Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a3a2f33342d3334203d3e20323635323934.roa
File:                     323830343a326461343a3a2f33342d3334203d3e20323635323934.roa (raw, json)
Hash identifier:          UBfv1QZgALOvI0MQIXiXeJm1iOnGR0LXrKl7pM3NDKE=
Subject key identifier:   20:E4:36:E9:C5:B9:71:08:0F:8A:A1:A1:34:B1:B3:B1:FF:85:C6:92
Certificate issuer:       /CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
Certificate serial:       55449E18DC4F1F25ECF883DC21304E07F63724E5
Authority key identifier: 08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a3a2f33342d3334203d3e20323635323934.roa
Signing time:             Wed 03 Apr 2024 18:33:13 +0000
ROA not before:           Wed 03 Apr 2024 18:28:13 +0000
ROA not after:            Wed 02 Apr 2025 18:33:13 +0000
asID:                     265294
IP address blocks:        2804:2da4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl
                          rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:44:9e:18:dc:4f:1f:25:ec:f8:83:dc:21:30:4e:07:f6:37:24:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
        Validity
            Not Before: Apr  3 18:28:13 2024 GMT
            Not After : Apr  2 18:33:13 2025 GMT
        Subject: CN=20E436E9C5B971080F8AA1A134B1B3B1FF85C692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:f7:e8:fe:00:07:db:f2:4b:66:94:8f:4b:
                    e1:be:c2:2c:db:ee:68:36:46:57:c7:c5:a1:08:39:
                    61:4a:00:a9:ae:97:df:1c:cc:6f:d5:25:1c:3f:93:
                    fa:23:92:ae:b4:c9:bf:7a:ce:fa:33:2b:74:d4:1a:
                    9b:e9:1a:0b:7b:22:b0:fa:93:7d:97:6a:03:70:43:
                    51:ec:6b:3d:cd:48:09:92:b9:87:36:21:e7:0d:5b:
                    ef:1e:77:b4:95:a2:dc:98:50:16:ad:53:72:8f:d2:
                    91:a2:97:ff:a3:2a:3e:2e:11:06:49:f4:35:4b:02:
                    ac:95:54:12:c6:f9:d8:09:7e:5c:a8:76:cb:49:72:
                    56:9b:fa:51:e0:36:09:2d:cc:4d:dc:98:76:4a:12:
                    7b:fe:ce:7f:41:46:69:4e:fb:7f:d7:5e:8f:9a:36:
                    83:66:1d:e3:a1:c0:80:13:23:56:4d:40:6c:db:da:
                    ec:8d:16:61:77:82:e9:d5:b1:a7:48:b8:48:47:1b:
                    45:8a:95:85:42:0d:0e:0d:da:f0:8f:6b:e5:cb:21:
                    d5:91:13:1a:f6:7b:4a:d4:b6:a6:45:fa:2d:14:a1:
                    8b:c8:56:11:aa:67:4e:22:a8:85:84:e4:72:97:74:
                    72:b3:bf:95:ab:4f:c5:d8:84:a6:03:67:f3:8b:cf:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E4:36:E9:C5:B9:71:08:0F:8A:A1:A1:34:B1:B3:B1:FF:85:C6:92
            X509v3 Authority Key Identifier:
                keyid:08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a3a2f33342d3334203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:ab:c2:80:9d:b5:fa:f5:aa:04:ae:31:18:e5:ee:7a:62:84:
         8b:8d:0e:62:72:b1:8a:33:68:c2:8d:13:18:ab:3c:14:07:fb:
         48:ac:c0:6d:37:a4:96:13:b0:a4:cc:e1:4c:ce:46:0e:e2:57:
         e7:d7:10:75:b3:01:8b:f6:22:cf:76:a1:34:74:fd:d5:bf:ca:
         dc:d4:74:48:26:9a:21:58:fb:f3:5a:08:dc:71:5d:cd:73:50:
         ca:a0:c9:cf:18:6a:55:5b:8f:99:74:71:22:2f:b7:45:ae:d9:
         57:f6:ea:27:e6:31:d2:a8:8a:ca:99:fe:22:14:fa:71:9c:db:
         c0:51:57:45:cd:1e:88:d1:16:ff:ae:b5:31:bb:75:6f:f2:9e:
         ab:16:de:86:35:a4:20:d7:76:bc:a1:4e:11:54:b7:11:23:1d:
         39:f5:4e:c6:94:27:91:e8:5a:04:5d:7a:69:3f:9b:61:c2:9b:
         5c:cd:94:07:cc:ff:70:2d:b6:95:98:a6:16:ff:27:52:7a:4d:
         5e:59:ab:f8:85:e4:3d:9f:03:48:79:18:4e:08:45:cf:54:dc:
         92:e7:28:2e:00:20:77:48:6d:40:71:e6:e9:ab:9f:18:64:54:
         63:12:5b:54:0c:97:28:98:18:d5:f6:66:6d:74:b2:62:a6:00:
         f4:9c:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org