Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33332d3333203d3e20323730323735.roa
File:                     323830343a363938343a3a2f33332d3333203d3e20323730323735.roa (raw, json)
Hash identifier:          dMrCec6PIZBq5qEIagZfaNF4oHHg+i0c2tfHu3iimSI=
Subject key identifier:   46:30:28:FB:25:87:DE:AC:6A:74:A2:8A:60:01:50:46:0D:88:D2:E0
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       07DF65A92306FEDA7B43A6FD8E8D2F08D83348CC
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33332d3333203d3e20323730323735.roa
Signing time:             Thu 04 Apr 2024 06:00:38 +0000
ROA not before:           Thu 04 Apr 2024 05:55:38 +0000
ROA not after:            Thu 03 Apr 2025 06:00:38 +0000
asID:                     270275
IP address blocks:        2804:6984::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:df:65:a9:23:06:fe:da:7b:43:a6:fd:8e:8d:2f:08:d8:33:48:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Apr  4 05:55:38 2024 GMT
            Not After : Apr  3 06:00:38 2025 GMT
        Subject: CN=463028FB2587DEAC6A74A28A600150460D88D2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f1:e5:38:3c:a1:94:1c:c8:4b:86:d2:05:98:
                    62:f9:2b:5b:3e:be:79:49:40:26:53:59:6d:33:8c:
                    e6:ec:0a:b6:2d:93:55:a8:c1:33:83:c6:8d:61:22:
                    f3:fe:8e:cb:8e:f3:73:88:ae:f4:4b:8c:c6:e5:37:
                    b2:63:ac:7a:56:a6:57:21:28:c8:3e:a3:f8:c0:48:
                    cd:08:8b:6e:5e:37:5f:77:7c:dc:82:17:0a:c1:d9:
                    2f:ab:87:f5:6f:d9:62:ac:d2:8a:40:14:08:f2:26:
                    64:73:7e:71:27:e7:d1:3b:a4:ef:0e:1c:30:c2:50:
                    8d:2f:2c:a8:af:0c:bb:e3:d1:15:7c:bf:1b:7d:87:
                    d2:80:43:29:9c:33:3f:88:37:bd:40:f7:8b:5c:4f:
                    e6:b2:38:6b:fa:98:0d:6d:00:19:5e:ed:a4:12:3a:
                    00:d2:d3:89:3f:fb:c1:e4:7d:4d:29:cc:b1:98:ca:
                    91:ea:67:12:e2:56:99:99:a6:6b:b7:80:5c:d4:dd:
                    bc:7f:e3:1e:f7:7f:ab:30:11:64:4e:cf:32:72:49:
                    90:65:f0:c7:af:56:20:1e:d0:ef:f7:93:00:b3:4f:
                    b8:2c:7f:31:50:47:4f:ad:2d:48:ea:b3:86:9b:31:
                    fb:1b:fe:5b:60:d5:7b:95:25:7a:59:15:93:22:c1:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:30:28:FB:25:87:DE:AC:6A:74:A2:8A:60:01:50:46:0D:88:D2:E0
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33332d3333203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984::/33

    Signature Algorithm: sha256WithRSAEncryption
         ad:de:a0:ad:b3:13:96:82:62:c7:73:4f:35:75:5f:a4:14:7b:
         55:fe:d0:d6:80:f2:79:12:ae:78:63:5c:65:de:3e:71:dd:c2:
         5c:dd:49:85:4d:62:d6:ea:93:06:0a:cc:78:86:ad:25:69:97:
         46:37:8e:41:83:86:b5:09:86:ae:cc:f5:df:ce:98:fd:14:d2:
         97:be:ae:f7:08:31:bc:f9:e9:98:4e:fc:30:11:c2:ee:61:33:
         01:d2:ba:b9:04:61:42:9e:4e:aa:53:c8:25:4a:81:8e:ba:ba:
         6a:2f:ff:8b:e0:69:c1:d8:b4:62:2e:e3:b6:84:25:8f:70:25:
         24:64:ab:d8:35:ca:3d:c3:4a:6f:ab:c6:ea:47:2b:65:81:65:
         dc:c2:23:88:9d:d1:dc:88:f9:81:b8:eb:5c:23:3c:eb:5b:37:
         36:b5:68:4e:13:c3:4c:9b:94:ae:cc:7f:83:4b:03:02:5c:ff:
         2e:8b:ef:a6:a8:cb:0f:43:6e:6a:09:46:f5:f4:12:da:ff:cc:
         6f:db:26:2c:ad:83:b8:56:1e:6d:8a:59:67:0d:97:19:2a:c8:
         55:00:d1:b0:69:cd:7c:fb:c0:a3:ef:7d:6d:dd:a7:9c:4c:ed:
         e7:12:70:94:19:ab:90:76:b1:ca:d4:1e:39:1d:d6:c9:d4:ca:
         b6:9f:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org