Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/323830343a333837343a3a2f33322d3438203d3e20323636343738.roa
File:                     323830343a333837343a3a2f33322d3438203d3e20323636343738.roa (raw, json)
Hash identifier:          gIov2m1PROZj3d/Q4dDDEkohjlO7JDF5Zxs9hipEmoA=
Subject key identifier:   29:20:8A:B3:B3:B6:E2:99:47:7F:10:7B:53:3B:5B:75:54:4A:71:F4
Certificate issuer:       /CN=7DC7E1FB46ABB794375023FE9181D31FCA1A024F
Certificate serial:       2CCDE4A5B928487DE9C1FC6A9ACBFBFCF3F71C1F
Authority key identifier: 7D:C7:E1:FB:46:AB:B7:94:37:50:23:FE:91:81:D3:1F:CA:1A:02:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/323830343a333837343a3a2f33322d3438203d3e20323636343738.roa
Signing time:             Thu 04 Apr 2024 03:11:00 +0000
ROA not before:           Thu 04 Apr 2024 03:06:00 +0000
ROA not after:            Thu 03 Apr 2025 03:11:00 +0000
asID:                     266478
IP address blocks:        2804:3874::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.crl
                          rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 12:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cd:e4:a5:b9:28:48:7d:e9:c1:fc:6a:9a:cb:fb:fc:f3:f7:1c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DC7E1FB46ABB794375023FE9181D31FCA1A024F
        Validity
            Not Before: Apr  4 03:06:00 2024 GMT
            Not After : Apr  3 03:11:00 2025 GMT
        Subject: CN=29208AB3B3B6E299477F107B533B5B75544A71F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:69:d5:e6:0b:77:aa:6e:ff:22:e6:3c:c9:7e:
                    6f:4a:11:22:59:0f:5b:25:ab:cf:f6:27:8c:ed:4c:
                    9e:b6:d6:33:bb:b9:5a:4c:39:08:fc:8e:7e:b9:36:
                    40:09:02:ef:a8:97:6a:54:1e:11:9c:a8:cf:dc:71:
                    5c:d9:73:a4:63:d2:b6:6c:59:cc:88:19:3f:dd:d5:
                    67:83:77:97:cf:06:4b:0d:d4:f1:bb:05:38:c7:bf:
                    54:4f:91:06:b8:c4:8c:83:60:d3:27:60:bc:7d:e0:
                    12:96:41:a5:09:05:6e:05:9f:32:4e:b5:71:76:56:
                    c9:fd:69:1f:3c:d1:63:44:4f:3c:6d:c3:95:f0:61:
                    b3:05:1b:ca:c5:89:79:d1:a6:b9:a6:ec:71:01:01:
                    ee:d3:93:a3:77:25:47:65:2a:a4:b1:8a:54:de:4b:
                    65:1b:99:7d:1f:b1:f3:cf:8e:6e:8b:ae:30:29:88:
                    06:52:3e:96:b8:37:3a:c9:55:22:9e:64:0e:5e:bb:
                    cc:d8:f9:36:04:3e:76:d7:a6:48:9b:f0:16:93:75:
                    c7:b1:e0:6b:80:67:57:f3:29:89:46:f9:7c:a7:6a:
                    29:c9:62:6b:12:b4:fc:eb:67:d5:34:35:9b:8d:a5:
                    97:e8:ac:50:48:3c:ae:0d:51:0e:e0:03:a1:41:b1:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:20:8A:B3:B3:B6:E2:99:47:7F:10:7B:53:3B:5B:75:54:4A:71:F4
            X509v3 Authority Key Identifier:
                keyid:7D:C7:E1:FB:46:AB:B7:94:37:50:23:FE:91:81:D3:1F:CA:1A:02:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/323830343a333837343a3a2f33322d3438203d3e20323636343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3874::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:15:2c:e0:d3:2a:0a:1c:85:de:bb:ea:60:07:2f:b3:b6:d3:
         02:df:9a:ac:30:99:18:ba:14:0b:42:5f:4e:38:45:cd:dc:96:
         f4:85:1c:6a:5f:08:0c:c6:98:94:4e:06:be:eb:e6:0d:e8:f8:
         c4:b7:7d:57:f3:40:d1:77:d2:68:66:a6:7d:f0:b0:31:e4:e0:
         06:7d:f6:09:60:02:1b:59:c4:9d:39:8a:42:d2:56:f4:3f:c9:
         5c:8f:53:27:c8:b6:f7:86:15:97:c9:1e:4a:b1:3e:4d:6b:dd:
         9d:8e:43:cd:3b:ae:72:15:7b:41:e4:c0:79:3b:36:03:f6:02:
         84:43:0e:3d:58:d6:ad:32:bd:ea:6f:0a:a7:b3:27:3b:3f:94:
         1a:23:f8:5f:ac:3f:28:83:03:4f:75:c8:43:d0:27:88:64:03:
         25:4e:50:c1:0f:ed:1c:76:c8:a6:44:fb:d8:0f:ce:94:2f:45:
         16:68:17:be:b4:ec:56:8c:04:8a:4c:9d:3b:25:07:a0:1c:7b:
         49:39:ff:26:9b:ee:ac:aa:f8:b3:c9:f9:1d:6b:84:d4:44:44:
         9f:8e:fe:a6:7d:23:01:e3:84:76:ba:68:e0:74:39:89:cb:a2:
         dd:b8:01:c1:a4:af:b9:49:f3:e4:5a:4c:6e:d1:94:06:5c:c7:
         4d:cd:0e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:08 2024 by rpki-client on console-fra.rpki-client.org