Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3332203d3e203238323034.roa
File:                     323830343a343134633a3a2f33322d3332203d3e203238323034.roa (raw, json)
Hash identifier:          WvoK3GRekVNKuWvnXyR/+4QD9O1K9Lk1E6HPcKJ8lWw=
Subject key identifier:   BC:A4:65:15:2C:50:4F:E8:D4:DB:33:37:67:18:A8:2C:97:68:23:76
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       6BA0AAF81C0A946DED3D4A91BFE5CCE1AEBADE88
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3332203d3e203238323034.roa
Signing time:             Wed 24 Apr 2024 14:37:18 +0000
ROA not before:           Wed 24 Apr 2024 14:32:18 +0000
ROA not after:            Wed 23 Apr 2025 14:37:18 +0000
asID:                     28204
IP address blocks:        2804:414c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
                          rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 16:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a0:aa:f8:1c:0a:94:6d:ed:3d:4a:91:bf:e5:cc:e1:ae:ba:de:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Apr 24 14:32:18 2024 GMT
            Not After : Apr 23 14:37:18 2025 GMT
        Subject: CN=BCA465152C504FE8D4DB33376718A82C97682376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:d7:f0:f2:9e:d0:ed:2a:b6:dd:ff:4f:2c:
                    51:fd:5c:4f:f6:09:02:4d:02:64:f8:82:89:58:29:
                    01:ab:28:45:8a:12:7f:e4:6f:80:0a:a7:29:3e:30:
                    da:5b:99:a9:2f:a9:04:58:58:71:d2:39:94:6d:24:
                    8d:29:99:6f:2d:e5:d5:24:58:60:58:53:c7:e4:19:
                    ae:bd:d6:a8:20:f7:ad:40:c5:85:f2:31:95:6f:c2:
                    e0:f7:86:b3:c6:64:70:0b:ac:d9:be:12:90:7a:94:
                    f8:e1:1b:3e:76:8f:9f:7f:03:f6:19:ae:ef:97:4b:
                    af:66:65:36:62:33:c1:66:22:92:81:ad:58:a3:eb:
                    95:d7:f7:0b:ff:8b:22:d8:d8:27:dc:24:cb:70:8f:
                    4d:a1:63:a2:18:40:c2:d1:8c:4b:cc:2f:77:70:0a:
                    30:ed:be:4a:6e:8f:2f:00:7b:6f:f9:77:83:77:c4:
                    8a:2b:51:56:56:66:8d:19:3d:8a:b7:12:b3:c6:c3:
                    a8:2a:8e:f4:c2:94:85:13:ee:d8:8e:09:a1:96:05:
                    b5:6a:cb:9a:26:bb:5f:cf:3b:f5:92:1a:67:c8:e1:
                    30:cd:d5:18:f5:6c:42:8f:cb:c5:b4:1c:d5:fc:a9:
                    a1:81:fc:f1:ba:c2:38:d2:e8:25:6a:39:fc:65:49:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:65:15:2C:50:4F:E8:D4:DB:33:37:67:18:A8:2C:97:68:23:76
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3332203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:414c::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:43:c2:7a:e2:4b:f2:3c:5a:3e:58:7b:b8:14:d6:98:3c:4d:
         2a:9d:40:6d:4e:6b:c0:f3:f7:c1:00:96:79:8a:0b:bc:a8:e7:
         29:84:00:f8:af:1d:94:e6:ac:05:78:46:ac:f4:2d:77:03:b2:
         33:38:ec:f3:a2:48:0d:8b:f4:f3:d5:d2:a1:f7:95:ff:53:69:
         09:39:c6:8a:a2:d9:a3:5e:be:36:7d:c3:aa:a2:19:49:b8:6f:
         ca:8a:43:c0:46:86:dc:f4:2c:41:22:aa:e6:79:9f:a4:24:0b:
         e0:7d:f6:9e:0f:86:68:27:c6:70:b2:70:50:b9:29:3b:c2:34:
         e5:31:a2:a7:3b:f7:8a:5d:80:93:06:88:a7:a6:59:d7:2c:dc:
         02:ae:8d:72:1d:38:4c:fe:81:9c:ec:f8:cb:f1:1e:c4:01:a0:
         34:32:58:a7:b4:a4:94:bb:6e:57:b4:16:28:c5:10:a1:8e:80:
         f0:c5:a8:bf:57:bf:0d:e3:c3:a5:78:0e:6f:51:12:94:f3:23:
         dc:fa:74:9b:7b:f8:ed:0f:d2:2c:2e:e0:9f:54:d9:fd:45:eb:
         2e:96:4a:5d:c0:f3:2a:43:f0:fe:e2:45:0a:49:cb:6b:65:ce:
         7b:93:5c:c7:ad:70:10:eb:0d:66:94:f4:d0:f3:7a:0b:18:b4:
         fc:b0:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:53:06 2024 by rpki-client on console-ams.rpki-client.org