Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a31303a3a2f34382d313238203d3e20323634343039.roa
File:                     323830343a316532303a31303a3a2f34382d313238203d3e20323634343039.roa (raw, json)
Hash identifier:          WU67FZqsIi/kou1je/v7XtGGQsiCuRCy4qJ8XJpQSwY=
Subject key identifier:   71:C1:BF:BD:97:44:EC:9D:BB:19:40:EA:BF:86:EC:80:C9:3F:30:82
Certificate issuer:       /CN=2AA457BEF432F83463DE6AD111F6881D89605D25
Certificate serial:       5F4BD86EFC26A21DFE68275511C78105EF250AAA
Authority key identifier: 2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a31303a3a2f34382d313238203d3e20323634343039.roa
Signing time:             Wed 03 Apr 2024 19:06:31 +0000
ROA not before:           Wed 03 Apr 2024 19:01:31 +0000
ROA not after:            Wed 02 Apr 2025 19:06:31 +0000
asID:                     264409
IP address blocks:        2804:1e20:10::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4b:d8:6e:fc:26:a2:1d:fe:68:27:55:11:c7:81:05:ef:25:0a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA457BEF432F83463DE6AD111F6881D89605D25
        Validity
            Not Before: Apr  3 19:01:31 2024 GMT
            Not After : Apr  2 19:06:31 2025 GMT
        Subject: CN=71C1BFBD9744EC9DBB1940EABF86EC80C93F3082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:b1:90:38:35:2c:17:11:2f:4a:22:c2:a0:
                    58:5a:b9:a7:7f:15:44:9e:1d:ce:ee:f2:9c:80:8a:
                    3e:13:22:43:69:93:f1:e9:dd:a2:54:89:6b:c7:16:
                    cd:07:e0:1f:fb:35:5a:2e:e8:bc:ee:5c:8e:77:7f:
                    f9:e1:82:e2:0a:9c:8a:d5:32:4b:be:55:d5:15:22:
                    37:a7:d0:5b:24:f2:ff:06:b7:ab:ea:bc:74:2f:c6:
                    07:2d:84:1a:4e:b5:4a:2a:f0:e7:a0:42:30:af:76:
                    0e:91:33:78:ea:1a:03:27:93:3a:36:31:2a:79:a7:
                    57:a4:1d:d3:14:d2:cf:3b:2a:d8:6b:fd:7b:4b:01:
                    ad:d8:b5:93:dc:99:22:bf:87:a9:b1:94:39:67:ff:
                    35:3e:ad:d6:db:20:a6:e2:40:95:b4:6c:57:78:2c:
                    16:99:fd:78:75:a6:e9:b2:63:7f:2b:be:20:45:36:
                    30:33:c0:00:07:84:49:31:80:84:40:d5:00:43:d1:
                    0c:9c:13:cc:c4:a5:c6:9f:ed:f6:57:f3:87:b0:d7:
                    ca:47:46:91:a3:db:12:a8:9b:ed:fc:bb:8a:95:34:
                    60:90:54:41:6c:88:73:98:bf:cf:50:98:fc:1c:2b:
                    c1:07:af:d3:00:a0:35:0e:a2:c4:77:6e:5f:0a:fe:
                    0d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C1:BF:BD:97:44:EC:9D:BB:19:40:EA:BF:86:EC:80:C9:3F:30:82
            X509v3 Authority Key Identifier:
                keyid:2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a31303a3a2f34382d313238203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:40:c5:1c:ca:a8:6e:5f:d2:1b:7b:e8:2e:41:27:7a:61:
         85:17:5b:8d:4e:93:ed:a9:1c:84:2a:f7:3b:7e:f1:28:7b:1a:
         59:bb:5d:cb:3d:b5:a6:2e:ad:1e:6b:3d:67:26:ff:f3:76:79:
         3e:6f:74:2e:3e:0b:4a:11:f4:37:2b:af:d3:71:20:f6:36:30:
         61:bf:f2:df:28:6a:46:46:54:f0:d7:ff:70:b0:bb:1a:8f:f6:
         a5:b7:c2:dc:57:9e:f8:2d:9c:b0:4b:5d:11:4e:ed:9a:e6:ae:
         b7:44:2b:af:9d:5e:a4:7d:93:91:97:7b:97:fc:20:87:27:be:
         9f:fd:7f:40:31:87:0a:eb:59:d6:06:90:7d:e2:63:39:e8:f5:
         22:55:fd:0f:54:1d:a4:db:1c:a3:bf:9a:c9:e6:c0:0a:14:63:
         ca:f9:09:d6:8f:7e:6a:ee:db:a4:d6:47:e5:78:21:c1:25:f5:
         d5:0b:83:ff:df:49:ba:18:25:a6:e6:5e:09:ae:c3:9d:fc:a8:
         1e:9b:30:27:26:4d:10:51:d8:f6:7e:b4:e4:3d:72:cc:c4:92:
         92:f1:01:88:f4:64:4b:40:46:5b:d6:28:c1:9f:0f:e1:fd:7b:
         76:af:63:e1:1f:45:a0:ef:9c:7b:f5:56:91:8c:d6:15:b4:6d:
         48:d6:49:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:30:47 2024 by rpki-client on console-fra.rpki-client.org