Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a383030303a3a2f33342d3334203d3e20323635323636.roa
File:                     323830343a326433343a383030303a3a2f33342d3334203d3e20323635323636.roa (raw, json)
Hash identifier:          36XdOQgJUcXIMBuHx8zWOPR71t8N4G4Hb370oEUqQS8=
Subject key identifier:   F5:F4:8B:A6:E3:7F:8D:E7:F9:5D:3D:86:05:DF:87:53:34:D7:CA:C7
Certificate issuer:       /CN=40B2EE8786079947D0F70A861B591AFA74854AA7
Certificate serial:       023ACE80A3D647EBC91F3BC27BDEA7A7A887BC19
Authority key identifier: 40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a383030303a3a2f33342d3334203d3e20323635323636.roa
Signing time:             Thu 18 Apr 2024 20:24:32 +0000
ROA not before:           Thu 18 Apr 2024 20:19:32 +0000
ROA not after:            Thu 17 Apr 2025 20:24:32 +0000
asID:                     265266
IP address blocks:        2804:2d34:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl
                          rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3a:ce:80:a3:d6:47:eb:c9:1f:3b:c2:7b:de:a7:a7:a8:87:bc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B2EE8786079947D0F70A861B591AFA74854AA7
        Validity
            Not Before: Apr 18 20:19:32 2024 GMT
            Not After : Apr 17 20:24:32 2025 GMT
        Subject: CN=F5F48BA6E37F8DE7F95D3D8605DF875334D7CAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:df:fd:9e:82:67:20:da:29:eb:a1:b7:25:1b:
                    9c:80:5f:b9:cb:1b:13:d6:57:f5:71:f4:e7:4a:fb:
                    b8:59:49:33:61:55:27:38:2b:20:25:0d:5e:3b:4d:
                    2b:df:2a:0b:fa:82:0f:7d:ae:ad:95:84:e7:75:7d:
                    72:05:88:10:42:f4:fe:2d:62:14:a6:a6:82:fe:a9:
                    22:26:a7:d7:f2:29:b1:5a:d0:72:e8:10:8b:2b:60:
                    87:cf:ec:c1:48:1d:46:b5:b4:08:4b:63:c6:a3:49:
                    8d:27:18:9d:8a:4a:9c:d4:cd:cb:97:0a:5d:ee:d0:
                    75:cc:0c:5a:e9:26:fb:61:0e:5c:38:d7:68:3b:d8:
                    23:62:e7:5a:24:b8:3d:d5:92:58:d0:42:75:8e:9e:
                    6d:35:b9:0c:f0:6d:3f:97:37:2a:d7:d9:ed:4a:f3:
                    18:b4:b4:76:fe:b7:f2:0e:bd:42:27:f7:87:e6:c0:
                    df:d2:d8:cd:fe:2d:2b:53:b4:7c:2b:01:b1:74:2e:
                    cf:47:c3:03:db:ca:8b:9e:73:52:d1:5d:f3:64:05:
                    62:de:44:0f:b0:f8:32:87:10:da:8f:7e:49:ef:74:
                    57:90:cf:c0:2e:ff:5b:25:95:0e:4b:db:24:e4:c5:
                    3f:65:98:db:70:e0:e9:53:7e:7f:52:9e:99:21:ff:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:8B:A6:E3:7F:8D:E7:F9:5D:3D:86:05:DF:87:53:34:D7:CA:C7
            X509v3 Authority Key Identifier:
                keyid:40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a383030303a3a2f33342d3334203d3e20323635323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d34:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:59:52:02:a7:5a:bc:0c:33:02:6b:ae:7e:df:17:76:a6:
         44:c7:ca:f5:64:09:5d:13:12:9d:31:39:d8:06:c6:b7:e4:8e:
         60:9a:61:be:97:97:d4:b4:ef:68:85:68:f8:6d:ef:d4:4c:d2:
         c3:9f:11:78:e5:01:8a:e2:84:ab:ae:a7:20:5b:8e:20:5e:bd:
         88:f8:8b:99:29:b4:91:56:ff:6d:b4:1a:3b:fd:84:88:81:ac:
         90:8b:ae:76:5c:2c:ca:8e:46:c3:1d:7c:91:69:36:b4:0a:c1:
         e0:8e:88:e6:e5:10:00:78:b2:d4:b6:42:f9:01:bc:f9:96:cc:
         ad:78:e2:29:60:28:c1:ba:42:cb:27:e5:12:a1:99:26:a8:b5:
         2b:2c:18:4f:78:7f:fe:bb:81:ab:76:70:2c:07:98:46:1b:8e:
         d3:2f:d7:e2:3c:6f:c4:7a:2c:a7:2f:4a:f5:b1:ff:31:41:4a:
         48:00:e9:c8:8d:7d:44:b7:48:50:f0:23:7e:4c:82:7c:b3:f2:
         a7:a5:72:b8:01:a9:41:42:cc:e7:e7:de:9e:a2:3f:c2:0b:b3:
         cf:c1:d2:60:58:ee:86:c3:2d:41:6c:45:15:93:bd:72:93:45:
         48:e8:c5:d8:a3:fb:2e:7b:8e:b7:20:3c:17:76:1c:2c:d7:9d:
         2a:7f:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:36 2024 by rpki-client on console-ams.rpki-client.org