Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a3a2f33322d3332203d3e20323732323533.roa
File:                     323830343a383435303a3a2f33322d3332203d3e20323732323533.roa (raw, json)
Hash identifier:          mzfcbOkGIRohSrELpYX8OuYCBWwbWsIS4sbju8+pTds=
Subject key identifier:   CF:90:F5:25:0B:5E:79:0B:08:82:CB:41:11:17:FD:4A:28:6F:FC:3C
Certificate issuer:       /CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4
Certificate serial:       0FDABDD1DD622B4759BB4FF9A922C081FC15D81B
Authority key identifier: 65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a3a2f33322d3332203d3e20323732323533.roa
Signing time:             Thu 04 Jul 2024 13:50:45 +0000
ROA not before:           Thu 04 Jul 2024 13:45:45 +0000
ROA not after:            Thu 03 Jul 2025 13:50:45 +0000
asID:                     272253
IP address blocks:        2804:8450::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl
                          rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:da:bd:d1:dd:62:2b:47:59:bb:4f:f9:a9:22:c0:81:fc:15:d8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4
        Validity
            Not Before: Jul  4 13:45:45 2024 GMT
            Not After : Jul  3 13:50:45 2025 GMT
        Subject: CN=CF90F5250B5E790B0882CB411117FD4A286FFC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:c8:b6:da:39:77:f0:b1:bf:48:b8:64:68:
                    cd:60:d5:61:48:e0:c0:e9:60:d6:e9:d2:a1:08:d6:
                    81:e8:28:f9:81:d4:86:07:60:7d:48:99:01:e5:c2:
                    af:fe:cd:da:55:67:8c:02:3e:40:bd:ed:88:dd:5a:
                    ce:1a:2d:d1:d0:80:96:96:71:09:50:3e:11:c9:48:
                    83:37:38:ef:38:fa:08:22:76:5a:bf:d0:a2:4e:b2:
                    76:20:33:3f:be:99:47:9b:0d:53:55:81:fe:1d:ba:
                    e2:c3:0f:b6:76:6d:31:fb:6c:21:5c:4d:e1:47:f2:
                    3f:9c:a2:cd:7d:b2:07:56:56:1a:c7:5a:0f:99:66:
                    75:99:b3:86:6e:27:13:8a:7c:6b:27:bc:6e:0b:f7:
                    53:84:b0:11:4f:45:a1:f7:10:17:e4:f3:81:bf:cb:
                    b4:6b:e3:38:22:83:69:7a:bb:0e:0c:50:ad:bc:54:
                    72:c3:77:39:71:b0:23:fc:11:e4:19:e5:a1:64:11:
                    50:cd:3f:1a:10:ea:23:33:6d:c2:db:e4:8d:62:81:
                    f8:ff:cc:54:99:53:20:e5:1e:ef:f4:e2:c1:91:7c:
                    73:20:f1:04:50:56:b5:27:55:4e:ef:8e:8b:1a:16:
                    3b:b5:6d:53:67:0c:28:11:0f:30:54:bb:d5:95:de:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:90:F5:25:0B:5E:79:0B:08:82:CB:41:11:17:FD:4A:28:6F:FC:3C
            X509v3 Authority Key Identifier:
                keyid:65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a3a2f33322d3332203d3e20323732323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8450::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:df:fb:2d:d7:d0:1e:53:57:5e:b1:22:a5:0f:30:a2:60:ac:
         2b:36:3b:94:34:15:94:d6:c7:ae:45:df:6e:5d:4b:c4:9d:cc:
         c6:5f:2e:50:3d:00:05:27:c0:04:fd:22:e1:7d:a0:29:ca:4a:
         13:46:c0:8e:fd:6f:3b:23:ca:81:71:19:65:63:b0:53:a7:7a:
         a2:23:e0:a1:38:38:a1:3d:a0:e3:f0:11:3a:75:32:5b:38:72:
         2b:fc:60:d6:e2:dc:37:13:1d:3d:da:30:ee:3b:17:66:a6:10:
         93:fd:17:40:38:da:fb:b1:f4:62:be:b8:fa:b6:9b:b2:e3:1e:
         b6:a3:ef:ed:21:6f:e3:cf:1a:df:bc:12:b3:27:c8:44:15:32:
         65:59:f1:ca:fb:65:ee:db:a6:78:c4:26:78:2b:01:93:60:8e:
         63:b1:a3:be:9f:7e:64:b4:d3:8d:7d:07:07:75:b2:b7:60:5a:
         d1:d1:d9:d1:de:80:d9:01:c0:92:b9:67:1e:b9:cf:64:70:2e:
         0a:10:9c:66:18:bc:3d:66:c9:f5:dc:15:d8:8a:2c:b3:0f:21:
         98:63:e1:9a:48:f2:ba:76:5d:e5:d6:62:76:e5:e4:ba:ad:56:
         46:2e:25:79:f1:fe:67:da:f2:6f:1c:55:b5:b6:3f:b9:79:c7:
         46:f6:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org