Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/323830343a376561633a3a2f33322d313238203d3e20323731363339.roa
File:                     323830343a376561633a3a2f33322d313238203d3e20323731363339.roa (raw, json)
Hash identifier:          2SuFL6v3aTUMzRNOVL6spJGqYc6+0TJzO0MKBoef3s4=
Subject key identifier:   8E:A6:CD:8E:47:D6:9C:67:D2:3F:D0:9A:04:70:12:31:9F:F0:9B:1C
Certificate issuer:       /CN=2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B
Certificate serial:       13BCC65566CC08EFDE22FC80C7BC1DDE7076F074
Authority key identifier: 2B:84:15:C8:2A:5D:FB:6F:48:CA:44:79:B7:9C:BE:DF:DE:52:A4:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/323830343a376561633a3a2f33322d313238203d3e20323731363339.roa
Signing time:             Thu 04 Apr 2024 16:23:32 +0000
ROA not before:           Thu 04 Apr 2024 16:18:32 +0000
ROA not after:            Thu 03 Apr 2025 16:23:32 +0000
asID:                     271639
IP address blocks:        2804:7eac::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.crl
                          rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bc:c6:55:66:cc:08:ef:de:22:fc:80:c7:bc:1d:de:70:76:f0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B
        Validity
            Not Before: Apr  4 16:18:32 2024 GMT
            Not After : Apr  3 16:23:32 2025 GMT
        Subject: CN=8EA6CD8E47D69C67D23FD09A047012319FF09B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:25:83:26:9f:eb:db:24:b3:6e:cd:99:2c:
                    7a:7d:ee:e2:ae:9c:fb:7f:08:e3:5b:84:b3:1f:c9:
                    22:34:e4:97:4f:44:71:ac:c7:c5:fb:89:9d:49:0f:
                    07:2e:37:d5:e1:9a:66:5d:1e:07:7a:ff:66:f3:bc:
                    a8:8b:ef:95:45:bb:4c:49:65:eb:46:19:4c:0c:01:
                    3e:92:a5:9b:6a:ca:18:5b:d3:66:28:1e:29:b6:0d:
                    b8:4a:67:96:dd:5d:43:36:7f:89:81:ef:45:51:5d:
                    72:bf:40:c5:e1:cc:74:cd:8a:ab:2d:50:53:1f:ee:
                    5c:cc:77:57:a3:17:ed:97:96:d8:bb:f5:c8:ef:d6:
                    dc:d6:20:32:58:54:14:0f:22:40:6c:9f:d3:24:b4:
                    eb:ca:ec:6d:e0:5b:71:13:01:94:7b:e8:9c:5d:33:
                    16:2d:43:e7:0f:5c:14:fc:42:aa:51:e8:3a:c7:a5:
                    53:f9:da:31:97:f7:ee:d9:1d:22:16:5a:23:92:67:
                    68:27:c7:39:77:75:5f:cb:55:90:97:29:fe:da:07:
                    1c:c7:79:54:b8:87:04:16:75:d7:a5:87:3f:ba:03:
                    3d:7a:8a:c2:58:e9:ce:73:53:2e:aa:cd:51:ed:2d:
                    9c:c5:4f:70:2a:4c:a2:d4:c5:d2:15:d9:b2:81:e5:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:CD:8E:47:D6:9C:67:D2:3F:D0:9A:04:70:12:31:9F:F0:9B:1C
            X509v3 Authority Key Identifier:
                keyid:2B:84:15:C8:2A:5D:FB:6F:48:CA:44:79:B7:9C:BE:DF:DE:52:A4:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/323830343a376561633a3a2f33322d313238203d3e20323731363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7eac::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:88:78:d3:c8:2d:a8:ce:15:bd:ab:b9:90:90:7f:05:1b:97:
         4f:3f:64:60:17:8c:69:28:b8:eb:1b:58:cb:97:49:e6:a1:36:
         35:26:18:cb:33:41:3a:dc:30:9c:ab:4f:dc:48:b8:b3:cb:e8:
         ce:74:88:12:0a:4f:42:f5:b8:e1:96:11:bd:f9:af:fc:d3:ce:
         52:5f:72:8d:a0:5b:64:90:3e:3b:ef:f7:ba:eb:b5:c5:c3:3f:
         dc:2a:60:52:27:e8:13:0b:a7:e7:ef:d2:7c:93:7b:d0:71:83:
         27:3c:83:a9:88:7d:70:11:a7:e0:da:91:a4:59:d8:07:c5:19:
         94:2e:4f:20:c6:93:04:6e:6a:67:34:52:b3:9a:e3:ae:4f:51:
         1e:78:3c:b7:12:2a:79:5c:83:8f:53:27:cc:43:97:56:92:9d:
         c1:42:0c:53:38:62:74:64:d3:29:25:11:51:a7:bd:fd:33:20:
         69:50:9f:0c:e9:9c:93:aa:52:b5:7a:05:c5:5a:f9:7d:30:8b:
         ba:7b:01:0d:1b:dc:71:1c:a5:86:31:8c:36:45:9f:ba:0a:a8:
         cd:32:e7:20:27:68:ca:85:2a:69:aa:19:c9:66:38:93:54:73:
         6d:05:a5:ae:4e:63:e4:c5:9e:39:69:57:59:fc:11:21:b1:7d:
         54:04:b8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org