Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/323830343a336566383a3a2f33322d3430203d3e20323636363332.roa
File:                     323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (raw, json)
Hash identifier:          CWf0itcwQp5MDOcgJEPVv+R049wpYxZtFROAmcWQ0ag=
Subject key identifier:   CB:2B:A5:63:CE:DF:89:1D:04:3F:EC:50:F7:15:FA:17:5A:E4:8F:F1
Certificate issuer:       /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
Certificate serial:       5B6BF0BDA2B32814646A183C9C0586E145171630
Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/323830343a336566383a3a2f33322d3430203d3e20323636363332.roa
Signing time:             Thu 04 Apr 2024 02:21:43 +0000
ROA not before:           Thu 04 Apr 2024 02:16:43 +0000
ROA not after:            Thu 03 Apr 2025 02:21:43 +0000
asID:                     266632
IP address blocks:        2804:3ef8::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl
                          rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6b:f0:bd:a2:b3:28:14:64:6a:18:3c:9c:05:86:e1:45:17:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
        Validity
            Not Before: Apr  4 02:16:43 2024 GMT
            Not After : Apr  3 02:21:43 2025 GMT
        Subject: CN=CB2BA563CEDF891D043FEC50F715FA175AE48FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:b6:07:cd:f6:a7:cb:74:8e:8f:4b:2d:6e:
                    58:e0:95:23:b5:56:5e:40:1b:db:3a:09:45:55:67:
                    b7:e0:a5:17:63:d8:e9:d5:47:1f:72:93:b3:37:4a:
                    45:75:82:83:6e:4a:1a:24:ed:a3:cb:44:28:9a:9c:
                    cc:b9:92:85:d2:a5:84:39:69:0f:32:4f:7b:80:4d:
                    1f:b9:9e:9e:c6:05:a4:d4:39:d4:1c:35:40:e3:04:
                    a6:eb:04:b0:98:a8:3c:a0:99:5c:f5:46:1e:5c:be:
                    37:1e:41:b8:0d:f6:70:9a:1e:5d:7b:ca:fd:c1:3f:
                    f0:f6:d6:62:5f:67:7e:de:c2:b6:a0:f0:40:b9:20:
                    b5:2f:88:7d:f7:9b:91:f0:b7:4b:17:68:00:e7:2c:
                    7d:0a:a2:78:79:43:94:1d:31:06:6f:c7:0f:44:f5:
                    35:d1:8f:b0:c8:6c:c2:21:89:c6:ce:50:fd:cf:59:
                    b8:4d:07:ee:04:7e:c9:c0:53:41:44:bb:e2:43:d0:
                    45:8c:5d:66:57:d9:b0:d8:70:52:20:36:8e:2b:e9:
                    7e:15:66:7b:8f:69:fe:8f:f4:1f:b4:70:6f:e2:e1:
                    2f:57:a4:5f:57:2b:5f:8c:d5:ff:06:22:1d:e5:57:
                    71:9c:70:21:d3:14:2a:d4:50:82:6f:41:9c:27:92:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2B:A5:63:CE:DF:89:1D:04:3F:EC:50:F7:15:FA:17:5A:E4:8F:F1
            X509v3 Authority Key Identifier:
                keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/323830343a336566383a3a2f33322d3430203d3e20323636363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:6e:65:f2:1f:e4:85:ce:28:a0:8c:71:56:7c:ca:b4:72:42:
         a3:42:78:63:24:1f:a2:cc:7a:20:e6:9c:f6:a3:dd:39:1d:23:
         8f:00:73:21:3a:26:e6:a5:02:b1:51:2f:2e:bf:ad:8f:d8:96:
         dd:f9:ba:da:0d:7f:80:63:83:f4:e8:60:c1:24:6a:4d:d5:ff:
         99:6d:c5:77:28:a2:a9:28:3c:55:fc:a7:94:93:d0:04:47:36:
         2f:52:2f:37:a3:c1:57:c0:30:7d:1c:4b:df:44:30:43:e7:1b:
         99:e2:18:68:bc:fd:7d:90:b6:a9:cd:fa:dc:01:61:28:35:06:
         d2:6d:7d:68:43:62:12:de:87:19:cb:26:48:0e:81:98:88:35:
         3d:13:41:05:07:7c:17:00:a1:70:a5:da:57:6a:5a:10:a3:27:
         35:8a:5b:8b:1f:86:57:0a:a8:5b:29:66:7a:2c:07:b5:da:b4:
         f4:4e:61:c9:cb:2c:2e:f3:97:f9:3c:5a:70:e3:33:77:ed:b2:
         0e:1b:27:27:f7:9a:20:c7:2d:b7:99:52:97:9b:6a:db:52:3c:
         d0:17:fa:7e:83:44:14:4c:88:14:91:97:e5:43:0d:36:bf:7a:
         d0:13:ae:2d:24:1e:55:c3:50:7b:f3:5e:1a:f1:6f:44:9a:1e:
         9b:55:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org