Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa
File:                     323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa (raw, json)
Hash identifier:          7IvZ0YQNvedH/xVBciIqvHQMON21w+9NsOnuO/0rCMo=
Subject key identifier:   B8:26:EA:B0:BE:57:F3:88:02:B9:8B:7C:AD:16:23:1C:78:C7:7E:D3
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       254A43C320B4E43F452400643DC28F3BE424074A
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa
Signing time:             Wed 29 May 2024 12:21:18 +0000
ROA not before:           Wed 29 May 2024 12:16:18 +0000
ROA not after:            Wed 28 May 2025 12:21:18 +0000
asID:                     52540
IP address blocks:        2804:e10:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4a:43:c3:20:b4:e4:3f:45:24:00:64:3d:c2:8f:3b:e4:24:07:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: May 29 12:16:18 2024 GMT
            Not After : May 28 12:21:18 2025 GMT
        Subject: CN=B826EAB0BE57F38802B98B7CAD16231C78C77ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:0d:ec:02:44:b2:fe:80:17:d7:78:e6:02:
                    a3:79:58:8f:f7:e5:87:d0:a4:47:a4:60:4e:20:3d:
                    b3:4d:8d:0a:20:f9:fc:bf:83:b1:3d:dc:2d:58:9c:
                    01:aa:0a:e0:d1:ca:65:69:ee:4a:64:79:56:6d:48:
                    c0:91:e6:75:4f:c8:5b:7b:c4:31:43:ee:92:96:e0:
                    79:1a:0c:1d:93:8a:4c:b1:70:e6:ba:e6:7b:84:78:
                    48:51:4e:dd:14:d0:07:de:5a:08:1d:f8:69:60:13:
                    13:67:f8:d8:b3:05:16:7d:0b:57:21:e6:36:19:ca:
                    6f:6a:bd:4e:0c:51:84:3a:d2:ca:bb:f1:bb:51:3d:
                    d1:e8:cf:34:67:5c:de:7c:d4:8f:2f:93:40:53:d7:
                    99:9c:95:a4:b4:e8:51:a3:96:cf:00:c5:70:41:9f:
                    f3:00:bd:34:45:c7:77:c6:f8:87:ae:33:2c:a1:c0:
                    d1:3b:fd:2c:28:66:6e:3a:f4:41:54:bc:fe:45:a2:
                    28:92:6e:81:d0:30:f9:7f:a4:00:3f:30:3d:5b:e2:
                    41:40:e2:24:67:e9:4b:6a:0d:2b:32:84:26:5a:c0:
                    e7:2e:2c:5a:57:e7:25:57:8f:d5:63:8d:e9:80:c1:
                    5a:6c:71:b2:4d:31:be:fe:67:9a:6f:15:6b:86:f9:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:EA:B0:BE:57:F3:88:02:B9:8B:7C:AD:16:23:1C:78:C7:7E:D3
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:e2:82:e9:b7:a9:33:a8:19:fb:30:d4:40:5f:3e:d3:60:dd:
         6a:dc:ab:ae:aa:05:09:54:e8:81:bb:05:e2:4a:7d:65:3f:c5:
         36:5a:be:46:2d:c4:13:cc:4a:db:a3:d6:3b:f2:a9:bd:75:d4:
         49:89:65:e9:60:72:bc:72:08:bb:61:74:a9:11:f9:38:c2:69:
         7a:21:3c:70:ac:44:13:af:a5:b8:39:99:96:28:40:99:02:59:
         56:c7:5c:10:02:19:a8:f6:3b:de:57:65:8e:60:43:de:45:64:
         d0:5f:2a:1f:d3:01:8b:99:20:53:30:60:64:cf:32:e2:46:95:
         84:d9:f7:56:31:63:65:89:02:73:14:a2:8e:75:ca:c4:a2:3d:
         4b:32:23:4a:5f:8e:32:46:5d:7a:42:93:ba:34:9d:50:b4:62:
         01:6b:9c:86:fd:79:09:91:c3:c3:67:40:da:91:8d:d9:4a:dc:
         15:6e:5c:69:d2:3b:50:ca:d9:ce:a2:32:79:75:b2:63:2d:8c:
         5f:68:73:2e:b6:07:4f:7c:a4:d1:ee:a4:d0:76:a5:b8:f6:c0:
         10:1a:ae:32:01:ce:92:dd:13:ce:f9:11:bc:cb:52:23:03:ad:
         ff:78:8d:e5:f6:e5:9f:25:24:ba:13:3b:36:20:a7:db:c7:c2:
         a2:2b:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:29 2024 by rpki-client on console-fra.rpki-client.org