Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa
File:                     323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (raw, json)
Hash identifier:          IvYrnZ80rmvnk+f/ifQla6cK5O6B38hzT1CwtOxjX7M=
Subject key identifier:   69:50:2C:FA:89:C2:51:3D:DC:68:75:4F:67:0F:DE:AD:82:56:C7:95
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       76446B2C37BD60F157CA30ABFD9FD57EAD6E9C95
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa
Signing time:             Wed 05 Jun 2024 19:25:55 +0000
ROA not before:           Wed 05 Jun 2024 19:20:55 +0000
ROA not after:            Wed 04 Jun 2025 19:25:55 +0000
asID:                     264900
IP address blocks:        2804:2f94::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl
                          rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:44:6b:2c:37:bd:60:f1:57:ca:30:ab:fd:9f:d5:7e:ad:6e:9c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: Jun  5 19:20:55 2024 GMT
            Not After : Jun  4 19:25:55 2025 GMT
        Subject: CN=69502CFA89C2513DDC68754F670FDEAD8256C795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e6:22:8e:99:25:9e:3f:5c:d9:ba:82:0d:aa:
                    8f:65:fa:d7:20:9c:61:6e:7f:68:e8:2a:f0:18:e1:
                    c1:54:e6:80:82:c6:25:60:a1:25:3d:2c:4b:83:c3:
                    b8:b5:54:cf:4b:f2:05:1b:bf:b9:53:21:71:44:aa:
                    93:39:b6:14:01:5e:19:8a:47:3c:4e:ad:d4:ee:7f:
                    18:55:29:9b:41:a1:a6:12:d1:f1:2f:cb:14:ed:7a:
                    c4:b0:be:8d:82:84:8d:ee:9b:e2:3c:71:7d:19:25:
                    64:4e:10:9a:31:b7:48:7e:9c:3c:f8:a8:35:f7:ef:
                    0f:0a:0e:dc:b7:d1:e1:04:8f:dc:0b:7c:bd:82:40:
                    3c:c6:3f:1d:b9:8c:b0:f6:cf:2c:ee:cf:6c:f0:51:
                    06:cf:65:b6:f4:1b:82:6a:6c:8e:e5:21:d4:50:57:
                    7d:51:0f:35:e6:1e:25:ff:45:0c:5f:e9:78:b2:58:
                    42:a3:a2:0e:a3:a4:11:e4:13:37:32:fc:ca:cd:ca:
                    08:f7:cd:86:a3:38:ad:b7:a8:0a:65:53:0a:24:57:
                    2e:9e:34:fb:50:19:ab:90:3c:c8:0b:d9:50:4c:3c:
                    2d:16:ee:dd:01:7d:c9:33:a4:4c:64:4f:53:ec:a4:
                    a5:a4:d6:82:1f:3c:b6:d4:70:75:9b:d6:0b:c1:8f:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:50:2C:FA:89:C2:51:3D:DC:68:75:4F:67:0F:DE:AD:82:56:C7:95
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f94::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:45:e8:57:86:c0:9a:ec:73:39:c5:49:af:d9:f4:6d:00:00:
         a9:42:b8:8b:9e:94:f3:d1:33:e2:fb:c6:85:99:6c:e6:a7:ea:
         11:b8:df:57:a4:96:87:af:b3:cf:4f:64:d0:e4:2b:27:57:77:
         42:0a:98:9d:84:da:0c:8d:fa:54:06:ca:29:9f:58:c4:2b:58:
         54:28:6c:22:d3:ee:c7:65:c4:f7:56:43:91:b1:54:07:76:24:
         c5:e3:80:e1:42:5a:f5:cb:13:b2:c3:eb:7b:69:5f:45:64:6c:
         e8:df:b5:eb:e1:6d:0d:e1:31:76:21:76:a2:c8:d8:3b:58:b7:
         d3:bf:b6:46:11:16:65:c2:be:2f:af:03:d0:47:2e:0a:55:e7:
         88:89:e4:cd:41:f9:56:10:01:91:d6:88:87:ba:6a:fa:4d:9b:
         cd:34:94:29:0b:f1:97:2f:be:cd:ff:c6:28:dc:fa:92:3e:13:
         df:81:80:e0:17:d3:40:b9:2e:b3:ac:c0:b7:c0:b6:53:0e:e6:
         4b:89:f7:37:28:18:55:90:2a:83:7b:ef:ff:8f:d0:ab:db:c5:
         f2:7e:2f:ae:e9:f9:6c:f7:4f:04:5d:fb:aa:e2:76:2e:57:6e:
         63:28:b3:0c:3e:7d:00:c1:72:52:8d:65:eb:3c:31:d9:76:0e:
         21:59:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org