Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
File:                     323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (raw, json)
Hash identifier:          0h4wY6fpELYv5WQIzURuMOUshjBbD/aE7/fdTCHdiO4=
Subject key identifier:   7B:B7:50:A4:85:58:8A:2D:00:9A:6F:A7:B4:B4:59:8E:BC:EF:53:7A
Certificate issuer:       /CN=2874D113C3B32DFA38F1DDE718E222159115D624
Certificate serial:       5B7E4B5EBF118F5FC28E2D6565420E30B4BE30B2
Authority key identifier: 28:74:D1:13:C3:B3:2D:FA:38:F1:DD:E7:18:E2:22:15:91:15:D6:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2874D113C3B32DFA38F1DDE718E222159115D624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
Signing time:             Thu 04 Apr 2024 18:19:28 +0000
ROA not before:           Thu 04 Apr 2024 18:14:28 +0000
ROA not after:            Thu 03 Apr 2025 18:19:28 +0000
asID:                     273760
IP address blocks:        2804:8bcc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/2874D113C3B32DFA38F1DDE718E222159115D624.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/2874D113C3B32DFA38F1DDE718E222159115D624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2874D113C3B32DFA38F1DDE718E222159115D624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7e:4b:5e:bf:11:8f:5f:c2:8e:2d:65:65:42:0e:30:b4:be:30:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2874D113C3B32DFA38F1DDE718E222159115D624
        Validity
            Not Before: Apr  4 18:14:28 2024 GMT
            Not After : Apr  3 18:19:28 2025 GMT
        Subject: CN=7BB750A485588A2D009A6FA7B4B4598EBCEF537A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f9:f1:a2:d8:88:ee:62:0e:95:db:ec:56:83:
                    73:02:0c:0f:ae:e1:67:96:8b:ed:c1:f7:f8:66:4b:
                    16:8c:b8:f6:9c:59:36:e5:67:25:f6:3f:f4:9e:6f:
                    3e:31:e4:32:a9:0e:b2:1e:64:fc:ec:63:4e:0a:bb:
                    f6:ee:e0:67:52:a3:1c:b0:d8:fa:e7:dc:29:b5:52:
                    ff:a1:f7:bf:d0:30:0a:22:de:04:9a:10:f0:5f:9c:
                    5a:59:4a:14:d2:02:13:89:81:84:0a:a4:56:bc:88:
                    bb:24:43:4b:ec:c9:6d:fe:85:c9:74:35:5c:6c:68:
                    7a:53:9b:ca:66:cb:a0:31:4d:47:03:63:65:fa:46:
                    dc:49:40:14:0e:e4:a8:4f:17:37:cc:32:69:c5:19:
                    83:90:ae:72:ae:6c:81:eb:e3:69:16:2a:c3:8d:5c:
                    40:26:57:57:94:a5:e8:a9:e9:7b:47:1f:46:68:9a:
                    c8:42:37:cd:6f:85:dc:01:c0:6b:9c:68:96:e5:87:
                    e9:2a:37:c4:57:0a:d9:e0:1e:d7:4b:37:be:8b:46:
                    52:df:e8:13:1f:e9:21:ac:b5:e2:dc:4b:80:f5:68:
                    a6:ec:c4:c7:f9:e8:5e:a7:b9:92:c3:ff:e5:da:cf:
                    0e:72:56:96:2e:5f:a6:33:54:0d:ed:e0:7d:b2:2b:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B7:50:A4:85:58:8A:2D:00:9A:6F:A7:B4:B4:59:8E:BC:EF:53:7A
            X509v3 Authority Key Identifier:
                keyid:28:74:D1:13:C3:B3:2D:FA:38:F1:DD:E7:18:E2:22:15:91:15:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/2874D113C3B32DFA38F1DDE718E222159115D624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2874D113C3B32DFA38F1DDE718E222159115D624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:61:37:f4:e6:45:7c:5b:f0:29:e9:14:42:e0:d6:36:30:
         4c:ab:f4:56:73:76:3e:c8:b5:e1:7a:6c:9b:41:10:88:8a:48:
         60:6d:4e:38:b9:d5:de:2f:49:72:2f:64:78:d3:5f:06:eb:23:
         d5:b4:d5:d4:3a:f5:84:ff:ec:08:c2:49:a0:48:ae:0a:20:0a:
         b0:41:a8:e5:ff:05:f8:4b:8a:1d:fa:6c:5b:07:6d:5b:64:79:
         b6:87:f4:5f:4f:19:a6:d6:e5:1d:39:4d:e0:18:2e:98:a8:31:
         64:a8:f2:c7:ce:64:3d:86:93:36:5d:1e:46:ae:72:d0:34:50:
         05:23:f5:0d:96:d5:fb:80:62:4b:f2:dc:41:3a:cb:72:92:a4:
         da:70:d6:cb:89:dc:02:64:7a:06:20:7b:7d:73:f9:7d:09:7a:
         7c:b6:28:3f:ac:ba:17:d7:3d:7a:62:29:7f:7d:de:81:b7:af:
         02:73:02:ce:08:a8:c0:67:86:dc:6a:8a:18:ee:42:6d:ca:54:
         73:b8:e1:ed:7b:57:d3:28:e0:f5:b4:e4:09:8a:96:6e:3f:48:
         e1:0e:0d:eb:62:5a:65:f1:1f:8d:0f:d0:76:0f:84:4c:f7:cb:
         11:5d:e9:b6:28:a8:d6:67:f2:f2:a6:6b:9e:d3:49:9c:82:36:
         f7:75:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:27 2024 by rpki-client on console-ams.rpki-client.org