Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33322d3332203d3e20323730323735.roa
File:                     323830343a363938343a3a2f33322d3332203d3e20323730323735.roa (raw, json)
Hash identifier:          hiOzv2JIj61kiN6MDU2LHGMb1HlvULnWmynyn4q0yng=
Subject key identifier:   FD:CF:BF:22:66:13:7A:B2:85:38:E0:9B:73:5C:46:E6:3C:18:A8:36
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       10013073C3EC873DC3C640EE8F1F9F57E62C1FCD
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33322d3332203d3e20323730323735.roa
Signing time:             Thu 04 Apr 2024 06:00:38 +0000
ROA not before:           Thu 04 Apr 2024 05:55:38 +0000
ROA not after:            Thu 03 Apr 2025 06:00:38 +0000
asID:                     270275
IP address blocks:        2804:6984::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:01:30:73:c3:ec:87:3d:c3:c6:40:ee:8f:1f:9f:57:e6:2c:1f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Apr  4 05:55:38 2024 GMT
            Not After : Apr  3 06:00:38 2025 GMT
        Subject: CN=FDCFBF2266137AB28538E09B735C46E63C18A836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:bd:a4:3a:cd:d8:7d:58:29:66:d0:97:6d:
                    cf:8f:bd:f1:85:11:7c:0d:3a:40:0b:57:4a:64:72:
                    5c:77:70:b8:50:f4:39:b9:e4:ef:0e:d1:78:23:f7:
                    15:11:d9:77:1b:07:b9:78:93:15:34:27:09:10:ee:
                    f0:2a:c2:f8:33:60:63:34:b1:da:85:cf:22:b1:6a:
                    d2:8d:55:5b:91:8b:e5:26:77:c1:5a:7c:54:23:1a:
                    fc:74:75:b7:9e:cd:51:ee:05:a6:4b:b9:12:d7:30:
                    e5:e6:42:51:51:f4:6c:b5:83:98:e3:73:34:e9:3b:
                    b2:61:08:40:d9:59:a0:35:ec:6e:59:d1:be:1a:f8:
                    ac:10:e0:a3:8d:bc:54:28:12:db:73:27:6f:5e:dd:
                    76:8e:23:46:9d:f9:03:10:41:e8:6a:40:61:57:48:
                    5a:26:35:f4:f7:73:1d:45:99:13:4c:ee:25:07:d1:
                    34:1d:f8:a9:79:a1:ee:94:b8:a2:52:62:43:5b:d5:
                    0b:a4:06:2b:e0:f7:b7:2c:ad:be:88:b6:53:04:fc:
                    06:92:19:6f:90:83:c7:4e:f0:43:96:48:5d:53:76:
                    78:92:2f:d6:72:82:fa:49:ed:20:b8:e5:28:5e:7b:
                    75:94:00:7e:43:0d:18:4a:1c:c7:ba:9f:fb:0b:a2:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:BF:22:66:13:7A:B2:85:38:E0:9B:73:5C:46:E6:3C:18:A8:36
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33322d3332203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:84:ff:f6:4a:b5:8a:36:38:1c:6d:55:e3:fe:c5:2e:e3:92:
         a0:8f:25:23:e4:1c:32:9e:bb:31:27:3b:09:76:c9:49:1f:8b:
         11:a9:5c:a1:6b:ac:f5:ad:9e:90:86:c5:62:c2:04:30:c5:d8:
         f9:5b:81:a3:0f:9b:d8:0b:12:0e:19:de:54:38:42:c7:63:fc:
         2c:dc:d5:52:2b:5e:f3:e2:62:20:17:60:86:fc:d4:50:f6:fc:
         05:ec:45:44:50:88:3c:d6:e9:96:8c:18:ae:1b:c2:38:96:7f:
         70:8d:e2:00:15:ee:8e:6e:c8:fc:9a:2e:eb:33:c2:37:3f:3a:
         d5:45:1d:80:2c:68:d4:49:b6:5a:9b:28:85:c7:ec:b8:19:ef:
         52:c5:ce:a5:3b:a5:db:e7:09:a8:46:1a:0e:e5:90:7b:54:28:
         49:dc:0b:4a:de:0e:fb:ef:8a:a8:0c:a5:4c:a6:27:bf:ff:89:
         26:c9:3c:27:78:69:53:c4:e2:1f:24:5e:62:9a:8f:36:90:61:
         75:86:41:16:06:f7:c0:8d:79:45:70:56:ef:e9:52:c5:ae:1f:
         ff:06:a8:1d:7c:87:87:eb:d9:f8:9b:b5:31:1c:a9:1a:83:e2:
         aa:a8:2b:07:bd:0f:55:3e:e8:6c:fa:b4:5c:70:28:c8:1c:d0:
         d8:4d:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org