Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a633030303a3a2f33342d3334203d3e203238333630.roa
File:                     323830343a31343a633030303a3a2f33342d3334203d3e203238333630.roa (raw, json)
Hash identifier:          T8LhSEXYD0H0u2RMglinS7mdhqPlOPa0sMA5jYAPt7Y=
Subject key identifier:   5E:B2:2B:91:32:06:C6:9B:62:5E:30:B3:90:13:18:FB:4C:39:6E:34
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       192AD269D83A861BFCC75AE4895D77B19ECFBD0C
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a633030303a3a2f33342d3334203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:19 +0000
ROA not before:           Sat 06 Apr 2024 02:41:19 +0000
ROA not after:            Sat 05 Apr 2025 02:46:19 +0000
asID:                     28360
IP address blocks:        2804:14:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2a:d2:69:d8:3a:86:1b:fc:c7:5a:e4:89:5d:77:b1:9e:cf:bd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 02:41:19 2024 GMT
            Not After : Apr  5 02:46:19 2025 GMT
        Subject: CN=5EB22B913206C69B625E30B3901318FB4C396E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:94:c6:64:0b:d3:0d:c2:db:58:8b:a6:78:
                    1e:9c:5e:04:f9:d6:00:40:0a:af:1f:3d:e6:f6:7f:
                    de:4f:49:25:51:21:90:d6:c5:40:d4:1a:0c:1f:66:
                    68:55:58:9e:cf:31:48:e1:9c:4f:47:25:ee:16:9f:
                    eb:0b:da:cb:2f:d4:29:60:4b:a7:32:1f:fb:ce:64:
                    d2:04:a5:d0:ec:25:e1:fd:70:55:0a:89:0a:75:0c:
                    ba:c8:e3:4f:3e:32:25:10:48:25:dd:45:12:f4:c1:
                    f5:b9:88:18:0e:de:ea:84:e0:9c:79:cd:3b:1a:5d:
                    93:2a:a3:20:84:11:59:80:cd:37:52:6c:da:50:e3:
                    32:7c:0e:08:4e:db:75:94:66:16:60:f1:94:b9:85:
                    7a:36:a5:7a:0c:9a:1c:dc:c4:76:af:62:d1:bc:c7:
                    7f:5f:61:05:ed:fd:20:26:d2:b0:dd:4a:cf:2d:e4:
                    45:a5:76:16:46:a0:7c:bd:d9:46:58:d3:01:00:32:
                    89:a7:d8:19:17:74:dd:4c:4e:3a:1e:b1:3b:a1:87:
                    dc:87:27:ab:17:a0:1b:f1:74:ca:cd:ed:f3:85:30:
                    df:07:a6:39:d0:c2:9b:dc:b0:8d:77:e6:15:68:49:
                    10:f4:74:8f:25:53:55:0e:5f:62:db:4b:98:8e:2d:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B2:2B:91:32:06:C6:9B:62:5E:30:B3:90:13:18:FB:4C:39:6E:34
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a633030303a3a2f33342d3334203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:88:fe:a7:08:1c:27:00:ab:c7:34:b7:ac:4e:25:0a:9b:82:
         1a:fd:24:be:98:b3:13:68:d3:f5:db:24:1d:d7:0b:a4:0e:43:
         29:c8:1d:12:84:42:cb:9d:d2:52:5d:3e:b6:82:ee:17:12:f8:
         45:7d:bb:43:1e:32:8f:e0:c9:b5:a3:3b:21:b8:3c:ea:b8:1e:
         db:c3:37:69:a9:fb:86:76:d1:3e:5c:fe:71:26:4c:da:31:72:
         ad:f6:1a:c5:4d:ef:8e:b5:3b:90:0f:fb:c9:e3:81:1c:2b:74:
         58:03:31:5b:74:90:2c:67:a9:f4:e5:8e:55:23:85:e5:3e:58:
         2d:4f:bc:5e:a6:4b:49:12:5e:10:18:26:12:0c:e6:b8:f2:2e:
         5d:e4:b1:e9:aa:89:7e:9f:2c:02:7f:fe:2c:32:07:72:d2:ad:
         b8:37:ea:a7:f1:6f:50:78:50:b7:4f:60:67:5b:5b:e1:27:d1:
         ac:7e:08:8e:24:c3:cb:27:6d:40:77:5d:9d:42:0e:29:0b:d8:
         0b:fe:27:33:2d:6a:1c:08:37:9c:ea:d3:45:d3:19:88:c0:4d:
         22:29:0a:3e:38:cf:b2:79:3b:ca:15:8a:0b:1d:b5:73:01:23:
         ad:32:d4:bf:62:56:7a:d0:cc:1f:1b:f8:7b:5e:e8:7a:e5:4b:
         27:f0:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:47 2024 by rpki-client on console-fra.rpki-client.org