Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa
File:                     323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa (raw, json)
Hash identifier:          BDF8Xi2lJrScbdeSiYB2JDDJB60OXG8JvjGvOTdhXoY=
Subject key identifier:   53:A8:69:22:0A:18:E2:EA:EC:E0:66:1C:99:A7:9A:7A:3D:00:AE:7B
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       3BE3C2415AA887CC6E3BB838BC6D199E8929A17F
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa
Signing time:             Thu 04 Apr 2024 15:53:29 +0000
ROA not before:           Thu 04 Apr 2024 15:48:29 +0000
ROA not after:            Thu 03 Apr 2025 15:53:29 +0000
asID:                     265041
IP address blocks:        2804:31dc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:c2:41:5a:a8:87:cc:6e:3b:b8:38:bc:6d:19:9e:89:29:a1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Apr  4 15:48:29 2024 GMT
            Not After : Apr  3 15:53:29 2025 GMT
        Subject: CN=53A869220A18E2EAECE0661C99A79A7A3D00AE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:9d:76:68:11:e7:7e:97:c9:0d:26:50:dc:
                    7e:bb:98:55:23:15:e6:02:a8:6f:49:47:3e:6e:54:
                    bd:77:f4:cd:8f:d1:08:5f:59:7f:c1:05:cb:75:4a:
                    eb:14:01:56:e9:c2:5f:a6:48:b3:12:c6:1f:28:26:
                    11:62:24:1e:8b:a2:8b:2d:00:8a:52:06:5c:be:2b:
                    bc:99:9a:64:d6:b1:41:83:e8:53:66:bc:3c:cd:0d:
                    d3:b7:6b:a1:90:ed:a2:4c:24:55:46:0d:4a:47:13:
                    a7:1a:f6:c3:67:71:42:99:0f:6b:21:19:d5:3c:bc:
                    de:8c:35:18:6a:15:ca:e7:a3:60:71:f6:9a:ff:f1:
                    bc:07:c6:da:90:0d:d4:76:74:ec:65:00:c8:0e:59:
                    34:ba:ad:fe:e2:89:32:77:6d:13:cf:1f:c9:f1:f6:
                    ad:bf:36:6f:07:79:7c:06:63:2c:4f:e5:f9:79:c0:
                    e3:62:b5:00:a6:41:be:72:32:0f:34:cb:cd:28:7b:
                    e3:ea:d7:da:7d:1e:8f:c8:e0:00:ba:69:5a:17:78:
                    ca:cc:c8:52:4b:57:2f:9d:77:65:db:51:41:51:7f:
                    5f:e4:ac:89:97:bb:5f:eb:9f:f3:3d:1a:59:c8:b8:
                    d8:cb:34:ae:d8:6f:bc:69:85:39:b2:93:c6:0b:d3:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A8:69:22:0A:18:E2:EA:EC:E0:66:1C:99:A7:9A:7A:3D:00:AE:7B
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:f2:e0:f1:95:ca:7b:01:6a:f3:4b:71:03:e8:0d:eb:07:
         ee:43:d1:ce:ee:82:2f:14:9b:4c:de:da:01:88:98:e2:2a:5e:
         ee:12:4b:f6:16:7c:19:ea:96:e9:66:ba:91:8b:f8:9c:02:71:
         50:47:17:cb:19:ee:e2:84:7c:ce:95:2c:82:88:16:65:6c:36:
         4e:68:62:da:09:ab:22:6a:6d:be:87:27:d0:8a:53:f6:94:9f:
         5a:67:67:cc:25:99:2d:d1:e5:d9:d7:82:5a:80:dd:5f:53:7a:
         05:f1:d4:f8:bc:9d:b9:f1:0b:b3:35:70:8f:0b:87:b1:c3:95:
         e2:f8:5a:93:4f:d8:9a:af:fc:b5:e0:e1:86:07:c4:7c:13:d2:
         25:8e:7b:12:d6:d4:7f:a3:11:25:ad:03:81:d2:2a:5d:f1:4e:
         2a:ba:b3:08:ab:e5:7a:bf:35:92:8a:44:4a:e8:d6:c0:40:ca:
         80:6f:2a:89:2e:2a:28:33:4f:89:bb:24:02:59:96:fc:6a:1f:
         69:dc:fa:47:2a:6d:90:a8:51:20:cb:90:df:ce:fc:3b:ec:34:
         bf:5c:7f:55:9c:39:ea:d6:f8:54:bc:c1:c1:33:dd:ab:7f:f2:
         f3:51:a7:31:2e:e8:a0:02:42:cd:ea:cf:32:a9:f2:a5:24:b3:
         5b:3d:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org