Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa
File:                     323830343a353834633a3a2f33332d3333203d3e20323638313230.roa (raw, json)
Hash identifier:          I6oAkg2PNM9kWmgDi2ldkq1vg3A0lM93gZ46OVsFHPY=
Subject key identifier:   B4:8F:A3:62:2C:38:42:0A:0F:D0:A9:B3:AA:77:39:2E:02:EA:65:CF
Certificate issuer:       /CN=94BE3C088C5997DF6AA8B56878A0239FF601A352
Certificate serial:       36C5E3E1CBA7644AEF15DF760687798A4A45EC58
Authority key identifier: 94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa
Signing time:             Thu 04 Apr 2024 13:06:05 +0000
ROA not before:           Thu 04 Apr 2024 13:01:05 +0000
ROA not after:            Thu 03 Apr 2025 13:06:05 +0000
asID:                     268120
IP address blocks:        2804:584c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl
                          rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c5:e3:e1:cb:a7:64:4a:ef:15:df:76:06:87:79:8a:4a:45:ec:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94BE3C088C5997DF6AA8B56878A0239FF601A352
        Validity
            Not Before: Apr  4 13:01:05 2024 GMT
            Not After : Apr  3 13:06:05 2025 GMT
        Subject: CN=B48FA3622C38420A0FD0A9B3AA77392E02EA65CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:58:5a:ec:a7:f3:23:27:57:6a:cb:92:09:
                    12:18:92:68:44:6e:ef:76:8e:7a:1b:7d:21:ae:4e:
                    5a:82:44:54:c8:b0:98:12:d5:7d:b3:42:3e:ed:fe:
                    52:f7:ef:f9:60:73:06:ca:69:3d:85:75:97:ec:e2:
                    8e:dc:f3:6c:49:a0:bf:b1:04:41:8c:0e:56:6e:d5:
                    06:fd:9e:bd:cc:9d:f3:78:26:7b:a5:f6:26:49:80:
                    d7:6c:d9:97:e2:28:4c:73:3b:b9:99:e7:b5:be:57:
                    78:12:2c:24:24:84:35:86:24:d2:76:d9:98:a6:09:
                    7f:4b:5a:dd:05:c7:4e:1e:ef:bf:53:2c:aa:37:a3:
                    be:97:28:87:15:ca:df:85:b7:dd:19:ed:6c:67:ec:
                    73:ea:27:bb:4b:db:c3:f0:b1:c4:e7:2e:36:c8:02:
                    22:74:0d:3e:ec:c9:a8:71:eb:95:03:48:b9:e9:b6:
                    fd:9a:09:5b:3d:0f:6b:d9:5e:d9:c0:22:cc:a2:0e:
                    d6:41:b6:7b:65:e2:c0:fb:43:18:cf:b6:f1:45:98:
                    40:0c:59:16:fe:fc:f1:de:9a:5c:ab:a9:d0:27:a4:
                    10:66:ba:03:9b:d1:00:aa:d1:fc:2d:b7:c0:4e:41:
                    50:d6:36:6b:b6:67:80:f5:34:cc:78:10:45:07:62:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8F:A3:62:2C:38:42:0A:0F:D0:A9:B3:AA:77:39:2E:02:EA:65:CF
            X509v3 Authority Key Identifier:
                keyid:94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:584c::/33

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:92:cf:13:4b:81:d9:af:72:c4:e5:90:66:46:1c:33:f1:
         4e:dc:79:62:80:a5:5f:fa:bd:14:cc:06:19:1e:10:e7:f9:40:
         14:68:c9:8f:0e:dc:d5:40:6b:56:f5:41:13:8e:28:79:1b:04:
         b9:83:f9:be:24:09:56:7d:2e:8f:bf:bd:ca:bc:23:64:43:8c:
         7b:1b:bd:f5:45:ca:b9:66:f6:45:c0:82:f6:36:46:7f:07:78:
         e3:fd:af:35:ab:69:13:23:19:1a:6e:21:4a:7c:c5:68:a7:1c:
         01:1c:12:fe:30:d3:e0:e5:88:78:2c:03:64:60:70:4f:d1:75:
         9c:75:d9:03:20:aa:a0:c8:a3:ec:ee:b4:57:ed:31:d2:be:92:
         b9:14:70:0d:5c:81:b3:8d:e8:74:88:ab:9d:7a:35:fd:09:90:
         5f:2e:6c:30:4d:e8:e5:b9:02:d9:55:d4:df:61:8b:56:c5:c9:
         a5:a6:9f:63:b8:eb:0b:4f:e4:b7:fc:04:ec:78:77:04:75:96:
         ef:e1:91:f3:1d:c9:da:62:5c:f2:01:67:6a:cf:a3:7f:f6:25:
         01:e4:5b:b9:3c:2e:86:29:33:ec:e2:07:5e:f0:db:9c:52:ba:
         a9:47:ab:28:fc:73:e4:62:93:f4:f8:47:b1:2a:ca:60:70:97:
         9f:93:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org