Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323430303a3a2f34302d3430203d3e20323634353235.roa
File:                     323830343a323066633a323430303a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier:          BMnhbpB2sBZYCYqK7Zn4j18RgKtpVoPaw8BG1bnVO5M=
Subject key identifier:   E4:B3:05:A1:38:10:A5:39:D7:FF:29:D1:DA:0B:48:FE:F4:91:2C:97
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       4C5F2A6E8E48419BA6855CDACA918B861C8731BC
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323430303a3a2f34302d3430203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:08:55 +0000
ROA not before:           Tue 30 Apr 2024 22:03:55 +0000
ROA not after:            Tue 29 Apr 2025 22:08:55 +0000
asID:                     264525
IP address blocks:        2804:20fc:2400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5f:2a:6e:8e:48:41:9b:a6:85:5c:da:ca:91:8b:86:1c:87:31:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:03:55 2024 GMT
            Not After : Apr 29 22:08:55 2025 GMT
        Subject: CN=E4B305A13810A539D7FF29D1DA0B48FEF4912C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:16:bb:8c:93:b2:b2:3d:b0:78:fc:8c:a2:
                    d5:f0:fc:40:cd:8f:18:27:45:51:84:b6:74:1b:d7:
                    d8:f9:12:37:01:bb:9b:5e:05:c0:d4:f7:3a:f8:5f:
                    cb:eb:16:89:b2:48:67:1d:14:98:9c:78:c6:f2:dc:
                    26:4d:ca:5f:09:68:f9:81:ca:a8:df:b3:49:d9:f3:
                    ce:c4:ce:4f:36:52:22:f4:7d:59:48:7a:bc:39:6b:
                    36:7b:e5:60:72:f2:f7:26:36:91:c5:93:87:0b:07:
                    c3:7f:45:a7:20:bd:ce:f3:a6:b3:90:98:44:61:e8:
                    ed:0b:0b:f2:6c:31:f6:64:47:78:dc:4b:58:69:89:
                    cc:49:f0:f6:f5:fc:52:79:bd:a7:32:fb:2f:c4:8e:
                    a1:ed:c1:d3:cd:05:e2:5b:b0:94:84:24:e2:8a:a7:
                    64:fa:e5:6b:2c:be:e6:af:21:7e:2b:52:19:a7:28:
                    dd:43:e4:2e:06:e0:46:24:38:2b:26:b7:d8:88:a0:
                    df:7b:a6:b5:6a:3f:4b:a0:37:74:e9:0d:01:ac:f6:
                    b5:cb:5c:a2:a0:59:de:e8:ea:62:81:34:9e:84:fb:
                    73:ca:a0:f6:a6:71:2d:b1:0b:fa:84:1b:6a:8a:89:
                    d0:c1:a2:a0:aa:bd:dc:6f:7e:20:0a:28:18:c9:1a:
                    14:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B3:05:A1:38:10:A5:39:D7:FF:29:D1:DA:0B:48:FE:F4:91:2C:97
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a323430303a3a2f34302d3430203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:cb:ef:b5:6e:df:31:50:05:ba:24:22:c2:d5:dd:a4:02:0e:
         c7:05:e9:af:92:e6:2d:26:f3:ef:56:b4:d5:33:73:64:9d:49:
         06:68:cb:c9:82:25:5d:1c:45:59:ea:4f:44:a4:47:64:ed:5e:
         37:a6:8e:9f:40:09:c3:bf:7f:f6:c9:63:32:f1:a7:09:bf:9d:
         d6:bc:5e:d1:8b:1b:bb:81:c9:6e:1b:6f:8f:27:e3:ec:e9:b3:
         11:67:4d:43:cf:3c:0d:47:87:aa:d6:14:ba:3a:ea:e5:9d:dd:
         03:15:fd:30:2e:a5:9b:2c:16:3c:fa:2c:0e:8d:70:ae:db:08:
         43:47:46:6e:94:72:cd:d4:53:0e:57:d9:d4:36:90:cc:9d:26:
         fc:99:e2:ed:b2:f1:1d:37:2e:34:62:a0:22:aa:80:79:61:04:
         0a:d5:48:7a:df:ff:57:de:de:ff:df:f8:fe:1c:ea:03:f9:b5:
         61:84:b1:8f:62:5b:35:53:d1:02:89:75:a9:43:4b:b4:bb:96:
         f0:88:d0:e8:a5:66:fb:86:88:c9:ce:bb:02:96:4c:a0:21:9e:
         af:2b:c3:7a:e2:ac:09:11:96:43:36:9d:3d:42:74:90:04:03:
         8e:4e:89:e0:98:dc:56:75:b5:21:a8:96:aa:94:60:d1:c8:2f:
         af:a7:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org