Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a343030303a3a2f33342d3334203d3e20323730323735.roa
File:                     323830343a363938343a343030303a3a2f33342d3334203d3e20323730323735.roa (raw, json)
Hash identifier:          6UeR2P4SIjfk5IH0ruwkiqSvOAxIMJWgojUwfpvTcvE=
Subject key identifier:   CD:CE:3A:77:9A:EC:0D:91:E7:09:BF:E9:8A:E9:CF:15:04:B3:8B:DF
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       62936D13EA7A6A60AFC880B95057F18D90B3952A
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a343030303a3a2f33342d3334203d3e20323730323735.roa
Signing time:             Thu 04 Apr 2024 06:00:37 +0000
ROA not before:           Thu 04 Apr 2024 05:55:37 +0000
ROA not after:            Thu 03 Apr 2025 06:00:37 +0000
asID:                     270275
IP address blocks:        2804:6984:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:93:6d:13:ea:7a:6a:60:af:c8:80:b9:50:57:f1:8d:90:b3:95:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Apr  4 05:55:37 2024 GMT
            Not After : Apr  3 06:00:37 2025 GMT
        Subject: CN=CDCE3A779AEC0D91E709BFE98AE9CF1504B38BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:11:b5:e6:a1:af:e6:c1:17:e7:f4:fd:de:
                    58:f1:88:45:38:9e:62:eb:46:4a:d0:90:de:3f:f6:
                    39:83:60:0b:47:2b:4f:62:ee:3a:2b:26:ac:39:c0:
                    9f:3f:66:39:3b:7b:e6:ac:09:dc:74:0d:14:9a:4d:
                    d3:e5:cd:09:97:39:53:7e:71:4e:27:ba:49:c1:45:
                    1a:6f:04:6f:19:9e:ff:05:43:29:85:9c:e8:32:d0:
                    66:15:1b:8f:bc:89:9b:30:33:73:38:1f:be:8a:ce:
                    ec:5f:0f:e7:8b:24:dd:86:64:39:38:cd:e9:68:d1:
                    9d:06:7b:34:55:8f:b2:9b:25:b5:46:e5:60:4e:6a:
                    84:6f:1a:73:ac:55:74:3b:8e:16:89:17:26:8c:b2:
                    d6:fa:57:82:4f:ee:92:76:fb:36:48:d5:99:be:7a:
                    e3:0d:61:23:62:06:51:ed:89:f8:07:07:1d:90:2e:
                    a8:f4:16:fe:60:b8:6c:4c:20:d9:1e:35:89:cf:06:
                    6a:42:5e:d8:af:e9:e4:65:32:48:80:3a:6a:21:be:
                    2a:1a:94:34:a5:94:77:0d:a7:bb:5a:14:d4:bb:9c:
                    3f:7f:44:6d:9e:80:08:f8:14:45:cc:de:cd:06:c2:
                    81:12:28:f2:36:14:15:e5:b5:01:24:44:7a:20:4f:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CE:3A:77:9A:EC:0D:91:E7:09:BF:E9:8A:E9:CF:15:04:B3:8B:DF
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a343030303a3a2f33342d3334203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:4c:94:1e:98:23:19:fb:06:bf:01:6e:23:17:4a:33:ac:8e:
         ad:da:63:13:36:bf:27:73:11:be:16:cb:9f:c5:49:f7:7d:60:
         fe:05:d2:90:40:8b:30:4a:13:58:a5:56:9d:77:65:a0:75:04:
         cc:e1:fb:93:19:f3:e4:1a:49:02:20:ed:fb:3b:44:3c:28:fc:
         4e:97:86:af:0a:a7:ed:b5:5d:24:0c:e9:70:a8:f6:5b:6c:3d:
         c0:a1:5e:b8:f5:96:54:64:b4:d6:0b:f3:d4:3f:8e:5d:c2:1f:
         94:0e:af:86:5e:e7:e6:53:9f:48:1b:3b:e7:0b:da:f7:50:9e:
         26:d5:6b:52:d5:4d:6d:e2:c8:b3:c2:f4:aa:8a:02:3f:95:55:
         7e:7c:36:35:c7:cb:b3:28:ff:ba:87:90:10:cb:9d:91:05:ef:
         68:5b:8b:d1:dc:3f:fb:36:fd:8e:77:c6:21:57:e1:10:16:e0:
         1e:00:69:2e:80:7e:5e:3c:d9:ea:be:7e:d0:e7:e1:bb:42:5a:
         2f:8d:be:f4:4c:5a:81:62:d8:91:74:00:58:bb:66:86:d9:06:
         b6:d8:b0:97:2b:b6:26:a0:95:bd:35:53:ce:4b:f7:ef:6c:3b:
         22:4e:b0:36:41:c9:b6:9f:4f:f6:b6:2d:ae:99:6e:ee:9d:c9:
         83:65:b1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org