Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa
File:                     323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier:          /y8lDtYQAXwZFSAWGrDtQYVY7Ak16Aw9EiD34iAhS0A=
Subject key identifier:   0D:5C:DA:25:19:60:63:6F:96:ED:ED:EF:9E:0D:3A:7F:E3:7F:32:CD
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       4B3181DCF48D63AD7D806C0DC32ACD76565A3BEB
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa
Signing time:             Thu 04 Apr 2024 07:48:34 +0000
ROA not before:           Thu 04 Apr 2024 07:43:34 +0000
ROA not after:            Thu 03 Apr 2025 07:48:34 +0000
asID:                     262354
IP address blocks:        2804:828:f230::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 12:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:31:81:dc:f4:8d:63:ad:7d:80:6c:0d:c3:2a:cd:76:56:5a:3b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Apr  4 07:43:34 2024 GMT
            Not After : Apr  3 07:48:34 2025 GMT
        Subject: CN=0D5CDA251960636F96EDEDEF9E0D3A7FE37F32CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:0f:39:05:ba:37:09:39:1b:ad:06:7f:aa:
                    81:7f:cd:3f:3d:d9:7f:9d:c4:57:02:81:3c:94:cc:
                    a4:00:9e:4d:a5:70:2d:4f:f2:64:75:f3:b2:4c:03:
                    e9:1c:b7:eb:20:99:b9:3a:09:53:de:72:ef:77:52:
                    00:35:cb:9e:76:a1:b2:1a:60:63:82:11:ec:7f:4c:
                    75:b7:a6:03:b7:42:f8:4a:21:a7:68:c6:b2:e6:cb:
                    26:e8:3d:dc:8b:f9:63:c7:3e:be:b7:d8:6d:c2:51:
                    c9:b8:2d:d6:db:6a:75:37:80:5c:6a:00:e3:58:93:
                    11:16:54:b2:36:fb:56:50:ea:7c:3e:36:eb:04:d5:
                    8e:94:f3:b8:d8:e8:83:6a:cf:17:03:9e:50:de:e9:
                    19:d6:14:d8:84:fd:7b:61:53:45:67:b4:da:eb:9e:
                    10:3d:0b:81:09:c7:c1:8e:63:67:0a:d5:2f:7c:8c:
                    41:04:ab:dd:01:30:9c:49:bd:65:cb:24:3e:19:8d:
                    4f:92:0f:61:7d:7e:88:0a:a1:77:ca:16:ce:26:1c:
                    98:e5:cc:b7:33:90:c1:d2:09:d8:c9:de:48:a0:95:
                    4f:e1:a9:f7:7f:0b:6f:f5:82:31:44:f2:11:ad:44:
                    f6:04:6c:70:f8:58:43:a8:be:2e:ba:8c:4d:38:13:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:DA:25:19:60:63:6F:96:ED:ED:EF:9E:0D:3A:7F:E3:7F:32:CD
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:f230::/47

    Signature Algorithm: sha256WithRSAEncryption
         58:53:f1:9a:e3:f0:73:ae:51:30:8a:36:db:f3:1f:75:01:a7:
         73:b7:f2:18:a3:9f:33:3e:53:6e:f4:bf:e0:cf:bc:9e:1f:3b:
         fd:3a:9d:93:a7:59:5a:bf:2b:d8:31:f4:9d:e3:3c:a1:10:f6:
         b1:0f:a1:58:09:6a:a9:42:15:8c:83:b3:62:9d:ed:28:ce:8c:
         d4:1c:08:96:28:b8:37:45:53:c2:b4:ad:5a:7e:40:63:7c:46:
         59:45:71:de:93:8d:ed:ab:10:4c:09:3b:11:9d:22:e0:eb:22:
         25:51:99:1f:88:87:24:27:bd:39:c1:52:b9:8b:e4:25:f3:51:
         77:50:a3:05:6c:ed:e3:1e:1e:b8:ed:93:30:56:c6:54:f7:ce:
         39:af:83:75:9e:bb:82:a6:9e:2d:69:13:18:a5:8a:80:42:28:
         b6:d5:2c:55:2e:57:15:18:3c:61:e9:13:4d:d7:bc:1f:b2:b8:
         5d:4a:0c:bc:5e:bf:d1:3d:a2:e6:30:96:4f:1a:f1:00:e1:83:
         c2:b5:53:f0:ac:88:19:ee:f6:b3:d8:e3:93:d9:af:16:a3:27:
         43:ee:90:2a:30:01:ad:2b:52:01:ce:a8:9a:4c:b2:e4:ad:5e:
         6f:58:34:83:0b:c1:1a:2d:9f:cd:01:6b:a9:07:35:7a:48:e2:
         cc:a6:20:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 14:46:24 2024 by rpki-client on console-fra.rpki-client.org