Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33322d3332203d3e20323638303131.roa
File:                     323830343a353639383a3a2f33322d3332203d3e20323638303131.roa (raw, json)
Hash identifier:          vzNbC6QanYbg+lsR7+VuwZ+BorgT5/UoGINuH+iGIgM=
Subject key identifier:   02:E5:58:38:33:9B:2D:B6:B0:C5:7C:77:C7:B8:91:FF:00:F7:BC:25
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       5B53CB449F6B113F772039E9FF0D4163C4504274
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33322d3332203d3e20323638303131.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     268011
IP address blocks:        2804:5698::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:cb:44:9f:6b:11:3f:77:20:39:e9:ff:0d:41:63:c4:50:42:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject: CN=02E55838339B2DB6B0C57C77C7B891FF00F7BC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:52:01:57:02:bf:8b:a5:59:38:3e:9a:46:
                    54:02:32:44:a5:53:c5:97:a5:9c:4d:8e:c0:ff:da:
                    3c:0e:fb:e7:1e:78:18:ee:79:ed:0e:9b:cb:ae:bf:
                    e0:1d:0b:6e:32:c6:52:ce:8f:f5:a8:1d:ff:7f:6b:
                    52:c2:02:86:bb:8f:e6:ff:1f:19:07:79:e1:ff:bd:
                    0b:64:07:96:f6:b1:45:06:a3:5d:c3:bf:ae:95:f7:
                    c1:0d:e4:4d:53:ac:ae:9d:40:e4:92:d2:6c:66:99:
                    b2:0c:7a:1f:b3:81:61:24:5d:62:2b:9b:9b:d1:3a:
                    5a:09:ef:58:5d:c5:8b:06:6b:95:f4:ce:d8:9d:1f:
                    13:c6:dc:f2:04:48:25:d1:e6:5d:01:f1:03:49:71:
                    d5:ee:2d:3e:07:a7:9f:e5:68:84:d1:45:c6:1f:62:
                    a2:01:3d:38:c9:69:d5:98:2b:96:03:fb:a7:cf:4e:
                    33:e3:87:5e:b2:38:19:5f:49:1a:b5:1e:ac:78:bb:
                    13:39:6b:9c:40:a2:c9:8a:ef:ac:d8:50:bd:d9:51:
                    05:e8:bd:d0:85:e2:c5:ee:dd:95:ae:95:1b:7d:31:
                    1e:40:b5:6d:d2:09:79:dc:69:54:c1:a6:c7:68:30:
                    6e:50:21:70:41:73:89:8a:1a:01:92:8c:4e:47:ce:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E5:58:38:33:9B:2D:B6:B0:C5:7C:77:C7:B8:91:FF:00:F7:BC:25
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33322d3332203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5698::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:95:ec:65:30:27:38:c7:8e:dc:55:f9:01:47:f3:62:ea:
         10:2f:8e:9d:26:8b:22:94:05:ae:6d:b0:c5:7b:0f:bb:12:1f:
         ee:43:f4:e0:ee:d9:e1:58:a2:bb:74:01:63:b8:42:18:17:b0:
         e4:f1:e8:05:d8:e0:5e:b1:6b:b4:0a:83:70:67:96:f8:2e:7e:
         22:32:6f:ef:78:08:8b:0e:8a:3f:bc:8d:d3:af:b5:ab:a1:1c:
         b4:d2:ed:d7:cf:74:9c:8c:db:33:24:12:88:9b:33:99:47:bb:
         f0:70:bc:4c:aa:f0:74:46:ea:3e:9e:ae:ce:aa:39:08:e2:4a:
         0e:ce:6a:bb:61:fa:e7:6d:b0:6e:e3:2a:13:ca:3b:dc:b6:79:
         fd:a5:b1:ab:4a:e6:7d:57:cd:cb:11:82:ef:df:fb:8d:7a:9b:
         3e:e2:11:c7:29:f5:09:40:7b:e2:4e:01:12:8e:d5:3b:a6:59:
         f2:af:26:da:db:e8:26:e9:a9:55:0a:8b:16:47:e9:db:ed:c0:
         2d:ba:b9:63:86:86:77:36:40:75:cb:34:00:61:dd:9e:24:c0:
         91:3a:e0:88:8e:94:bb:4f:bc:34:0d:f1:1c:b0:94:6b:19:ed:
         16:fe:4f:4b:47:6c:d8:75:3b:3d:0a:74:f0:ed:2b:34:0c:6b:
         4a:ae:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org