Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a383030303a3a2f33332d3333203d3e20323635323636.roa
File:                     323830343a326433343a383030303a3a2f33332d3333203d3e20323635323636.roa (raw, json)
Hash identifier:          jN6qweMOdj3JCRBD50Pq9Lalcy7QX8Nj/0ZFtVW6uQY=
Subject key identifier:   19:87:7C:B8:C7:CB:6E:80:AE:58:35:8E:E0:08:94:1E:C4:AA:2C:C5
Certificate issuer:       /CN=40B2EE8786079947D0F70A861B591AFA74854AA7
Certificate serial:       3ED434F91B8B426B7F24449738B69DF9AC5DEF00
Authority key identifier: 40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a383030303a3a2f33332d3333203d3e20323635323636.roa
Signing time:             Thu 18 Apr 2024 20:24:29 +0000
ROA not before:           Thu 18 Apr 2024 20:19:29 +0000
ROA not after:            Thu 17 Apr 2025 20:24:29 +0000
asID:                     265266
IP address blocks:        2804:2d34:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl
                          rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d4:34:f9:1b:8b:42:6b:7f:24:44:97:38:b6:9d:f9:ac:5d:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B2EE8786079947D0F70A861B591AFA74854AA7
        Validity
            Not Before: Apr 18 20:19:29 2024 GMT
            Not After : Apr 17 20:24:29 2025 GMT
        Subject: CN=19877CB8C7CB6E80AE58358EE008941EC4AA2CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:46:f4:8b:3c:bf:71:40:6b:98:fe:6a:74:
                    e2:80:34:18:c8:b1:49:17:51:cd:bf:70:2e:c1:ef:
                    55:e8:7e:17:89:98:d7:f7:9a:56:08:71:71:0f:2b:
                    85:67:7d:f6:21:78:80:c3:68:5f:9c:b7:ee:30:37:
                    ee:2c:bc:bf:8b:20:63:77:e9:eb:9c:fc:fa:6a:87:
                    60:bb:3e:8e:0d:9d:fb:42:90:7e:9b:d4:08:bd:44:
                    c3:91:ba:ea:76:79:6a:8b:ee:38:45:ba:75:71:d4:
                    43:c1:98:ad:32:95:c9:8e:5e:6f:86:b9:de:9e:ee:
                    4f:25:bd:e9:20:63:ee:ec:8a:e4:a4:07:c3:aa:dd:
                    bf:54:13:29:eb:3e:17:10:99:ee:46:98:d5:b0:4c:
                    d7:0f:af:dd:6a:dd:cc:43:41:cb:76:28:52:0d:db:
                    aa:97:69:76:98:7e:c5:0c:5c:af:1f:06:1c:f9:a4:
                    70:08:56:1a:c2:0e:1d:ad:38:ad:78:e2:53:18:61:
                    3b:ea:ac:34:3c:86:fc:fa:16:6c:c3:71:12:75:f8:
                    c2:ab:b7:77:cd:69:86:27:ec:95:88:6c:53:ea:28:
                    ee:20:cd:9f:e3:33:50:68:6e:44:a0:c4:79:93:d5:
                    51:89:fb:68:b1:4c:84:93:18:72:ce:1b:f0:a5:63:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:7C:B8:C7:CB:6E:80:AE:58:35:8E:E0:08:94:1E:C4:AA:2C:C5
            X509v3 Authority Key Identifier:
                keyid:40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a383030303a3a2f33332d3333203d3e20323635323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d34:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         08:88:1c:b3:24:96:cf:b6:e7:e4:dc:07:56:cf:78:ce:f6:bc:
         e4:bc:c6:2e:8e:52:bf:8b:28:96:11:aa:86:fa:6a:d1:3c:dd:
         64:23:e9:5a:d7:79:a9:22:39:2b:2d:3a:cb:63:60:72:96:eb:
         59:c6:d8:6c:ec:4d:64:e7:40:63:50:4e:08:96:67:1a:85:c9:
         be:26:38:c1:85:c9:6e:1c:0a:89:e3:ec:62:87:83:4f:5e:5b:
         66:ad:a9:72:f1:c9:b6:92:6b:74:76:8d:15:b3:8f:c7:54:99:
         12:8a:56:6d:2c:3d:63:e9:f1:95:47:0d:ed:f5:a1:cb:3f:81:
         e2:25:fa:19:98:e3:15:19:26:15:b4:ca:44:ba:58:b6:02:54:
         bd:82:f9:82:36:44:be:bc:f0:07:76:30:ea:eb:b9:4c:2c:26:
         ef:52:bd:dd:98:81:a5:f1:2c:cc:b9:7c:5a:b8:29:f6:a3:81:
         33:1c:46:7f:32:5c:ee:3e:4d:e0:ef:f7:ed:e7:e5:a1:8f:19:
         13:70:7a:fd:13:c6:30:02:61:ec:cf:d8:02:8f:81:4b:86:d6:
         95:c3:f5:f6:b9:17:6d:d2:66:1e:12:04:cb:e2:1d:71:5a:0d:
         8a:fb:c7:c4:a6:cb:12:b5:ba:a8:e3:a7:d4:1b:91:a1:ef:64:
         07:15:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:26:37 2024 by rpki-client on console-fra.rpki-client.org