Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a633030303a3a2f33352d3335203d3e203533323039.roa
File:                     323830343a323935633a633030303a3a2f33352d3335203d3e203533323039.roa (raw, json)
Hash identifier:          RomtM4krcYDSSojHWDLyOZz16pTZ51Yx9wkAbzhjXUY=
Subject key identifier:   30:21:59:2B:FB:A2:93:06:3A:69:44:D7:31:B9:A5:F0:39:36:EA:6B
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       6D65C662AAE197A755D83CB104C63B010B91A39E
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a633030303a3a2f33352d3335203d3e203533323039.roa
Signing time:             Tue 06 Aug 2024 17:59:23 +0000
ROA not before:           Tue 06 Aug 2024 17:54:23 +0000
ROA not after:            Tue 05 Aug 2025 17:59:23 +0000
asID:                     53209
IP address blocks:        2804:295c:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:65:c6:62:aa:e1:97:a7:55:d8:3c:b1:04:c6:3b:01:0b:91:a3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug  6 17:54:23 2024 GMT
            Not After : Aug  5 17:59:23 2025 GMT
        Subject: CN=3021592BFBA293063A6944D731B9A5F03936EA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:ae:99:02:c1:40:31:a8:eb:8b:16:44:3a:
                    4a:e9:b5:23:34:1a:a8:55:54:e0:77:8e:d1:bf:a6:
                    20:cf:94:70:74:bd:de:67:cd:99:3b:a3:18:a5:76:
                    b0:b7:bb:68:e7:87:28:f2:02:f6:68:37:07:ec:8c:
                    0b:82:fb:77:5a:6b:a9:8c:1f:b0:36:64:f6:78:d0:
                    52:d8:f1:01:d4:a7:32:7e:4e:ee:54:b5:ba:d5:84:
                    3e:f9:9d:04:e6:d7:68:74:59:51:9a:83:29:92:84:
                    04:30:cf:19:ec:94:ad:31:17:fe:2c:ed:6e:b7:25:
                    2e:d2:c7:d5:17:1c:ed:04:81:0f:3b:5b:50:dd:18:
                    91:ba:18:87:5b:83:d2:3e:8b:eb:f0:be:92:a4:31:
                    f9:09:c0:83:db:ad:86:f8:80:7b:8a:48:a4:75:4e:
                    a2:69:4f:dc:9f:7d:3d:50:bd:8f:82:30:45:8e:70:
                    02:86:db:96:7f:93:fc:ff:43:e0:c3:31:32:a1:d6:
                    92:e6:d9:3f:ec:43:b6:e3:36:cb:c8:e8:19:93:d3:
                    f0:d9:ba:07:9f:79:b8:82:d7:8a:e5:d8:26:9d:88:
                    57:17:8a:e1:fb:e1:14:6b:e9:8e:a6:88:a4:1c:e1:
                    9a:78:80:2b:90:6d:87:b3:d1:90:9b:dd:0c:1a:2f:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:21:59:2B:FB:A2:93:06:3A:69:44:D7:31:B9:A5:F0:39:36:EA:6B
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/323830343a323935633a633030303a3a2f33352d3335203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:295c:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:e1:70:b0:1a:bd:d6:84:e6:91:61:db:2e:3c:8a:1a:8b:
         80:c8:14:b7:30:08:c8:c1:5c:c4:c0:22:12:4f:25:9f:f7:e9:
         d4:30:b9:94:c2:21:53:86:c0:4c:2e:ba:c8:7f:72:31:80:70:
         1e:c4:62:a5:41:96:27:e8:62:ad:25:b1:bd:79:58:01:16:fe:
         ee:11:63:8f:f1:e2:27:ec:22:a8:2b:3f:2a:0f:2a:a2:64:69:
         57:8d:ac:c0:0f:cc:31:b9:8d:3c:28:49:bc:74:99:4c:cb:8a:
         be:37:eb:cf:18:7c:96:01:b0:2f:89:df:34:3b:3d:ee:6b:e4:
         b4:07:cd:bb:25:b0:70:89:92:f6:af:46:db:8f:26:ba:d3:89:
         8e:6e:28:5f:7f:aa:3c:c2:a3:b4:01:a9:a8:66:25:c6:52:de:
         7c:d1:d8:8c:65:ba:4a:90:2d:71:45:35:61:29:61:19:1f:40:
         27:d5:bc:63:ee:58:c5:2f:28:e5:84:b9:30:61:50:80:16:06:
         03:4c:6c:b9:b2:10:52:00:d9:3d:1b:c4:23:d9:dc:26:38:29:
         73:89:20:39:9b:f2:d9:ee:25:71:e4:bc:d1:f6:1f:9f:0b:f3:
         df:b7:3b:37:4e:d2:9c:56:14:85:77:56:84:da:0c:13:ad:8e:
         75:08:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:56 2024 by rpki-client on console-ams.rpki-client.org