Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/323830343a373666343a3a2f33322d313238203d3e20323731313435.roa
File:                     323830343a373666343a3a2f33322d313238203d3e20323731313435.roa (raw, json)
Hash identifier:          lmgI8x7NxbkcjSD7kQC/y1Wnk8P1WhkcWoAFM77N+C8=
Subject key identifier:   36:67:32:AE:3A:0B:F7:AD:5A:7F:F2:F2:2A:40:58:47:7A:79:BA:06
Certificate issuer:       /CN=5429164DC72EDAA8E89044A7962EFBA59A4A8421
Certificate serial:       6E26115A616A2515A8660EC962A2B05CD077EE69
Authority key identifier: 54:29:16:4D:C7:2E:DA:A8:E8:90:44:A7:96:2E:FB:A5:9A:4A:84:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429164DC72EDAA8E89044A7962EFBA59A4A8421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/323830343a373666343a3a2f33322d313238203d3e20323731313435.roa
Signing time:             Fri 22 Nov 2024 18:39:57 +0000
ROA not before:           Fri 22 Nov 2024 18:34:57 +0000
ROA not after:            Fri 21 Nov 2025 18:39:57 +0000
asID:                     271145
IP address blocks:        2804:76f4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.crl
                          rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429164DC72EDAA8E89044A7962EFBA59A4A8421.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:26:11:5a:61:6a:25:15:a8:66:0e:c9:62:a2:b0:5c:d0:77:ee:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5429164DC72EDAA8E89044A7962EFBA59A4A8421
        Validity
            Not Before: Nov 22 18:34:57 2024 GMT
            Not After : Nov 21 18:39:57 2025 GMT
        Subject: CN=366732AE3A0BF7AD5A7FF2F22A4058477A79BA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:bb:f6:96:e6:4d:dd:79:74:38:3a:ad:b9:
                    13:41:01:fe:41:26:0a:70:0a:ff:2c:df:a3:00:29:
                    c0:5c:6f:f6:c3:42:1c:df:8e:57:86:a9:47:2c:68:
                    4e:4a:44:d7:88:f7:54:9d:98:dd:f1:6f:06:b9:45:
                    00:56:c4:35:e9:33:0e:d6:93:70:5a:cf:7e:65:af:
                    0e:b0:12:4d:a2:3f:1c:c2:a4:67:ac:5b:1b:28:01:
                    6c:42:d5:04:5c:c1:28:fa:40:7b:ab:9f:99:56:3f:
                    2f:57:ec:26:23:12:3c:cb:a8:d3:1e:a4:47:99:65:
                    b5:7e:fc:dd:51:43:32:a6:5a:f6:53:6c:91:7a:a8:
                    aa:fb:80:cb:2c:c9:fc:aa:ab:c5:7f:fd:92:ea:d5:
                    22:08:66:51:47:fd:13:59:a3:a7:e5:cd:6a:e4:cd:
                    6b:ef:8f:69:af:5d:77:df:7b:f8:d2:9a:84:46:59:
                    d4:4d:9f:0c:9a:18:6f:9b:18:f0:f0:41:7b:1c:40:
                    a1:bb:3a:6f:f7:45:a5:77:6e:ec:d3:96:72:7c:2b:
                    0b:96:1c:ff:88:a0:04:75:c8:d3:b4:35:13:c7:fc:
                    d9:ca:ef:f4:db:74:79:fa:50:f5:75:68:6d:c2:ec:
                    77:c3:1f:10:fa:3c:2c:0b:ce:44:44:05:1f:fa:12:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:67:32:AE:3A:0B:F7:AD:5A:7F:F2:F2:2A:40:58:47:7A:79:BA:06
            X509v3 Authority Key Identifier:
                keyid:54:29:16:4D:C7:2E:DA:A8:E8:90:44:A7:96:2E:FB:A5:9A:4A:84:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429164DC72EDAA8E89044A7962EFBA59A4A8421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/323830343a373666343a3a2f33322d313238203d3e20323731313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:fd:69:a9:c8:c8:e6:1f:45:31:a2:c0:5d:a2:a0:21:50:2e:
         59:cf:bd:39:48:3f:89:df:7a:f5:65:6d:ba:fe:91:c3:cd:b3:
         bd:03:c9:9b:74:41:8e:a1:13:a9:ee:0f:be:bb:9f:78:16:ba:
         65:36:4e:9c:3f:1d:60:d8:45:ec:89:90:84:3a:6b:db:21:7d:
         46:10:0a:2b:05:e4:60:07:2a:c4:a8:dc:4d:2e:05:4c:43:13:
         5a:7b:91:ec:b2:83:71:50:06:8c:56:7c:7c:57:86:d0:98:d9:
         21:69:b4:45:82:ef:7c:b2:a6:74:24:4e:e0:4b:58:df:f4:7d:
         24:55:fa:a9:82:9a:69:26:7c:a3:16:84:58:76:fb:ba:6b:38:
         c8:ff:10:2f:71:b2:39:85:09:89:a9:6e:80:89:02:e0:19:c1:
         26:42:be:df:43:88:d1:5e:58:64:4b:f3:ac:04:39:68:ac:33:
         66:f6:d2:54:7b:16:b1:dc:87:81:5a:88:b4:77:dd:db:a3:8f:
         85:78:58:cc:7b:e6:de:86:73:1e:48:09:36:59:5b:4c:42:84:
         0c:46:05:71:be:26:51:27:f7:27:9d:7b:b8:43:e3:16:4f:8c:
         3e:a2:64:ae:40:47:89:36:dd:a5:f0:22:46:d1:b0:48:33:e7:
         c4:e7:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:33 2024 by rpki-client on console-fra.rpki-client.org