Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa
File:                     323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (raw, json)
Hash identifier:          7UlG/2LgXgAs66dtspxlNsCsulmNOPqzUOr9tnk/fyE=
Subject key identifier:   C0:C4:A1:6B:99:B3:59:C6:3C:FE:BD:BB:B7:C0:E8:E9:83:85:3B:45
Certificate issuer:       /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Certificate serial:       754A48632D7546F64DF9EB9B4CD65FE4477F01CC
Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa
Signing time:             Fri 05 Apr 2024 03:52:45 +0000
ROA not before:           Fri 05 Apr 2024 03:47:45 +0000
ROA not after:            Fri 04 Apr 2025 03:52:45 +0000
asID:                     263919
IP address blocks:        2804:27bc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
                          rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4a:48:63:2d:75:46:f6:4d:f9:eb:9b:4c:d6:5f:e4:47:7f:01:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
        Validity
            Not Before: Apr  5 03:47:45 2024 GMT
            Not After : Apr  4 03:52:45 2025 GMT
        Subject: CN=C0C4A16B99B359C63CFEBDBBB7C0E8E983853B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:b2:68:dd:27:c8:5e:21:6c:4a:3b:42:4d:75:
                    43:78:16:01:aa:fb:cb:db:74:01:b5:ea:81:5f:11:
                    7e:89:a0:92:bb:d1:0f:81:90:89:a0:4f:72:11:53:
                    fb:34:35:7e:51:91:82:56:7e:61:d7:ce:fc:1d:e1:
                    cb:e5:e4:94:f7:61:cc:38:3f:74:a1:52:de:9f:c1:
                    e5:61:a1:e3:cd:8f:3d:c1:f6:b3:ea:9b:98:ed:3e:
                    a2:a8:20:1e:79:4c:a2:70:9d:0f:8b:00:06:48:51:
                    eb:a0:b5:e7:8f:52:45:95:6b:15:d6:d1:7d:64:89:
                    4e:ba:11:ac:fe:9b:92:de:13:4c:bb:9a:14:71:8a:
                    11:e4:ff:86:0e:8a:35:ed:99:07:82:d2:a8:94:9a:
                    20:26:a1:58:3d:df:6b:b5:b3:72:93:45:ac:7a:26:
                    ff:92:5c:f9:72:ef:f6:0a:e0:13:35:b2:66:fe:b5:
                    52:67:e3:9a:e4:76:d0:7c:86:39:8f:1c:5b:ff:fd:
                    c8:bf:80:94:85:48:da:9c:f5:61:ee:74:14:9c:50:
                    40:68:78:60:8f:88:dd:04:15:90:70:87:92:f0:3d:
                    7e:30:84:1f:87:d0:a4:d3:dc:90:43:34:fa:fd:06:
                    69:23:01:c4:3a:bc:f1:ca:f5:74:c4:49:11:7d:43:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C4:A1:6B:99:B3:59:C6:3C:FE:BD:BB:B7:C0:E8:E9:83:85:3B:45
            X509v3 Authority Key Identifier:
                keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:79:f2:df:94:c0:ee:0f:19:fb:99:0f:78:f9:a9:80:47:f0:
         9f:8e:cd:2c:b6:61:ac:bf:b8:83:dd:82:ec:a7:57:3d:52:00:
         22:f2:59:eb:8d:94:8e:c5:08:e1:18:b0:1a:66:3e:0c:70:b7:
         6d:99:2c:5b:01:3e:00:a7:90:c0:bf:5d:ba:56:a5:d9:63:3b:
         1a:e2:4b:b6:22:60:b2:90:72:e5:4c:79:8a:72:01:51:81:72:
         1c:39:6d:ca:80:69:b2:46:90:78:b8:c6:49:23:a1:cf:4e:05:
         7d:4d:2f:ba:fc:d4:4a:0b:0c:d7:6d:3a:eb:ba:4a:74:dd:11:
         ce:b6:38:2c:b8:a8:4d:72:9d:c9:64:43:48:fb:ea:ce:0f:ab:
         fd:1b:cf:4d:8d:33:e0:32:2e:2d:65:3c:06:32:d7:08:ea:a5:
         8b:ac:4e:6d:b1:54:b6:22:70:94:c7:13:fc:82:be:c9:ca:9c:
         50:7b:d6:ac:b1:84:9b:8b:4b:6c:13:4e:94:50:de:64:a9:1e:
         57:a7:88:f2:1e:60:d2:b8:b3:99:28:1a:cd:00:57:b5:72:fb:
         47:09:f9:bb:49:a9:a3:cd:98:fe:f2:58:42:2f:e9:45:3b:9d:
         bf:9b:dc:3f:d6:50:1d:94:fd:2b:e7:a1:71:4a:c4:d3:a3:78:
         1d:b0:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org