer:       /CN=ACA778A2C607C1D75246F6843808768228994515
Certificate serial:       2D779C5D0196288D76C500F6BCA2A1242855A71E
Authority key identifier: AC:A7:78:A2:C6:07:C1:D7:52:46:F6:84:38:08:76:82:28:99:45:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/323830343a346264383a3a2f33322d313238203d3e20323637333332.roa
Signing time:             Wed 03 Apr 2024 22:58:30 +0000
ROA not before:           Wed 03 Apr 2024 22:53:30 +0000
ROA not after:            Wed 02 Apr 2025 22:58:30 +0000
asID:                     267332
IP address blocks:        2804:4bd8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.crl
                          rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:77:9c:5d:01:96:28:8d:76:c5:00:f6:bc:a2:a1:24:28:55:a7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACA778A2C607C1D75246F6843808768228994515
        Validity
            Not Before: Apr  3 22:53:30 2024 GMT
            Not After : Apr  2 22:58:30 2025 GMT
        Subject: CN=EEDB4338315312607F93D7AC2157BCAB190F4A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:18:0b:ce:63:f2:4e:a5:47:7b:b6:2d:e2:
                    e1:f0:9b:31:75:d0:ef:17:e0:cc:d7:6d:ad:95:88:
                    77:a0:ee:00:a9:bb:9c:99:30:5d:df:7f:bd:ad:72:
                    78:5c:0d:e6:08:2b:82:e7:9d:6c:96:92:fc:30:55:
                    3d:4f:0e:79:09:7e:fd:e5:46:5f:59:56:58:52:8d:
                    81:71:06:11:ff:18:31:d1:77:45:19:46:6f:99:4b:
                    27:89:e3:dc:9f:08:be:a7:90:3e:b6:3c:21:b1:ec:
                    d0:68:ad:62:ee:31:ee:ee:4a:73:d8:14:fc:fb:0e:
                    8c:c0:03:76:33:c0:1d:83:0e:44:d5:c7:81:e3:12:
                    48:61:8e:db:35:36:d2:7d:67:a2:63:40:72:aa:55:
                    11:69:02:74:23:5e:3b:0a:db:0c:b5:97:3f:25:a2:
                    77:9a:34:a8:06:93:d3:58:93:17:49:d5:49:f6:1c:
                    d6:08:d0:cf:03:70:54:ab:65:80:43:92:75:5f:4a:
                    2c:f9:8e:eb:ae:43:70:af:47:b7:a4:c9:c9:38:8d:
                    1c:9a:ae:82:c4:48:b7:26:59:43:a3:d2:44:e6:93:
                    1e:fb:e8:e9:b2:8d:01:66:42:57:15:a1:ec:b9:3a:
                    fd:cb:ca:18:59:8f:79:a0:28:ae:8f:d0:8c:89:d3:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DB:43:38:31:53:12:60:7F:93:D7:AC:21:57:BC:AB:19:0F:4A:27
            X509v3 Authority Key Identifier:
                keyid:AC:A7:78:A2:C6:07:C1:D7:52:46:F6:84:38:08:76:82:28:99:45:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/323830343a346264383a3a2f33322d313238203d3e20323637333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:a7:ff:54:90:a9:55:05:dd:eb:16:33:6f:f1:8a:0e:0e:1e:
         a1:04:d6:69:54:da:97:54:2b:6d:c2:73:93:a9:11:cd:25:89:
         cb:e2:81:48:fb:7b:20:8f:72:04:24:b6:81:64:d2:fc:78:64:
         66:c2:62:a9:ef:bf:fb:05:19:89:39:ba:19:41:03:4e:68:5f:
         ee:24:21:88:2f:20:c3:47:0f:53:32:cc:c0:e2:0f:d7:df:d1:
         78:56:87:70:2d:46:0b:8b:89:c5:e8:57:bc:bc:ad:ea:54:5b:
         5c:e5:75:e5:b0:a9:9f:d6:d9:65:0a:95:6e:83:ea:80:df:69:
         99:ea:2b:11:43:52:e7:a1:4a:ab:fe:ea:a5:42:aa:f5:c5:ce:
         ab:6b:1b:d4:4f:8e:b7:33:7d:b7:de:0d:12:77:4c:40:e9:96:
         4e:72:53:ab:9f:fa:53:c0:b4:89:a1:50:aa:72:b7:10:8a:c5:
         5e:da:51:02:56:34:f5:36:59:92:dd:3f:a7:e1:99:0e:14:d7:
         12:5c:2c:70:93:24:63:2e:53:fc:5f:e9:f7:40:8a:7f:db:b6:
         fd:0b:18:11:2f:9d:67:32:1b:d5:88:7a:94:56:a1:01:78:1a:
         71:4d:f6:4a:e1:df:8c:0d:ef:d8:82:aa:46:c0:67:02:0a:e8:
         a6:96:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:18 2024 by rpki-client on console-fra.rpki-client.org