Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa
File:                     323830343a383637383a3a2f33322d313238203d3e20323732363435.roa (raw, json)
Hash identifier:          CiEL4IBHhIpH3nP3OB0B3XcsJMT2z0KRM9dkmzPfnmA=
Subject key identifier:   82:91:15:37:A5:E7:DF:8A:49:D6:86:61:B5:83:44:60:59:1F:EC:7B
Certificate issuer:       /CN=B7BC2675026F7F7542C7252D1D9F98C819A12C98
Certificate serial:       2F95E6B222BFAF0B449CA78F0803A72CC8FCB1D4
Authority key identifier: B7:BC:26:75:02:6F:7F:75:42:C7:25:2D:1D:9F:98:C8:19:A1:2C:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BC2675026F7F7542C7252D1D9F98C819A12C98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa
Signing time:             Fri 25 Oct 2024 04:33:56 +0000
ROA not before:           Fri 25 Oct 2024 04:28:56 +0000
ROA not after:            Fri 24 Oct 2025 04:33:56 +0000
asID:                     272645
IP address blocks:        2804:8678::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/B7BC2675026F7F7542C7252D1D9F98C819A12C98.crl
                          rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/B7BC2675026F7F7542C7252D1D9F98C819A12C98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BC2675026F7F7542C7252D1D9F98C819A12C98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:95:e6:b2:22:bf:af:0b:44:9c:a7:8f:08:03:a7:2c:c8:fc:b1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7BC2675026F7F7542C7252D1D9F98C819A12C98
        Validity
            Not Before: Oct 25 04:28:56 2024 GMT
            Not After : Oct 24 04:33:56 2025 GMT
        Subject: CN=82911537A5E7DF8A49D68661B5834460591FEC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:42:2f:f4:a4:b5:b1:27:9b:e8:32:6b:52:
                    b0:5b:d3:7d:dd:4c:6e:17:61:c3:43:0b:28:59:40:
                    2a:3e:ed:21:00:1a:cc:e7:51:e3:68:18:f2:23:c9:
                    48:f7:42:94:a3:f7:35:41:09:ef:64:7b:f7:e1:46:
                    09:d7:36:d2:d1:c9:cc:a8:9c:bf:18:28:d3:39:ac:
                    5c:9b:43:5d:65:f5:34:46:50:8e:da:cb:ab:e1:b0:
                    cd:bc:13:b5:4c:c0:14:5f:9c:8b:df:0f:6c:03:e4:
                    18:d3:f8:a9:2c:d3:c9:d3:04:d6:17:14:57:a5:6d:
                    95:d2:f0:57:f7:93:fd:3a:af:8c:fb:58:26:55:48:
                    f1:d4:f9:24:84:dd:85:50:83:cc:53:cd:a2:f8:dd:
                    1f:71:8f:86:e2:de:43:ee:51:87:7d:0f:2f:bf:82:
                    94:5e:90:29:39:99:1c:a0:18:6d:88:6e:7d:05:55:
                    20:44:87:8c:44:7e:ba:d9:f6:67:a0:44:9a:47:0d:
                    23:06:b7:22:10:a6:8a:d4:ca:0b:c5:b2:4e:30:59:
                    9f:ba:75:57:78:42:aa:93:08:a4:1e:7e:e8:8a:fb:
                    de:42:ae:4b:fa:8a:24:97:24:92:58:5f:29:13:25:
                    9f:df:e4:36:63:23:a3:a4:42:55:4f:0c:5a:9f:f0:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:91:15:37:A5:E7:DF:8A:49:D6:86:61:B5:83:44:60:59:1F:EC:7B
            X509v3 Authority Key Identifier:
                keyid:B7:BC:26:75:02:6F:7F:75:42:C7:25:2D:1D:9F:98:C8:19:A1:2C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/B7BC2675026F7F7542C7252D1D9F98C819A12C98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BC2675026F7F7542C7252D1D9F98C819A12C98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8678::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:6c:db:a6:16:c6:47:e4:e8:35:45:70:10:55:c9:02:d9:
         7a:35:c4:f0:64:21:da:db:9f:ae:36:6b:a9:c7:40:86:68:09:
         20:8d:01:91:f6:40:04:a3:b7:3c:99:a8:41:13:29:ec:b2:0f:
         73:2e:09:78:d6:37:13:46:74:fc:4c:12:e4:70:ce:88:4e:09:
         be:49:00:69:14:f7:cc:f8:84:8f:d1:88:58:58:86:cb:12:c6:
         99:49:51:16:06:b4:2c:e6:5c:b3:35:00:fa:e5:6f:4f:bb:b1:
         5f:29:6e:15:8f:3a:0e:78:df:92:32:32:0d:3b:11:6b:a4:05:
         91:2f:c7:a6:dd:35:c6:4c:ff:6c:8c:f0:99:07:1d:d6:d2:cd:
         3d:19:56:41:d0:17:08:1d:3f:c1:06:79:6c:7e:40:0d:b9:43:
         69:02:5d:12:bb:a7:bb:53:4a:ab:8f:ad:b4:64:5f:98:29:15:
         b8:99:74:72:7b:41:84:65:e8:68:34:ca:b9:46:4f:42:57:bb:
         1e:6d:fe:b3:c9:1b:00:4f:48:b1:e9:7c:8a:e1:0d:bb:51:a4:
         7e:23:ab:de:7f:e9:8a:f7:f4:ce:65:53:ec:c6:21:1c:f4:ce:
         33:61:8f:c7:21:b5:b7:9b:b0:9c:93:0a:89:9b:84:75:7d:3c:
         f7:52:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org