Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          Uq7duosMbXQ4OOUSDBEr6UMuikjqt5KnTQFosNsU6ss=
Subject key identifier:   52:7F:08:CF:A3:57:24:1E:20:BA:92:F2:B6:97:0D:94:F1:1B:EA:42
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       2D3117EC23C10273DCA0F5B3942CB99568154987
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Wed 03 Apr 2024 18:31:38 +0000
ROA not before:           Wed 03 Apr 2024 18:26:38 +0000
ROA not after:            Wed 02 Apr 2025 18:31:38 +0000
asID:                     264509
IP address blocks:        2804:20b4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:31:17:ec:23:c1:02:73:dc:a0:f5:b3:94:2c:b9:95:68:15:49:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Apr  3 18:26:38 2024 GMT
            Not After : Apr  2 18:31:38 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:13:42:f9:12:76:b0:1b:a5:65:d8:7c:73:
                    48:6b:1f:f6:ef:98:66:c2:6a:05:30:af:73:ec:ca:
                    9a:61:2c:34:d7:c0:3f:69:a9:ad:6c:b0:e9:c8:26:
                    84:a1:1e:3a:54:b2:78:d6:c9:62:cb:41:42:e6:54:
                    35:2f:76:3c:50:67:2f:c0:01:41:dc:c6:a0:d5:d7:
                    a2:28:c9:63:da:c9:a9:32:e9:00:ac:00:7d:5b:5e:
                    4a:e8:a8:d9:40:59:ee:71:f9:e3:90:ef:1b:71:7c:
                    44:72:8b:e4:95:55:4d:90:84:84:f1:7b:b9:04:13:
                    be:d6:f2:05:ac:63:32:a4:d8:4a:08:75:b2:61:63:
                    64:b1:c5:64:1f:35:81:4f:16:b9:09:0d:0c:02:e6:
                    2b:51:82:41:05:ea:52:38:e6:fb:aa:10:7c:67:fc:
                    bc:58:6f:3f:d6:78:82:54:19:32:58:02:e3:46:fb:
                    f5:07:d9:d8:85:38:4e:7e:46:f3:d2:a8:39:03:f5:
                    ed:6a:08:b3:42:8b:60:7e:cd:28:c7:88:37:ce:3b:
                    c3:91:af:65:a3:00:3a:44:8e:2f:0a:3c:51:f4:57:
                    44:c7:03:58:a6:aa:2a:8a:d7:57:3c:9a:9e:88:8a:
                    4c:7d:7f:dd:8a:02:09:40:5d:48:31:6d:e4:48:7c:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7F:08:CF:A3:57:24:1E:20:BA:92:F2:B6:97:0D:94:F1:1B:EA:42
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:b1:48:c8:8c:c7:29:a9:33:5b:32:f6:0d:5a:bd:e8:20:81:
         4f:d9:c7:ef:3e:88:7b:bb:b4:6b:2b:6d:e0:77:ca:83:0f:48:
         25:c3:a7:9a:7c:74:6b:14:48:11:ed:42:5c:f8:9a:2b:36:b3:
         b4:04:ff:8a:68:65:e1:63:04:bc:4e:c5:19:85:e4:71:ef:ce:
         90:fc:26:c3:07:bc:5a:0c:fb:cb:7b:94:0c:52:d8:6d:24:d1:
         4d:b6:5b:96:a0:81:39:6b:fa:b0:cf:e1:6d:63:e3:b1:e0:aa:
         fb:c3:9a:0c:72:cd:32:b3:37:4b:94:5c:ab:b1:67:14:66:7b:
         6f:16:5a:77:5a:5b:10:7d:71:36:de:8b:6a:fc:7a:e9:ef:15:
         d9:98:52:5a:40:6f:a9:24:52:e7:51:bc:f7:de:f8:79:7b:15:
         b0:96:9a:e5:cc:39:1a:56:ef:d9:8e:dd:9d:ae:2e:27:9d:1e:
         c2:e2:a7:2b:56:2a:1a:dc:90:9f:8f:9e:37:18:76:bb:32:ff:
         55:9f:c5:78:22:c3:e4:f9:fa:31:94:2e:c4:e5:56:99:af:2b:
         fe:0a:77:51:bb:15:af:81:f8:00:ab:16:33:5d:8f:ad:f1:ca:
         d8:fd:26:be:81:bd:92:a2:3e:a4:d3:c3:3f:55:8c:6c:aa:44:
         6e:bd:ab:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org