Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353031303a3a2f34342d3434203d3e20323632393737.roa
File:                     323830343a313661343a353031303a3a2f34342d3434203d3e20323632393737.roa (raw, json)
Hash identifier:          NQ9S7QVe/x0P5k3iMLHocIPM/SiJj4UDNDjSYLGipu4=
Subject key identifier:   A7:65:E3:F3:53:1A:CB:FF:10:FC:E4:95:04:14:A3:7E:BD:1B:CF:7B
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       14D072F8CBF1A4AA9A87D6FF7012B383D9CF23CE
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353031303a3a2f34342d3434203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:45:42 +0000
ROA not before:           Wed 22 May 2024 17:40:42 +0000
ROA not after:            Wed 21 May 2025 17:45:42 +0000
asID:                     262977
IP address blocks:        2804:16a4:5010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d0:72:f8:cb:f1:a4:aa:9a:87:d6:ff:70:12:b3:83:d9:cf:23:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:40:42 2024 GMT
            Not After : May 21 17:45:42 2025 GMT
        Subject: CN=A765E3F3531ACBFF10FCE4950414A37EBD1BCF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:86:96:32:f8:4b:2f:27:99:48:1e:62:b9:
                    0f:22:31:0a:ef:8c:29:c4:2e:e5:14:fb:61:87:e1:
                    4d:53:6e:00:70:f5:6e:44:66:fb:ce:48:57:d1:84:
                    ad:34:3a:56:55:64:6e:f8:f5:cd:a0:96:38:18:65:
                    5d:65:a3:80:77:65:36:4d:a7:59:23:d7:8f:ac:f5:
                    31:65:0f:c3:47:24:1a:db:ea:1b:07:bb:a4:9f:d0:
                    c4:d0:41:f2:7e:77:c3:20:32:67:9b:8c:8f:bb:35:
                    3b:4e:d3:34:d3:4e:13:d0:4b:94:e2:81:9e:28:f1:
                    ef:a5:78:ca:28:5f:44:4f:a6:ba:01:ec:60:50:6d:
                    ce:76:b7:f9:6a:1c:56:86:eb:29:c7:a4:cc:11:12:
                    6a:7d:da:58:7f:0f:1c:c7:e7:10:d7:f2:d4:ff:ce:
                    e1:4e:67:f8:81:3a:a5:41:df:94:83:ee:24:34:e1:
                    a0:93:67:ad:e6:ad:94:cb:88:27:c5:14:ac:eb:72:
                    3b:0e:33:d7:37:9f:f2:6b:cf:64:10:45:5f:aa:93:
                    85:72:73:cb:0a:93:9f:f6:64:49:36:ba:7c:16:bb:
                    90:93:f4:84:24:60:02:9c:7b:27:4b:e0:77:2d:6e:
                    86:d2:0b:f4:73:4d:74:cd:1e:13:16:aa:d3:1f:1e:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:65:E3:F3:53:1A:CB:FF:10:FC:E4:95:04:14:A3:7E:BD:1B:CF:7B
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353031303a3a2f34342d3434203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a4:5010::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:88:57:bc:30:aa:51:9a:dc:4d:18:3b:16:c9:02:4c:62:83:
         b3:f1:c2:21:06:16:15:7c:fe:db:ac:79:58:6c:4b:c1:da:af:
         d1:64:a7:dc:ce:fd:3a:95:fa:f1:88:da:2b:d7:72:a8:bc:cc:
         be:d6:e1:8c:92:8f:a7:98:ca:fb:af:0a:85:04:f4:79:2c:2d:
         50:76:f9:d5:a4:82:e6:c1:4b:be:39:c1:85:d7:9c:5a:be:66:
         af:3f:b6:23:6b:a1:3a:39:2a:33:19:19:99:03:e9:fc:43:0c:
         2f:15:c4:bb:22:bd:ae:cb:a8:ec:07:ef:bc:4c:39:39:21:40:
         fe:29:1b:5b:03:c9:ae:bb:30:1d:d4:ad:d5:be:8a:7a:0e:0d:
         96:0a:54:57:14:5f:3a:05:93:b2:d2:76:a8:cb:17:b6:6b:21:
         24:40:0b:f8:90:51:12:d7:d6:10:cf:5d:f3:ed:4f:38:be:d6:
         63:de:6d:be:eb:6f:ae:ca:90:36:4e:97:37:85:bb:b2:ff:cb:
         20:5c:26:e0:d2:c5:ad:3a:fe:a6:e4:a5:ba:49:be:40:72:77:
         5c:73:3c:00:0c:ae:7c:20:a6:78:b2:b1:2f:80:e8:fc:e2:63:
         73:43:ba:cc:6c:83:3f:a9:fd:54:a3:13:50:2b:ed:2d:6e:95:
         d0:7b:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:00 2024 by rpki-client on console-fra.rpki-client.org