Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/323830343a336539383a3a2f33332d3333203d3e20323636363038.roa
File:                     323830343a336539383a3a2f33332d3333203d3e20323636363038.roa (raw, json)
Hash identifier:          Cqd4MrmgpFEYA15zldHM1hqnNfpEf/Iof/Uhn5gtguY=
Subject key identifier:   F7:D5:04:70:E7:3C:FE:95:5B:EC:B8:EE:EC:51:7F:1B:3F:47:59:92
Certificate issuer:       /CN=B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A
Certificate serial:       21C603F08EF9FE37FC845792238CDBC40884EE7E
Authority key identifier: B4:07:2D:8F:E8:FD:8E:8E:A5:D4:A2:6B:77:2D:A8:F8:C2:6D:E9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/323830343a336539383a3a2f33332d3333203d3e20323636363038.roa
Signing time:             Thu 04 Apr 2024 01:36:26 +0000
ROA not before:           Thu 04 Apr 2024 01:31:26 +0000
ROA not after:            Thu 03 Apr 2025 01:36:26 +0000
asID:                     266608
IP address blocks:        2804:3e98::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.crl
                          rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c6:03:f0:8e:f9:fe:37:fc:84:57:92:23:8c:db:c4:08:84:ee:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A
        Validity
            Not Before: Apr  4 01:31:26 2024 GMT
            Not After : Apr  3 01:36:26 2025 GMT
        Subject: CN=F7D50470E73CFE955BECB8EEEC517F1B3F475992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:0d:25:cc:da:89:91:fb:2c:8e:ac:e0:5b:
                    81:9c:24:23:73:9b:b6:0b:d5:2f:19:81:b3:1d:97:
                    e9:69:d0:0d:ac:99:0d:d1:d7:e8:bb:a0:1e:f1:86:
                    aa:63:0e:55:97:4f:8d:5e:a0:da:83:54:0a:12:ad:
                    53:88:bd:75:cd:af:ea:19:0f:26:31:e4:62:32:a2:
                    b2:c8:79:89:2c:f9:50:77:c7:72:ec:52:ab:75:b0:
                    85:d7:69:df:29:e3:9c:5c:ed:03:bc:bc:43:26:43:
                    20:b4:f1:c6:a7:11:e9:29:ea:3c:30:4d:5d:bd:b5:
                    a0:ab:bb:7e:67:18:f9:dc:ef:7d:86:cf:fb:af:b0:
                    eb:52:16:9d:22:3a:4a:c3:20:f7:79:15:ce:8c:8f:
                    24:05:6b:95:9b:ad:29:e4:5e:2a:18:2e:08:da:46:
                    a1:8e:fe:49:da:d2:eb:11:52:e0:75:6d:77:55:39:
                    70:47:db:01:ec:60:f0:e9:b7:1e:2e:ef:62:f8:47:
                    1b:1b:94:16:39:e9:3a:d9:71:be:7f:14:a8:dc:1a:
                    a9:89:f3:fd:51:bf:11:a2:21:79:33:b2:16:f3:e8:
                    b5:75:81:c6:14:26:fc:32:b5:ea:1e:c3:a7:45:39:
                    91:ae:bf:14:79:36:88:75:bc:cc:83:74:9b:ff:b2:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D5:04:70:E7:3C:FE:95:5B:EC:B8:EE:EC:51:7F:1B:3F:47:59:92
            X509v3 Authority Key Identifier:
                keyid:B4:07:2D:8F:E8:FD:8E:8E:A5:D4:A2:6B:77:2D:A8:F8:C2:6D:E9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/323830343a336539383a3a2f33332d3333203d3e20323636363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e98::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:02:2b:71:e8:7f:55:a5:3f:e0:27:b0:02:c2:7c:72:d0:
         04:60:23:cd:08:ec:bc:a3:8e:8b:74:3a:f5:fe:a0:e6:6a:d1:
         41:1f:d9:fb:6f:91:41:06:0a:d3:27:f8:d3:18:cf:c9:e0:12:
         d6:e7:9f:70:9f:1c:76:40:39:21:7f:ba:58:e7:1e:8b:12:3e:
         e1:ef:a7:53:a8:08:fe:ec:fd:b3:ff:b2:a5:cc:5e:fa:bf:db:
         c1:ae:d4:53:af:c1:d9:29:e6:b7:c1:e9:bd:42:9f:f1:bf:cd:
         d4:07:dd:30:24:4d:b2:c7:10:87:64:85:55:b5:94:c6:9f:6c:
         97:27:95:e2:0c:f9:70:9a:c7:1e:fe:4c:f4:e3:2a:8a:d6:24:
         56:61:92:12:56:49:e6:8f:8f:55:b0:b3:15:32:56:c9:65:77:
         22:5c:d8:33:62:b4:d8:ac:0a:3e:c6:e7:68:16:1b:6f:71:7f:
         ca:80:f8:0a:65:96:70:60:4d:58:e5:9d:a6:a5:7f:a6:37:e1:
         4f:75:2e:b4:db:5c:6a:0e:8f:11:59:ca:1b:5e:01:e7:40:6b:
         87:0c:06:fc:6c:cd:5b:1d:75:47:97:ab:d7:41:c8:8c:bb:6d:
         ab:01:18:3e:bb:ee:24:b7:25:be:81:1e:d6:e5:f5:6a:1d:ac:
         48:8b:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:33 2024 by rpki-client on console-fra.rpki-client.org