Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a3134393a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a3134393a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          ce5B+9ipLGMjv5xrhrjheKpn8+hddz0wTYuaFcz05BE=
Subject key identifier:   B4:9D:A0:5C:5D:A9:1E:78:F6:8A:C1:5C:32:03:B0:A7:6A:27:D3:C2
Certificate issuer:       /CN=2AA457BEF432F83463DE6AD111F6881D89605D25
Certificate serial:       3173AD8F941B3F26F6931F9C9AEBA50A48FA1192
Authority key identifier: 2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a3134393a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Wed 03 Apr 2024 19:06:33 +0000
ROA not before:           Wed 03 Apr 2024 19:01:33 +0000
ROA not after:            Wed 02 Apr 2025 19:06:33 +0000
asID:                     264409
IP address blocks:        2804:1e20:149::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:ad:8f:94:1b:3f:26:f6:93:1f:9c:9a:eb:a5:0a:48:fa:11:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA457BEF432F83463DE6AD111F6881D89605D25
        Validity
            Not Before: Apr  3 19:01:33 2024 GMT
            Not After : Apr  2 19:06:33 2025 GMT
        Subject: CN=B49DA05C5DA91E78F68AC15C3203B0A76A27D3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:08:31:18:2d:14:d8:ec:e6:ed:53:1a:66:
                    eb:77:b7:76:38:9a:b0:1b:ff:4e:95:91:3e:53:44:
                    1a:12:7a:0a:ab:59:fa:7c:36:c3:4f:6d:d0:d1:89:
                    50:45:c4:6e:d5:3d:65:28:cd:b9:49:29:c9:76:4f:
                    14:26:cc:a6:19:1e:7f:10:34:94:bd:e9:2f:b5:a1:
                    e2:2d:00:59:6f:20:b0:8b:1d:1e:f1:f0:f7:e2:be:
                    10:53:ba:17:07:05:e0:e4:9d:4d:01:3e:18:f3:10:
                    80:0a:be:90:cb:d9:00:d8:81:fa:7c:61:7a:08:50:
                    eb:ed:aa:3c:b8:34:ab:3b:c6:aa:d1:d8:fa:f5:37:
                    c0:16:99:74:3a:b8:56:17:82:22:0f:0f:02:d4:b5:
                    3a:a8:3f:e6:df:0f:a4:d0:4e:f4:2e:46:f3:15:55:
                    b5:00:59:79:d2:f0:b2:e2:95:d3:7f:f8:50:9c:2a:
                    72:0a:4b:60:2b:c5:bf:23:df:42:e5:a9:07:4e:16:
                    a1:f8:c5:fa:a0:8b:c5:5c:52:fb:1f:b3:d3:00:50:
                    ba:11:58:90:a7:49:77:c0:c8:69:86:c1:b5:d5:46:
                    16:b3:a5:53:dd:0b:fa:5e:8b:ce:ae:2b:bf:2e:20:
                    b2:bd:96:c8:17:6e:b6:9e:99:68:a9:08:06:ac:11:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9D:A0:5C:5D:A9:1E:78:F6:8A:C1:5C:32:03:B0:A7:6A:27:D3:C2
            X509v3 Authority Key Identifier:
                keyid:2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a3134393a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:149::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:8b:e1:9b:fb:38:e6:d2:fd:21:2f:3f:2b:ae:08:fe:f7:
         38:36:80:c7:50:c5:de:f6:40:5d:eb:31:42:22:9c:a6:5c:f0:
         58:be:6b:5f:93:6a:c6:8f:76:d0:87:22:b2:81:0a:d6:62:52:
         54:3c:21:2a:35:05:41:dd:28:fb:16:ad:41:dd:63:1e:f8:49:
         a8:75:a9:1b:b3:53:ce:af:b1:2a:1e:55:87:0b:04:bb:71:27:
         9e:1c:b3:c3:44:bb:f5:f7:99:44:c4:68:53:8b:af:e4:18:74:
         ed:ba:5c:cf:43:31:8a:61:af:0f:3d:68:56:14:30:df:e2:03:
         36:fa:a3:24:6c:67:8a:2a:84:d5:cc:93:f4:9e:a3:e2:fa:3c:
         55:f9:ea:36:0b:b4:cc:39:b0:9a:59:25:d7:08:a2:af:7d:d2:
         cb:f1:48:0c:a5:17:e8:e6:4f:34:fd:f6:c0:2e:a0:bb:17:cf:
         8e:23:37:d8:e1:90:91:fc:ce:3f:7f:d7:9f:34:4b:1c:19:af:
         63:de:86:c6:d1:0b:7c:ca:f8:23:88:30:3e:d7:dc:62:3e:d5:
         7e:05:4b:db:46:c3:66:d0:8b:62:d0:46:43:2f:19:28:af:a6:
         15:98:0f:8b:28:4a:dd:27:d8:af:34:9f:74:ca:59:ca:d2:7d:
         5a:7d:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:43:16 2024 by rpki-client on console-fra.rpki-client.org