Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/323830343a353063303a383030303a3a2f33332d3333203d3e20323638343038.roa
File:                     323830343a353063303a383030303a3a2f33332d3333203d3e20323638343038.roa (raw, json)
Hash identifier:          kIIsO2vnKopgCgWjrfA0LFBP3sZVL9h1wlcuv+DUl48=
Subject key identifier:   B9:DE:B3:96:58:F7:FA:01:8D:52:82:CC:F5:49:E3:45:E1:85:45:69
Certificate issuer:       /CN=35032C100F6D77D0004BCA943283FCAEF246335A
Certificate serial:       2F74A99ED0C82C05213C2634BCE1AE8CEB7AE1F6
Authority key identifier: 35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/323830343a353063303a383030303a3a2f33332d3333203d3e20323638343038.roa
Signing time:             Thu 04 Apr 2024 22:42:16 +0000
ROA not before:           Thu 04 Apr 2024 22:37:16 +0000
ROA not after:            Thu 03 Apr 2025 22:42:16 +0000
asID:                     268408
IP address blocks:        2804:50c0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl
                          rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:74:a9:9e:d0:c8:2c:05:21:3c:26:34:bc:e1:ae:8c:eb:7a:e1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35032C100F6D77D0004BCA943283FCAEF246335A
        Validity
            Not Before: Apr  4 22:37:16 2024 GMT
            Not After : Apr  3 22:42:16 2025 GMT
        Subject: CN=B9DEB39658F7FA018D5282CCF549E345E1854569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:02:28:dc:78:37:4f:31:86:51:ad:66:a5:
                    be:e3:df:a4:f0:4f:08:f3:9c:81:5f:26:1a:b3:61:
                    a6:52:de:c7:3d:7d:d0:eb:f2:e3:41:f8:54:60:b5:
                    8a:e2:f3:44:06:a1:4d:59:eb:a2:43:b7:35:9e:3f:
                    b8:46:e4:63:b1:68:09:c1:b2:89:f3:66:48:08:1e:
                    45:df:47:b1:1b:dc:0e:83:5b:18:59:11:31:86:af:
                    57:91:1a:07:55:bc:20:63:e7:0c:84:4c:63:a2:d3:
                    23:3e:21:8e:dd:7b:55:b6:fd:17:90:53:41:b6:42:
                    ec:19:f2:51:66:4b:66:69:38:b6:7d:8c:4d:f3:a4:
                    4d:b4:1c:dd:7e:9f:84:38:64:f7:a6:f7:9c:47:e8:
                    cc:94:5f:99:a4:ec:3a:ed:56:2f:11:71:4c:fb:de:
                    b6:e0:76:7b:3a:df:e7:ff:fd:79:bc:80:89:13:41:
                    21:4a:c1:ad:0e:47:e5:6f:ea:28:e6:d2:67:d8:e5:
                    64:3e:38:8a:eb:a3:2c:a7:0f:35:78:85:22:9b:79:
                    fb:a4:3c:f0:f1:bb:8c:1d:fa:f4:08:b8:e7:ed:64:
                    f8:bb:17:f7:84:62:ab:0f:37:81:b3:a8:08:5b:3d:
                    30:e5:90:a7:44:85:87:43:1f:d7:3a:44:e3:bb:5e:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DE:B3:96:58:F7:FA:01:8D:52:82:CC:F5:49:E3:45:E1:85:45:69
            X509v3 Authority Key Identifier:
                keyid:35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/323830343a353063303a383030303a3a2f33332d3333203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a3:35:cf:e3:f3:1a:20:8d:a1:14:2e:42:03:ad:c4:a2:11:ca:
         1e:d2:49:ec:cd:93:8e:93:d7:7f:a6:b1:74:6e:0d:e4:19:a5:
         a1:67:c8:e0:ad:c3:33:8c:cb:87:4f:3d:04:65:03:0f:62:e5:
         1a:59:35:6c:a2:a7:29:6c:64:42:22:52:99:13:e0:db:52:c9:
         3a:7b:3a:1d:68:2e:81:28:cb:44:73:25:6b:1f:f8:da:28:b4:
         85:ee:38:06:e8:ad:30:bc:d0:24:1b:e3:45:72:2e:dd:5d:c0:
         b0:48:c7:78:f7:06:6f:93:1c:d4:a2:0b:fb:cb:c4:dd:29:2d:
         b1:d2:69:ed:77:a4:b4:7a:85:ed:c2:17:1f:93:5b:e1:47:5f:
         6a:0a:dd:9a:3e:d8:84:fd:34:fc:cb:a9:76:28:cc:50:db:a7:
         ee:4b:24:de:dd:60:29:64:5b:3f:4f:d8:9c:55:31:72:43:53:
         7f:af:d0:7d:4d:c2:78:8d:73:0c:51:bb:69:9a:33:9a:40:a2:
         9b:c5:d9:af:2e:ed:e4:f8:1e:ff:24:f6:98:aa:23:2e:0f:f8:
         d6:3d:61:c0:fb:17:57:3a:27:17:55:cb:45:ab:a9:40:a3:fd:
         34:93:21:27:21:87:3f:a4:fd:bc:f7:54:8a:53:95:48:e1:f4:
         f8:c0:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:15 2024 by rpki-client on console-ams.rpki-client.org