Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353030303a3a2f34382d3438203d3e20323632393737.roa
File:                     323830343a313661343a353030303a3a2f34382d3438203d3e20323632393737.roa (raw, json)
Hash identifier:          OXzURwvuNlSh9HDki5YEYqPiAdUOuMe3tjuh+3G9KfE=
Subject key identifier:   1A:8B:4A:BE:FA:C5:68:9B:6B:55:28:E6:87:BC:01:79:13:45:4A:E8
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       7D48402AAC5CB7AED51A028CBCDACEA786D0801D
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353030303a3a2f34382d3438203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:45:39 +0000
ROA not before:           Wed 22 May 2024 17:40:39 +0000
ROA not after:            Wed 21 May 2025 17:45:39 +0000
asID:                     262977
IP address blocks:        2804:16a4:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:48:40:2a:ac:5c:b7:ae:d5:1a:02:8c:bc:da:ce:a7:86:d0:80:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:40:39 2024 GMT
            Not After : May 21 17:45:39 2025 GMT
        Subject: CN=1A8B4ABEFAC5689B6B5528E687BC017913454AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:70:16:ed:86:e8:0b:bb:c2:cb:99:92:71:
                    5a:33:40:8d:8b:c0:f4:e9:4b:31:e0:ab:dd:28:52:
                    e4:3e:18:be:8f:d9:9b:3f:e7:4c:ae:9d:65:b3:a8:
                    f0:fe:c0:a5:68:ac:65:51:e3:db:80:11:44:d9:2b:
                    38:e8:4f:7b:97:6d:74:52:0e:c3:89:f9:93:a4:80:
                    69:2b:df:f5:27:d9:ed:d7:0e:6f:1c:6b:41:5f:c9:
                    6e:8f:de:6f:b4:bb:fe:ab:f1:60:54:34:92:6c:8c:
                    ad:0d:dc:86:03:37:c8:0a:d0:22:77:3a:63:bf:d5:
                    8e:6f:23:5b:d7:e0:be:0a:5a:48:09:a4:3b:07:53:
                    67:6c:52:e8:36:bd:2c:1e:0b:91:d1:d6:11:a4:35:
                    d5:03:2c:46:02:9b:2f:51:8f:a6:ef:92:a1:94:99:
                    a3:62:7f:aa:6f:28:92:cb:02:17:28:4a:d3:d4:65:
                    4d:5c:17:d2:cb:bb:e8:0d:1e:a2:fa:32:03:db:71:
                    be:b0:5c:3c:b6:22:40:c4:6a:e3:7d:3f:59:96:d5:
                    92:5c:c4:80:d1:3f:ae:ba:57:7c:bd:79:70:10:80:
                    e2:00:cb:b3:ce:61:53:af:11:c9:a5:60:a1:91:38:
                    bf:ec:f4:95:d0:18:7e:9e:92:08:0e:38:f9:5b:8c:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8B:4A:BE:FA:C5:68:9B:6B:55:28:E6:87:BC:01:79:13:45:4A:E8
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353030303a3a2f34382d3438203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a4:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:34:7a:9b:42:1f:2e:a6:a5:c2:aa:b9:7d:a6:31:7f:4e:f1:
         5e:fc:1e:bd:f1:4d:fc:56:d7:20:f3:35:99:7e:c3:3b:cf:7f:
         68:50:36:52:a2:ee:6b:9b:3c:99:49:14:f5:7d:0c:1f:4c:b2:
         96:d2:05:92:13:8f:9c:d3:ef:c1:74:c6:76:ef:fa:f9:54:2b:
         00:cd:81:c7:06:6d:6e:ec:e7:1b:a6:68:85:3d:29:8e:45:91:
         48:e2:0c:73:ac:4e:8e:a3:e3:39:5b:5e:f0:9e:95:d8:5c:d1:
         ee:14:cd:9f:0c:27:23:4f:9f:0f:53:94:e9:b2:14:43:96:e2:
         31:d3:4a:14:74:01:49:8c:ec:d2:98:ae:3a:f0:17:62:2f:b8:
         11:b0:2d:82:c0:64:91:03:c3:f0:89:b5:31:3d:c5:81:3c:63:
         3a:ec:e0:c0:a8:14:df:29:44:90:1e:59:b5:dc:d2:d9:54:e9:
         0e:b4:6a:10:2f:c1:2b:68:1d:c6:f8:6d:76:ac:ef:95:6f:1c:
         44:78:36:2a:03:da:81:a5:4b:58:cc:ce:4d:4d:22:fc:dc:7b:
         55:c9:a0:4a:9f:51:1f:36:db:54:7a:0c:f3:ee:e9:e8:3c:c0:
         3a:f5:f8:aa:28:ab:7b:cb:c4:01:00:85:ca:7d:a0:75:e4:d1:
         3a:37:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:49 2024 by rpki-client on console-fra.rpki-client.org