Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/323830343a363966633a3a2f33322d313238203d3e20323730333034.roa
File:                     323830343a363966633a3a2f33322d313238203d3e20323730333034.roa (raw, json)
Hash identifier:          pUOCPwzuI5KWdT+1Jyo0EoT/bRau8PWKz9yq49XF/uE=
Subject key identifier:   4A:6C:D3:E4:FA:9C:6B:1F:9D:1E:90:A7:9B:9C:33:E4:71:4B:A4:68
Certificate issuer:       /CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
Certificate serial:       79FA6303CD6D593B54946D7E78311E38CA0612CA
Authority key identifier: 31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/323830343a363966633a3a2f33322d313238203d3e20323730333034.roa
Signing time:             Thu 04 Apr 2024 18:28:35 +0000
ROA not before:           Thu 04 Apr 2024 18:23:35 +0000
ROA not after:            Thu 03 Apr 2025 18:28:35 +0000
asID:                     270304
IP address blocks:        2804:69fc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl
                          rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fa:63:03:cd:6d:59:3b:54:94:6d:7e:78:31:1e:38:ca:06:12:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
        Validity
            Not Before: Apr  4 18:23:35 2024 GMT
            Not After : Apr  3 18:28:35 2025 GMT
        Subject: CN=4A6CD3E4FA9C6B1F9D1E90A79B9C33E4714BA468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:7d:cf:89:21:e5:e9:d7:97:9f:bf:bc:e2:
                    cb:f6:9c:90:cc:93:72:45:33:9e:ba:80:d1:db:94:
                    cb:c0:1f:b8:d9:31:82:c7:41:b3:14:f4:36:e7:82:
                    16:92:70:70:88:52:21:e3:99:85:5a:db:7a:ad:f9:
                    9e:59:68:5b:14:db:05:e9:2f:8a:cd:92:f1:dd:2d:
                    c7:77:9c:04:c6:d3:0a:ca:90:96:6f:57:ac:31:2f:
                    52:a1:29:e2:fc:5f:56:0c:a1:37:00:b6:c6:17:f1:
                    b4:71:df:0a:c3:9f:f8:1d:9a:7c:66:4e:e4:90:58:
                    54:c9:d1:b6:c8:ac:96:7b:90:88:f3:c8:c2:45:0a:
                    8a:64:99:00:68:ac:a1:94:5e:43:95:b2:58:f0:e9:
                    6b:ef:27:39:00:77:6b:06:da:f5:2b:e8:e0:d2:c0:
                    d3:95:f3:d7:dc:1b:55:61:70:ab:7c:3c:af:70:2b:
                    19:c1:8a:31:6d:92:1f:58:d7:c9:de:b4:d3:58:46:
                    23:71:72:51:1d:2c:51:05:89:95:00:4f:74:da:53:
                    18:f1:95:e2:1f:22:92:4b:e4:2a:8d:45:cf:3d:61:
                    3c:0c:85:43:f6:9f:ff:5b:f1:47:bc:af:2e:3d:fd:
                    e3:70:84:e7:39:f0:3b:26:d6:09:c1:1e:d4:93:ba:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6C:D3:E4:FA:9C:6B:1F:9D:1E:90:A7:9B:9C:33:E4:71:4B:A4:68
            X509v3 Authority Key Identifier:
                keyid:31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/323830343a363966633a3a2f33322d313238203d3e20323730333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:bc:f2:3f:c0:f2:8e:09:b3:96:e0:30:85:aa:56:38:d0:
         46:b3:06:24:72:3a:7c:ac:2c:09:38:65:20:60:d0:61:ed:85:
         cf:c8:3c:b5:a0:93:08:6b:4c:06:06:e5:a7:cf:e8:28:6b:86:
         4d:b4:c4:46:5c:89:03:2d:72:67:04:a2:2e:dc:50:75:56:f4:
         a7:89:06:49:10:4b:94:ba:ca:a0:81:8a:ad:2a:aa:74:55:ad:
         a7:39:a2:ab:ef:7c:e6:29:ca:63:c6:ad:a1:a5:65:0a:57:61:
         88:7d:9d:c5:00:cd:00:da:d9:c6:72:46:e7:19:13:67:f3:ee:
         86:03:eb:1b:c5:b8:8e:ef:90:90:f2:83:07:b6:65:88:72:e7:
         fc:7a:f6:c2:53:fc:36:2a:c7:07:10:4e:f2:ca:79:a2:e5:ca:
         9c:44:c5:21:50:8d:7c:de:0f:88:1f:dd:09:fe:d7:51:36:1c:
         e5:da:fb:57:71:a2:ca:8d:5d:af:d6:e0:8d:bb:e8:2d:1e:3a:
         9e:da:63:ac:7b:28:fd:a3:a0:b6:b1:c9:c9:df:ac:75:62:48:
         65:b7:62:f0:06:af:a4:1e:4c:8d:06:52:75:dc:eb:9e:cf:be:
         ed:22:21:a8:ba:04:18:d6:8c:96:01:a3:10:82:48:34:1e:a8:
         52:16:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:35 2024 by rpki-client on console-ams.rpki-client.org