Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa
File:                     323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa (raw, json)
Hash identifier:          S+KhMH3Ux3mx7nUcJ+CWXiG/glArUrhPNPGPbtsYwVQ=
Subject key identifier:   89:2F:40:89:B5:03:6A:1D:6F:19:A4:42:B6:BB:4F:0C:1E:A1:DE:24
Certificate issuer:       /CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
Certificate serial:       476446D4834EF7D4D80C6F134C10727DE622D9DC
Authority key identifier: 08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa
Signing time:             Mon 10 Jun 2024 14:00:29 +0000
ROA not before:           Mon 10 Jun 2024 13:55:29 +0000
ROA not after:            Mon 09 Jun 2025 14:00:29 +0000
asID:                     265294
IP address blocks:        2804:2da4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl
                          rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:64:46:d4:83:4e:f7:d4:d8:0c:6f:13:4c:10:72:7d:e6:22:d9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
        Validity
            Not Before: Jun 10 13:55:29 2024 GMT
            Not After : Jun  9 14:00:29 2025 GMT
        Subject: CN=892F4089B5036A1D6F19A442B6BB4F0C1EA1DE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:41:f2:bc:5f:0a:d3:b3:e5:b5:41:eb:a1:
                    6b:be:66:4c:5e:f9:34:d8:5f:08:07:6c:2c:20:2c:
                    96:25:ef:94:c7:14:f4:f9:c0:ec:9d:71:66:ed:86:
                    de:28:b1:cc:84:c8:16:40:7b:32:4c:05:84:21:ca:
                    d2:a4:14:53:57:16:cc:15:d7:39:a0:1d:7f:97:96:
                    3c:24:ac:b2:95:fc:91:b1:8d:46:6e:32:91:96:d2:
                    bd:d3:6f:b1:aa:9b:d1:d1:2b:6c:7b:2d:1d:9b:c8:
                    aa:bc:7c:bc:df:81:6e:cd:ad:1d:1f:af:4d:a3:b1:
                    19:b0:0f:96:1e:a9:aa:53:ac:de:e4:09:5e:a2:88:
                    aa:e6:76:75:db:91:1b:18:f5:78:87:27:62:2e:d4:
                    c5:a4:c0:05:1c:a3:a0:9e:df:d5:21:59:48:01:9a:
                    25:2a:7c:01:27:6d:5f:35:b5:88:d2:19:8b:60:fc:
                    50:3f:6c:ab:d8:88:7c:23:04:5e:08:e1:88:be:08:
                    36:71:ca:b2:67:b3:e9:96:6b:ad:bf:55:0b:c0:bc:
                    3a:f2:6a:bf:8f:63:4c:b9:2e:3a:a2:d0:9e:17:0f:
                    6f:50:1e:d3:52:ed:c9:25:d2:d5:e3:41:d5:41:aa:
                    64:be:2b:80:d9:7d:52:bc:4b:5a:39:5e:88:6d:e1:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2F:40:89:B5:03:6A:1D:6F:19:A4:42:B6:BB:4F:0C:1E:A1:DE:24
            X509v3 Authority Key Identifier:
                keyid:08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:28:17:a3:9a:38:69:21:8f:24:b3:e2:60:4a:37:90:8f:8d:
         52:00:88:43:21:92:6d:04:a1:26:5f:63:b2:b2:bc:94:31:ad:
         be:4a:a6:76:47:d8:55:db:4a:53:63:26:76:0b:af:b0:0a:7f:
         01:e0:77:e8:32:ff:c1:06:82:5c:c6:7f:0f:34:0d:bd:26:7a:
         0c:fd:3f:4a:16:77:3f:07:65:bc:6d:27:e3:8b:ea:71:c9:2b:
         ca:a3:6b:33:91:03:a6:7b:05:bd:7a:0c:c6:68:54:d2:fa:ad:
         80:3e:36:2f:63:5e:2d:7d:f5:e5:1a:28:ac:15:64:35:a1:bc:
         43:2b:ff:78:8e:a9:19:9a:2a:ab:e9:69:ab:14:34:6b:3f:26:
         b2:dc:65:81:c1:eb:da:7b:08:49:f5:5d:5d:6f:74:11:2e:9c:
         4f:7f:bb:d2:b6:dc:ca:f6:53:f1:97:9c:1c:cf:78:4a:d6:4f:
         d6:50:7e:ac:29:75:2b:3b:87:2f:11:7b:85:c7:2b:e1:1f:5b:
         80:8f:9d:51:3b:00:53:61:88:76:fb:50:73:34:af:24:11:7e:
         7a:f3:39:29:0b:80:b6:6b:ed:74:1a:03:a5:13:84:2c:ab:3e:
         89:aa:21:cd:1b:5a:e1:1c:44:4f:94:01:1c:c7:4a:31:fc:30:
         05:6b:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:51 2024 by rpki-client on console-ams.rpki-client.org