Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33322d313238203d3e20323730383635.roa
File:                     323830343a373261303a3a2f33322d313238203d3e20323730383635.roa (raw, json)
Hash identifier:          POKSPEYfquYfZz2Vq1sCtzN0mc7y/D1M6O+K7Te8xSM=
Subject key identifier:   FC:93:7C:3E:97:D7:4D:76:AF:29:AB:A3:E4:86:DC:E7:FE:C5:6F:06
Certificate issuer:       /CN=590BED1D9DB8B5BDD35016684EF2758BB291A716
Certificate serial:       071DBFE3792E4EE1F41B5EA5339DCA4443FAD751
Authority key identifier: 59:0B:ED:1D:9D:B8:B5:BD:D3:50:16:68:4E:F2:75:8B:B2:91:A7:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/590BED1D9DB8B5BDD35016684EF2758BB291A716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33322d313238203d3e20323730383635.roa
Signing time:             Tue 30 Jul 2024 03:04:14 +0000
ROA not before:           Tue 30 Jul 2024 02:59:14 +0000
ROA not after:            Tue 29 Jul 2025 03:04:14 +0000
asID:                     270865
IP address blocks:        2804:72a0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/590BED1D9DB8B5BDD35016684EF2758BB291A716.crl
                          rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/590BED1D9DB8B5BDD35016684EF2758BB291A716.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/590BED1D9DB8B5BDD35016684EF2758BB291A716.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1d:bf:e3:79:2e:4e:e1:f4:1b:5e:a5:33:9d:ca:44:43:fa:d7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590BED1D9DB8B5BDD35016684EF2758BB291A716
        Validity
            Not Before: Jul 30 02:59:14 2024 GMT
            Not After : Jul 29 03:04:14 2025 GMT
        Subject: CN=FC937C3E97D74D76AF29ABA3E486DCE7FEC56F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:5b:39:c9:22:8b:85:37:06:ac:25:5b:55:
                    3b:ae:8f:e6:35:f4:a5:51:2e:a5:fd:bd:c9:5e:88:
                    89:21:83:e0:60:dc:63:a1:6c:61:51:04:ab:d8:48:
                    f7:46:a1:31:4c:c7:48:30:04:e1:7c:1b:8f:a0:a9:
                    cc:e8:7a:4d:dc:89:dd:1e:82:30:86:44:b7:8c:98:
                    13:8d:02:9b:63:f0:24:b7:39:15:6c:29:4b:c4:5e:
                    fd:d9:19:db:56:b8:3e:27:8a:5a:2d:c3:14:16:90:
                    c5:24:04:af:aa:09:90:61:b0:f9:33:30:a0:31:ed:
                    87:5b:69:69:50:43:4e:96:e7:36:5f:0e:71:81:ca:
                    a6:bb:26:fb:3f:91:27:b6:5e:c1:9a:bb:23:98:fe:
                    7a:02:2c:7a:85:30:71:01:e9:3b:65:1f:20:bc:42:
                    18:67:2f:fa:d9:c2:fa:7b:28:69:03:90:3b:31:0f:
                    16:ca:61:ba:d6:cc:c3:09:35:5b:66:93:fd:b0:b9:
                    b1:ef:65:3d:4c:28:82:5e:1c:02:d3:71:24:ca:e2:
                    83:27:86:bd:eb:73:d8:31:d7:66:8b:57:fd:89:06:
                    14:4f:57:a3:df:df:a2:e1:9a:49:b8:9f:63:50:c4:
                    95:bd:ad:79:84:96:97:9b:68:be:d7:f1:05:ee:e4:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:93:7C:3E:97:D7:4D:76:AF:29:AB:A3:E4:86:DC:E7:FE:C5:6F:06
            X509v3 Authority Key Identifier:
                keyid:59:0B:ED:1D:9D:B8:B5:BD:D3:50:16:68:4E:F2:75:8B:B2:91:A7:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/590BED1D9DB8B5BDD35016684EF2758BB291A716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/590BED1D9DB8B5BDD35016684EF2758BB291A716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33322d313238203d3e20323730383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:8b:27:71:2a:ac:68:17:13:25:a2:ab:1c:b7:a2:f1:e6:
         f2:ee:ad:2b:f3:5a:bf:a8:2e:d1:e0:ee:07:a7:7f:be:36:49:
         26:d4:0b:65:b6:84:e3:5b:eb:2a:b4:77:3a:4a:98:f1:e1:b1:
         08:dc:71:7e:59:85:c2:1b:27:77:a7:b0:46:d2:d9:c0:e8:e1:
         d5:ef:03:f6:4d:bf:0e:ec:e1:59:66:8a:c9:3e:c5:62:75:2b:
         92:86:17:50:b2:49:ee:7a:f3:b8:92:fc:e3:61:dc:0b:60:86:
         aa:51:f3:5d:a7:1f:4a:80:d3:5e:08:82:3b:2f:80:40:90:61:
         26:57:5a:d5:e9:ba:bc:fb:be:6a:a5:4e:26:9c:09:45:6c:c0:
         78:cd:ca:da:cb:cd:ef:33:db:c8:54:cd:b5:70:2c:18:a7:f3:
         83:de:e7:7c:9d:9b:42:27:0e:81:2e:af:a2:3a:c2:6d:5e:75:
         f2:3a:a8:c7:22:44:e4:d2:a4:1b:04:a9:ee:a8:88:78:80:30:
         ce:09:88:86:eb:f0:c7:9a:fb:0b:d5:b6:17:e9:0e:57:87:55:
         5d:a6:70:07:d7:e2:15:ee:ff:19:16:8a:1a:55:db:7f:d3:89:
         6e:59:cf:38:96:b2:2c:bf:cb:0a:33:f4:f7:02:fd:c4:2e:2d:
         18:4c:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:53 2024 by rpki-client on console-fra.rpki-client.org