Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33342d3334203d3e20323733363631.roa
File:                     323830343a386135303a3a2f33342d3334203d3e20323733363631.roa (raw, json)
Hash identifier:          gzoJ67Z+CCKTMfm9CzqnaFWBlm86R+QOojRZnI/VaM4=
Subject key identifier:   BB:A8:26:E5:A8:91:46:84:1D:BF:93:DE:64:1F:38:FD:DB:12:7A:61
Certificate issuer:       /CN=26792F1362DED6EFA867836B5CFDA1B01F5205A2
Certificate serial:       33475C1CFFE9811E66BC7CE12C6DDD4837925919
Authority key identifier: 26:79:2F:13:62:DE:D6:EF:A8:67:83:6B:5C:FD:A1:B0:1F:52:05:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33342d3334203d3e20323733363631.roa
Signing time:             Fri 05 Jul 2024 16:59:38 +0000
ROA not before:           Fri 05 Jul 2024 16:54:38 +0000
ROA not after:            Fri 04 Jul 2025 16:59:38 +0000
asID:                     273661
IP address blocks:        2804:8a50::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.crl
                          rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:47:5c:1c:ff:e9:81:1e:66:bc:7c:e1:2c:6d:dd:48:37:92:59:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26792F1362DED6EFA867836B5CFDA1B01F5205A2
        Validity
            Not Before: Jul  5 16:54:38 2024 GMT
            Not After : Jul  4 16:59:38 2025 GMT
        Subject: CN=BBA826E5A89146841DBF93DE641F38FDDB127A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:23:45:ec:78:29:d3:35:b7:4e:c4:f8:9b:
                    a3:7a:75:fd:f1:e9:d4:f9:c3:b9:e3:74:40:0f:f9:
                    0f:9d:78:b1:5a:d5:d5:b6:92:60:08:8c:85:2f:3e:
                    34:ed:ed:a1:84:09:78:05:ec:63:93:5c:87:32:b4:
                    c5:54:d4:31:f5:a6:f1:58:80:3a:64:a6:08:1d:2f:
                    3e:d4:c2:52:33:36:16:93:a0:31:b6:16:cf:50:01:
                    22:48:4e:fd:68:aa:5c:55:3b:1a:e1:f2:52:49:68:
                    1d:96:21:03:ff:7f:5d:12:c6:51:c3:53:80:bb:ab:
                    c5:0b:2b:a9:87:6a:81:09:5f:c5:a7:fa:2b:80:3f:
                    ed:1c:dc:6e:aa:b9:c3:4f:a7:1c:b4:4c:ca:95:86:
                    94:df:e9:6c:b2:d6:ad:df:1a:cb:2c:0b:c9:de:ff:
                    bf:22:a3:93:96:a6:77:ce:a5:d9:c1:b9:a7:6b:c5:
                    2a:a2:6d:4a:81:b3:21:f6:0a:88:b6:74:7b:b1:91:
                    46:db:95:95:b8:34:7b:1b:aa:f5:b6:2a:fa:5a:d6:
                    6a:8b:c3:e7:df:a1:b2:07:60:e9:ed:78:ca:28:7b:
                    e7:c9:c3:1f:ad:bf:34:5e:0e:1e:32:5a:55:35:91:
                    db:11:e3:85:9d:f7:41:f3:5d:dd:a6:78:92:9d:3c:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A8:26:E5:A8:91:46:84:1D:BF:93:DE:64:1F:38:FD:DB:12:7A:61
            X509v3 Authority Key Identifier:
                keyid:26:79:2F:13:62:DE:D6:EF:A8:67:83:6B:5C:FD:A1:B0:1F:52:05:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33342d3334203d3e20323733363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a50::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:aa:0b:7b:1a:6d:e8:3d:a7:30:07:07:88:19:34:02:7b:
         39:69:3b:f6:b7:0c:37:df:42:fc:39:ba:66:25:cd:34:e3:27:
         9a:17:0a:81:3d:ce:5f:6b:de:33:34:b6:11:14:39:0c:39:35:
         73:43:47:e2:6a:ff:0f:04:30:cd:af:29:5c:b2:6d:69:a7:50:
         0b:b9:91:c7:d2:2a:3a:15:2c:45:76:c1:be:de:76:28:f9:74:
         9e:1a:ed:a8:69:87:21:32:9d:23:39:12:72:ae:9f:37:2e:eb:
         91:00:35:97:29:ba:51:3a:3a:4c:43:99:4a:2d:1c:bc:15:0f:
         de:a1:d9:e6:44:14:fc:cc:a4:53:2b:7d:25:b5:a7:66:1e:17:
         f2:e6:83:bf:f8:0e:0f:80:99:d4:96:f2:a2:99:5d:ac:78:01:
         53:69:ce:c6:c1:85:c3:52:a6:b6:5b:45:22:a8:01:1f:f7:c8:
         aa:b1:9e:af:49:99:f8:51:8c:f5:f1:d2:c9:18:c2:37:e7:40:
         13:ef:63:43:2c:6c:6f:11:43:41:2f:f6:66:51:12:09:29:a6:
         0f:c2:bf:45:7f:2f:7b:9a:1f:90:61:57:d3:6e:c4:ad:e0:e7:
         47:45:ab:fe:b1:89:a9:53:8c:0c:78:a0:f5:b8:6f:76:71:dd:
         03:09:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org