Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa
File:                     323830343a326230303a3a2f33322d3438203d3e20323635313330.roa (raw, json)
Hash identifier:          6pE6kEQJACdcQtZUbfnwSaHHZc9Zn6iElePTkz1aoMI=
Subject key identifier:   2D:0B:92:95:5E:09:58:1D:E2:55:E3:A4:51:62:50:93:09:2A:AD:17
Certificate issuer:       /CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
Certificate serial:       72227E245B19F7575C833E2571B702DCB0546133
Authority key identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa
Signing time:             Thu 04 Apr 2024 05:51:17 +0000
ROA not before:           Thu 04 Apr 2024 05:46:17 +0000
ROA not after:            Thu 03 Apr 2025 05:51:17 +0000
asID:                     265130
IP address blocks:        2804:2b00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.crl
                          rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:22:7e:24:5b:19:f7:57:5c:83:3e:25:71:b7:02:dc:b0:54:61:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
        Validity
            Not Before: Apr  4 05:46:17 2024 GMT
            Not After : Apr  3 05:51:17 2025 GMT
        Subject: CN=2D0B92955E09581DE255E3A451625093092AAD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:0e:8f:04:85:e8:ca:a9:68:f8:7f:e3:7f:
                    94:d5:e2:15:9b:2e:f6:82:07:94:65:da:91:ba:68:
                    ea:a6:04:84:25:53:84:19:12:f0:65:bf:3a:55:6d:
                    5e:20:c8:41:82:49:e2:e0:9d:3b:0e:59:e0:55:f2:
                    f6:1f:d2:0a:6b:76:c2:4e:32:b3:fd:05:79:74:60:
                    d9:dc:f3:06:4b:74:ca:dc:ad:6d:03:81:9d:5e:33:
                    05:4b:50:3a:c2:cd:57:e2:10:49:c7:4a:37:98:6b:
                    42:51:28:86:42:30:e0:c9:3e:79:c2:4d:a1:12:77:
                    6f:5e:96:dc:b5:62:e6:5d:99:2f:f1:c8:62:fc:3d:
                    1e:8d:2f:2d:55:89:22:72:6d:e2:4d:c0:af:c3:c1:
                    1e:7f:de:5a:3e:89:cb:e4:46:52:a4:2d:9d:95:1e:
                    40:4d:ff:3c:3e:48:2e:ab:5e:60:93:99:42:3d:e0:
                    68:e2:95:1e:a6:a9:fc:c7:6c:4e:05:99:48:f1:d3:
                    ca:5a:68:17:66:46:a5:e2:87:29:71:28:01:f0:fd:
                    75:20:ab:67:93:a7:50:3c:ed:e3:62:92:ed:6b:40:
                    1b:e0:42:5c:b5:5d:28:3f:1f:a3:fc:3a:4b:ac:34:
                    15:3a:bb:b8:70:6d:41:41:4e:6c:3e:4c:1b:6d:1e:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:92:95:5E:09:58:1D:E2:55:E3:A4:51:62:50:93:09:2A:AD:17
            X509v3 Authority Key Identifier:
                keyid:B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:83:08:cd:b1:bf:9b:97:8e:bb:50:f8:85:7c:ee:ad:d5:
         08:4e:b2:55:67:06:64:0b:2b:ca:ec:7b:f5:a0:61:3d:1b:72:
         d1:27:a9:48:69:32:b9:0d:b7:56:3c:07:15:b1:22:37:37:68:
         da:8e:9b:fe:f5:4c:b5:ea:6e:60:97:26:4e:ca:e6:19:f8:c0:
         b1:15:65:61:a5:1e:8e:f4:02:bc:4c:d7:bc:b0:06:ad:65:cb:
         1f:02:aa:95:0a:a9:d9:39:36:3c:27:b9:96:11:6c:55:76:52:
         a3:73:dd:b8:a1:bd:94:ba:bf:9d:46:b0:26:c0:8e:4a:3d:ae:
         6a:f8:4a:26:a1:22:48:a9:7e:c1:37:8a:2d:f1:95:b8:b4:75:
         ce:94:cf:f1:c6:2a:53:1f:41:3b:7b:13:d8:c2:ee:bf:7c:e7:
         85:ff:b4:0e:bc:02:3e:c6:8f:c6:99:a2:9c:27:77:49:5d:05:
         c4:e6:ce:44:a6:b7:8d:18:e1:d9:9b:63:dd:d0:41:a0:c0:99:
         52:69:12:e2:62:8f:76:31:9a:1e:b6:87:88:5d:40:76:a5:8b:
         3a:16:43:3b:1a:08:35:20:fe:46:86:3f:b6:43:28:1b:4f:99:
         9a:66:de:d0:f2:76:3d:22:d0:1b:3d:18:91:7d:9c:d2:c2:2a:
         fa:90:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:11 2024 by rpki-client on console-ams.rpki-client.org