Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa
File:                     323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (raw, json)
Hash identifier:          wjpNXGblG3uuI887ikj/SSsZjLM3bzFWoVsvKGtavkA=
Subject key identifier:   4C:1B:95:79:38:40:F8:25:C0:29:BF:24:2D:20:B8:D5:B6:BA:9D:47
Certificate issuer:       /CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Certificate serial:       4EF9C43D1F5127D3D6ABDC3CD6BDF035E22AA0B3
Authority key identifier: D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     271285
IP address blocks:        2804:791c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
                          rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f9:c4:3d:1f:51:27:d3:d6:ab:dc:3c:d6:bd:f0:35:e2:2a:a0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D477F47EB674BB270E21D1DF467090789AFE23F1
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:d0:bd:3e:8a:f6:32:57:a1:fb:42:27:ee:
                    63:10:95:e1:ba:a3:25:7b:29:fe:33:1c:03:50:9f:
                    e3:de:e8:56:99:f7:6e:d8:f7:b8:fc:3d:9d:aa:70:
                    e8:f9:a9:f8:7a:56:32:21:06:5a:01:79:85:db:01:
                    7f:3e:d1:29:7d:b0:1d:28:b8:79:7d:22:13:10:ee:
                    13:b0:98:24:75:95:3d:9e:de:8b:23:a9:f2:49:08:
                    54:fd:e6:5f:f4:c2:83:f9:6f:e6:8a:e5:78:fd:cb:
                    9a:e5:f7:33:b1:8b:df:31:11:aa:15:db:c8:67:66:
                    fb:79:dd:d0:99:dd:dc:1d:61:47:22:88:d9:8d:e5:
                    39:2b:e7:7f:0f:f3:84:6b:b0:af:d3:ad:ee:65:52:
                    b2:c1:24:97:14:3b:ba:6b:8c:15:98:75:88:a9:2a:
                    58:1f:db:73:cf:2e:8b:5f:f7:48:ef:ed:ba:c0:b8:
                    d7:ad:e9:d4:df:11:f2:48:88:7f:39:71:68:e1:25:
                    f6:2e:1c:60:9b:29:e8:c7:f7:49:06:b7:0e:cc:2d:
                    78:5d:6a:67:3f:84:04:4b:25:14:f4:58:e6:b8:78:
                    18:c6:9f:81:60:12:9c:74:34:cd:17:eb:52:5f:eb:
                    db:a1:4c:39:80:d5:8d:49:ac:dc:90:a2:f2:1f:85:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1B:95:79:38:40:F8:25:C0:29:BF:24:2D:20:B8:D5:B6:BA:9D:47
            X509v3 Authority Key Identifier:
                keyid:D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:791c::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:c2:af:c6:0a:09:ca:11:ef:dc:6f:23:d2:a2:95:3f:00:bb:
         a1:8c:c1:8f:82:ba:af:55:43:6b:63:aa:76:84:7a:ae:50:c5:
         49:17:85:b9:7b:86:52:e5:0f:c3:be:0d:2e:ba:22:2f:26:e3:
         30:63:f9:b9:7a:83:13:d2:ac:df:bb:65:a6:de:99:3e:e4:45:
         49:d4:7c:50:72:ea:15:22:a9:bb:25:a5:b4:b3:9a:0e:4c:d7:
         64:6a:c9:60:59:2e:71:c4:14:fe:ab:ee:c3:1b:7c:e0:4e:87:
         f3:96:90:c1:a1:63:71:ec:7f:0b:b9:99:b8:ef:74:d2:da:d5:
         06:b9:34:52:d4:d6:1d:7b:ff:80:04:3b:12:1c:ca:cf:9d:56:
         bc:9d:64:0b:57:b4:69:ca:50:f7:16:84:7a:b0:c6:8c:20:3d:
         0c:67:03:0f:63:db:f8:45:ae:46:7b:3f:f8:0f:e6:fc:ae:d4:
         37:33:8f:56:5c:f4:28:ef:ee:84:56:b1:8d:c3:59:eb:14:15:
         57:63:25:7b:3d:8a:fc:14:6f:e9:6d:a9:51:a7:02:a2:98:cb:
         bd:a2:71:f7:f1:61:18:1d:16:38:0f:6a:ac:1a:6a:5d:27:fe:
         64:4b:95:b6:32:0c:86:67:07:64:db:aa:4e:85:82:a6:06:70:
         38:b7:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org