Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3438203d3e20323732353539.roa
File:                     323830343a383532303a3a2f33322d3438203d3e20323732353539.roa (raw, json)
Hash identifier:          UOtqdN5mrg6nNbXC0LBNfGhgvFnyKl4WCMnDtWPkSkE=
Subject key identifier:   EA:0D:1B:6B:15:0A:68:81:49:D5:8D:79:CA:76:DD:F2:C6:B5:4A:87
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       2B31D01F83D07F4913188DFAF87C32CCA197EE2C
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3438203d3e20323732353539.roa
Signing time:             Thu 04 Apr 2024 03:01:11 +0000
ROA not before:           Thu 04 Apr 2024 02:56:11 +0000
ROA not after:            Thu 03 Apr 2025 03:01:11 +0000
asID:                     272559
IP address blocks:        2804:8520::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:31:d0:1f:83:d0:7f:49:13:18:8d:fa:f8:7c:32:cc:a1:97:ee:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Apr  4 02:56:11 2024 GMT
            Not After : Apr  3 03:01:11 2025 GMT
        Subject: CN=EA0D1B6B150A688149D58D79CA76DDF2C6B54A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:b3:39:4a:13:08:12:b2:3d:53:a7:51:f9:
                    79:37:f0:b1:6d:88:dd:9b:a6:26:f8:a6:dd:af:b2:
                    2e:4f:b0:fe:57:06:10:d4:b0:44:02:d3:b9:5d:60:
                    36:22:4b:9a:bc:cd:cf:c2:7f:a0:46:f8:c7:70:55:
                    df:7d:9a:30:69:da:fd:fc:ba:0d:02:9d:66:cb:76:
                    ff:1c:ff:95:a6:cd:66:33:36:15:77:2f:2b:f1:94:
                    70:f5:2d:0f:9d:ec:39:8b:0d:e1:28:22:d8:11:8b:
                    d3:41:d1:12:4b:cd:b7:f5:98:d7:0d:7f:d1:5f:f3:
                    35:20:ef:12:80:2f:66:1a:ea:ae:5f:18:e4:b0:90:
                    11:2d:05:f6:87:f1:0b:c2:ec:eb:88:fc:b5:1e:65:
                    06:83:72:21:27:7e:25:05:8a:38:85:af:8e:e9:25:
                    a7:d2:48:05:b5:68:36:80:7e:7f:1d:bd:d0:11:22:
                    4f:f1:86:12:e4:5e:ba:b6:31:51:48:3f:f6:17:58:
                    64:93:f8:2e:84:30:7b:90:ea:e1:92:de:91:98:a8:
                    9f:8a:70:eb:e7:ef:74:fa:01:4a:37:4f:02:3d:ae:
                    46:aa:02:39:fd:36:70:75:2d:2f:fe:80:ce:04:7f:
                    46:19:9e:90:0a:85:52:1b:1a:95:06:d5:dc:fc:2c:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:1B:6B:15:0A:68:81:49:D5:8D:79:CA:76:DD:F2:C6:B5:4A:87
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3438203d3e20323732353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8520::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:80:80:6f:df:d4:f5:3f:b6:61:0f:cb:1c:5a:26:94:7b:23:
         3b:0f:dd:53:53:b4:bc:f1:bc:29:eb:bf:8c:1f:3c:6f:31:0f:
         85:1c:07:07:25:1f:99:1d:b0:e8:a9:21:87:fa:fe:63:c0:68:
         75:5d:72:c9:3a:60:c9:9d:8d:13:ce:09:28:6c:bd:44:90:cd:
         7a:55:80:3e:62:f5:51:d3:c5:ee:9d:fe:29:33:a4:26:b6:63:
         7b:b5:89:32:36:7a:9d:d9:14:9d:cb:d9:08:eb:56:84:69:82:
         8b:84:ce:ab:1a:55:4e:b6:22:cc:16:6b:9c:57:4b:ec:67:68:
         15:ab:ef:de:17:e5:e3:83:56:3c:6b:87:cc:57:f5:b8:db:d8:
         eb:41:57:41:56:1a:29:c1:6b:c5:c9:06:94:a9:89:ec:dc:6c:
         e4:a3:81:17:38:21:2b:b7:1a:93:9f:df:1a:01:51:bb:2a:fd:
         d5:d3:e8:a5:44:b9:1b:04:23:6e:cf:a8:9b:7f:fc:2e:8f:52:
         28:ac:11:54:2e:f5:d0:19:81:49:f0:34:98:03:08:f1:4f:93:
         89:4d:86:d5:10:1d:87:41:60:66:3f:37:f5:7e:5d:63:65:d1:
         7e:5d:96:f9:70:8b:5e:fb:02:62:ac:84:81:8a:b7:23:84:bd:
         0f:7e:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org