Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/323830343a376135343a3a2f33322d3332203d3e20323731333635.roa
File:                     323830343a376135343a3a2f33322d3332203d3e20323731333635.roa (raw, json)
Hash identifier:          RkwS7fw4IsD2k83DJqGJA4HxY3wROzQ+aVZfMOUvjSs=
Subject key identifier:   67:2B:F4:9C:C2:96:1D:37:96:3E:BC:AF:14:8B:9B:14:1E:AA:13:1D
Certificate issuer:       /CN=C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C
Certificate serial:       2833F8BF7B5278D365C44007C46BDF2E98A755BA
Authority key identifier: C7:57:68:4E:22:CC:EF:F7:9D:D9:DF:FD:B7:BA:53:ED:8C:BE:88:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/323830343a376135343a3a2f33322d3332203d3e20323731333635.roa
Signing time:             Fri 05 Apr 2024 00:25:04 +0000
ROA not before:           Fri 05 Apr 2024 00:20:04 +0000
ROA not after:            Fri 04 Apr 2025 00:25:04 +0000
asID:                     271365
IP address blocks:        2804:7a54::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.crl
                          rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:33:f8:bf:7b:52:78:d3:65:c4:40:07:c4:6b:df:2e:98:a7:55:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C
        Validity
            Not Before: Apr  5 00:20:04 2024 GMT
            Not After : Apr  4 00:25:04 2025 GMT
        Subject: CN=672BF49CC2961D37963EBCAF148B9B141EAA131D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:53:98:ac:f3:ab:bb:30:e3:ff:7a:19:13:
                    41:6c:c3:cd:a3:76:b5:71:a6:c3:b2:7d:52:06:39:
                    f6:d8:4b:ec:f4:a8:b8:b6:68:01:30:b2:f1:7b:0b:
                    0a:1e:db:c9:d7:c7:69:30:7d:58:f0:2c:04:0c:c3:
                    4f:94:9e:5d:e1:ec:b3:f4:06:7d:01:63:71:51:e4:
                    34:38:a7:86:09:8f:f9:da:b2:2c:c6:ea:49:f2:80:
                    2e:fc:f8:de:c9:6d:14:60:0d:df:d3:35:77:04:01:
                    ca:d3:bb:17:e7:f0:80:9e:a7:68:7f:2c:40:d3:7f:
                    6f:43:12:cb:9b:56:f5:37:a3:ae:33:c2:41:a1:49:
                    33:14:b6:9c:70:57:d6:c3:73:ab:3f:91:e4:a2:c6:
                    70:bc:e0:27:c1:21:56:bc:4e:0c:e0:1d:df:4a:f7:
                    d3:be:a2:18:01:2d:9a:35:43:c9:b5:96:66:1a:28:
                    cf:3f:7e:af:8f:68:87:64:d1:2f:c8:8f:a0:ca:67:
                    b7:93:ba:43:3b:08:77:41:2f:c3:48:fa:54:08:4a:
                    cf:3d:0a:6b:ed:c4:e2:7c:ec:97:cb:ae:7d:ee:72:
                    7f:0f:68:61:72:f5:2f:4c:ec:bc:bf:60:c0:f0:1f:
                    99:1b:56:25:c5:ee:7a:24:d7:6f:f3:8b:53:40:ba:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2B:F4:9C:C2:96:1D:37:96:3E:BC:AF:14:8B:9B:14:1E:AA:13:1D
            X509v3 Authority Key Identifier:
                keyid:C7:57:68:4E:22:CC:EF:F7:9D:D9:DF:FD:B7:BA:53:ED:8C:BE:88:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/323830343a376135343a3a2f33322d3332203d3e20323731333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a54::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:4c:6d:e4:3a:79:7b:12:2a:12:53:a4:2b:f4:4c:58:84:17:
         42:dd:ea:48:ee:5f:39:e0:19:b6:5a:b7:cd:c8:f5:81:35:15:
         0a:b9:62:8f:29:e0:be:7e:14:85:5b:a2:51:32:01:ba:ea:e8:
         98:61:fb:9f:d4:b5:6c:6a:95:b3:59:6b:2d:8c:4e:65:da:18:
         1d:7b:09:62:ac:9f:0e:bf:72:8c:ab:9c:0a:a9:f2:73:44:3f:
         7a:b1:24:f8:00:53:d7:c0:d9:88:12:25:cb:94:8a:54:10:53:
         4e:80:b0:f4:36:41:77:34:9d:78:93:68:33:a7:8a:32:6b:2e:
         79:e9:dc:b8:13:98:8e:93:a4:8e:2d:55:85:a0:a3:6f:25:b9:
         5b:5b:97:a0:e7:65:d1:a5:0c:19:98:8a:e2:75:04:43:63:6e:
         14:16:3f:8d:a3:81:bd:19:cd:1f:b4:1d:a3:12:25:9a:fa:ad:
         03:ff:d1:98:b9:52:8b:53:35:39:d6:01:ec:88:bb:15:16:bc:
         60:4e:d2:8f:55:e5:a5:b8:37:ca:a4:48:35:ea:57:be:f7:69:
         46:c4:43:db:09:3c:05:2f:4f:3e:0f:89:34:22:da:cf:cc:09:
         ae:0b:75:6a:c5:2f:d6:76:1e:77:20:f3:d7:5a:dd:0b:24:90:
         d7:9c:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org