Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323030313a3a2f34382d3438203d3e203238333036.roa
File:                     323830343a33343a323030313a3a2f34382d3438203d3e203238333036.roa (raw, json)
Hash identifier:          W6TaXHOXTC63ijdQ3UxYnG6qdrqALka5pVYl/B2Qtao=
Subject key identifier:   BE:56:C3:D0:F4:AB:28:62:8A:8C:94:60:FF:92:7E:19:0B:A3:98:40
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       5FED5594854071D51A69AF31EAAF7DCE42CE0CB9
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323030313a3a2f34382d3438203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:21 +0000
ROA not before:           Tue 25 Jun 2024 15:16:21 +0000
ROA not after:            Tue 24 Jun 2025 15:21:21 +0000
asID:                     28306
IP address blocks:        2804:34:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ed:55:94:85:40:71:d5:1a:69:af:31:ea:af:7d:ce:42:ce:0c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:21 2024 GMT
            Not After : Jun 24 15:21:21 2025 GMT
        Subject: CN=BE56C3D0F4AB28628A8C9460FF927E190BA39840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:db:b0:30:2a:40:ab:43:78:a3:42:68:73:e3:
                    71:54:76:01:1a:0f:6c:39:f4:24:e5:05:eb:de:ad:
                    be:cd:58:be:cb:0c:26:9d:3a:ff:9c:f5:20:39:2d:
                    fd:30:92:1b:6f:46:85:1a:8a:b0:3e:bd:a3:7a:ae:
                    42:00:25:40:e7:6e:28:68:68:27:2f:6c:c2:07:91:
                    68:2e:8b:b8:81:e4:f9:ac:f9:b2:8f:40:ad:dc:9f:
                    c7:34:54:80:76:8a:50:2f:0b:3c:37:49:a1:f5:d8:
                    ec:4c:54:0d:21:a4:48:e5:3c:e8:1f:f4:94:d5:bb:
                    67:ce:72:50:99:d7:62:1a:e7:19:fb:0c:19:4e:f5:
                    e4:e5:9c:d4:a9:2d:0c:f3:e4:9b:46:93:5b:7c:11:
                    e1:2e:94:e7:93:40:5a:73:84:b4:a3:44:89:e3:bc:
                    0a:d3:a6:b0:15:e7:56:ee:80:d6:8c:9e:88:8e:a4:
                    4d:87:8b:2e:cb:c3:83:ca:ee:fd:13:85:52:9c:f6:
                    ca:9a:51:ea:a8:27:80:b3:ce:17:f0:6a:41:bb:ad:
                    16:ab:9f:18:46:b9:ec:28:12:ae:61:b7:5f:ba:eb:
                    da:76:1e:1e:61:a1:8b:28:c0:72:4a:f9:62:cb:76:
                    19:f0:f7:ce:74:a3:a2:08:42:47:3e:89:88:9b:15:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:C3:D0:F4:AB:28:62:8A:8C:94:60:FF:92:7E:19:0B:A3:98:40
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323030313a3a2f34382d3438203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:0f:62:75:47:39:a1:37:e5:5a:b3:01:f0:9a:b8:40:f2:
         92:d8:6f:96:56:9a:8f:3d:2b:e8:96:8f:df:09:14:e6:37:c1:
         5c:3f:b0:46:3f:d3:94:48:42:a0:48:85:55:03:63:1d:8c:8c:
         46:16:eb:e4:99:58:a7:da:b0:19:b7:87:27:4f:6b:86:73:02:
         e1:5d:bb:be:ab:a8:96:0e:ca:82:cb:12:9b:02:ca:7c:44:53:
         b2:98:ba:91:51:0c:a3:0d:24:28:88:d1:2f:b3:5f:93:98:5f:
         63:1b:79:21:0d:92:81:ba:d9:68:91:be:d7:13:b2:1d:bd:60:
         ef:df:c7:58:e1:40:08:36:4d:cc:20:10:c1:fe:54:fc:69:4d:
         78:85:24:df:07:74:ef:64:e4:9a:b0:56:6a:15:2c:0a:9e:ed:
         0a:10:dd:f6:a7:24:e9:b1:5d:e6:54:ff:c5:42:67:fe:01:65:
         78:9c:32:bd:ad:c1:18:e3:ea:a7:a3:54:2e:e4:8b:ee:4e:6b:
         cb:e2:c2:0a:ca:96:34:40:25:ec:76:5b:92:b6:5a:c5:44:0c:
         ca:43:f8:0b:35:5f:a8:00:eb:04:0f:90:09:e4:3a:33:b6:7b:
         0a:1f:8e:01:7a:2c:bd:c4:6f:2f:3f:b8:82:73:af:f8:8f:dc:
         74:93:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:02:03 2024 by rpki-client on console-ams.rpki-client.org