Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d3438203d3e20323632383133.roa
File:                     323830343a3236633a3a2f33322d3438203d3e20323632383133.roa (raw, json)
Hash identifier:          FPvl6JvG/wJpAQmHtIO2n6r3SM1JnFs4LdGxAWYfvc8=
Subject key identifier:   C2:C6:9F:FC:92:B8:FD:06:AF:29:9A:56:A9:1A:FB:1E:5F:F0:A1:8A
Certificate issuer:       /CN=AB2056D7D8A7AFF26282198B9CD2D346B527921A
Certificate serial:       1DCC1D394B4CCF465B5B0FD9C9F3335AEAA371C3
Authority key identifier: AB:20:56:D7:D8:A7:AF:F2:62:82:19:8B:9C:D2:D3:46:B5:27:92:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d3438203d3e20323632383133.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     262813
IP address blocks:        2804:26c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.crl
                          rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cc:1d:39:4b:4c:cf:46:5b:5b:0f:d9:c9:f3:33:5a:ea:a3:71:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB2056D7D8A7AFF26282198B9CD2D346B527921A
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:8e:2e:3c:44:8d:33:70:d1:f1:c8:77:cf:
                    3b:ed:b3:02:0d:95:43:43:d2:c6:dc:21:f5:d9:7b:
                    d7:49:5e:c1:ee:d5:b7:35:6e:89:51:e2:34:de:40:
                    21:32:32:ec:ac:8d:a3:32:b7:8c:e3:bc:84:6b:25:
                    91:cc:1d:ff:5b:05:fe:5b:84:20:e6:e8:24:12:38:
                    17:63:73:9e:f5:d7:ec:7c:57:05:ea:dd:74:8b:07:
                    49:e1:d2:58:79:32:fa:c8:82:b9:11:68:a0:cc:6b:
                    be:9b:04:9d:cd:2f:9e:4a:3d:46:b3:85:7f:05:cb:
                    72:4c:b7:bc:f5:27:59:23:ec:12:33:6b:2c:9d:d7:
                    77:68:97:5e:b7:ee:df:cc:1d:3c:aa:f4:dc:1a:ec:
                    bc:f1:b3:0e:35:fb:eb:10:7e:55:3d:31:c1:3b:73:
                    7c:c2:3c:f4:32:52:6f:b5:30:09:82:79:fe:70:78:
                    10:cb:b1:6b:c0:03:0c:73:00:5a:61:b5:08:7a:06:
                    9a:4e:8a:e7:aa:7e:37:61:79:99:4e:3f:97:b3:f5:
                    64:f6:9e:b6:12:6e:63:85:c1:21:25:56:a8:27:43:
                    c8:c0:0d:b5:63:59:57:df:21:eb:8a:5a:d2:ef:5a:
                    25:d3:09:e7:12:fc:3e:dc:0b:62:86:96:f0:8d:ae:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C6:9F:FC:92:B8:FD:06:AF:29:9A:56:A9:1A:FB:1E:5F:F0:A1:8A
            X509v3 Authority Key Identifier:
                keyid:AB:20:56:D7:D8:A7:AF:F2:62:82:19:8B:9C:D2:D3:46:B5:27:92:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2056D7D8A7AFF26282198B9CD2D346B527921A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/323830343a3236633a3a2f33322d3438203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:d8:8a:8b:26:5e:2c:0c:70:d4:37:fc:a1:e2:81:ab:a4:
         1f:eb:19:23:c4:81:2f:8b:2c:bb:0a:a1:84:68:f6:f0:6a:ec:
         9e:2d:08:62:ee:ac:27:df:25:d2:07:5a:c9:dd:01:e3:29:38:
         d4:65:e9:a9:93:73:1c:5a:c0:04:35:25:02:be:a6:03:ec:75:
         8f:71:c8:de:b9:ec:a2:f5:97:37:cd:27:b1:3e:c0:4b:67:9e:
         54:ef:7c:cb:46:dc:ba:f2:1a:3b:10:d9:4d:db:4b:ac:77:86:
         ad:a1:e0:46:1e:66:2e:d7:17:90:06:00:de:50:98:2e:77:f3:
         0f:71:91:6e:e4:8f:9a:24:6b:6d:a4:8e:ab:9b:68:66:f7:d0:
         b2:0f:aa:0e:6e:70:d2:0d:7f:8b:02:74:e4:5e:f4:0b:0b:54:
         4b:f4:76:a7:b3:fa:ec:a5:67:73:f9:3e:0b:2c:55:82:88:84:
         1c:0d:36:ff:de:13:d9:ec:32:3c:2d:7d:c3:8e:e1:21:03:27:
         cf:96:eb:bb:3c:a2:68:79:e0:73:59:fe:f0:11:4e:f9:65:1a:
         d7:fe:a6:ed:72:87:3e:23:92:84:fc:2c:8c:79:91:2c:52:99:
         4d:a8:a2:25:69:b1:02:97:27:8f:c4:94:8a:89:4f:9a:82:18:
         88:22:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:49 2024 by rpki-client on console-ams.rpki-client.org