Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/323830343a356261343a3a2f33322d3335203d3e20323638383630.roa
File:                     323830343a356261343a3a2f33322d3335203d3e20323638383630.roa (raw, json)
Hash identifier:          43QARMhCa8Oegbrje8dFIf03WZv9yMMxRA4l2vfOkjM=
Subject key identifier:   91:EA:05:2C:69:A3:BB:80:BD:69:0C:27:59:32:4F:0D:BA:15:43:A1
Certificate issuer:       /CN=1CD763408DADC1A60111846459A04E70929F8FE8
Certificate serial:       4C68BB09743AA83B59B7BDA3F3ABD3D72E7D6679
Authority key identifier: 1C:D7:63:40:8D:AD:C1:A6:01:11:84:64:59:A0:4E:70:92:9F:8F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CD763408DADC1A60111846459A04E70929F8FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/323830343a356261343a3a2f33322d3335203d3e20323638383630.roa
Signing time:             Thu 04 Apr 2024 09:25:22 +0000
ROA not before:           Thu 04 Apr 2024 09:20:22 +0000
ROA not after:            Thu 03 Apr 2025 09:25:22 +0000
asID:                     268860
IP address blocks:        2804:5ba4::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/1CD763408DADC1A60111846459A04E70929F8FE8.crl
                          rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/1CD763408DADC1A60111846459A04E70929F8FE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CD763408DADC1A60111846459A04E70929F8FE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:68:bb:09:74:3a:a8:3b:59:b7:bd:a3:f3:ab:d3:d7:2e:7d:66:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CD763408DADC1A60111846459A04E70929F8FE8
        Validity
            Not Before: Apr  4 09:20:22 2024 GMT
            Not After : Apr  3 09:25:22 2025 GMT
        Subject: CN=91EA052C69A3BB80BD690C2759324F0DBA1543A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:6c:4c:4a:4e:9e:bc:de:f6:41:7c:cb:3f:
                    98:ed:05:9e:e0:2b:ac:f2:9c:8e:21:20:ee:7d:6e:
                    8e:75:ae:e9:8b:bc:dd:ef:c9:bc:7d:f1:5c:37:22:
                    cf:d7:ae:8b:ed:ee:a5:90:79:c5:05:f7:a3:67:94:
                    3c:34:16:6f:68:68:b5:12:0f:22:c5:ba:e4:cd:b4:
                    c0:c6:8c:2b:21:ae:71:9d:52:9c:53:53:5d:d4:ce:
                    45:f7:c0:87:66:75:1d:3b:fa:05:a0:90:06:b2:47:
                    0e:d2:27:9e:b9:39:bc:d6:65:a5:4d:b4:cb:40:7a:
                    ad:95:11:a4:2c:e9:dc:bf:ef:8f:15:dd:01:2e:1f:
                    c5:a7:70:47:4f:8c:49:18:ba:00:d9:f8:f6:07:4f:
                    69:1a:26:c0:fe:22:1b:39:b7:13:1d:b8:1b:83:58:
                    90:27:4a:83:a7:0a:5e:c5:43:16:73:12:a8:47:36:
                    14:9c:68:6b:60:15:f6:c1:87:06:75:81:c9:75:f9:
                    ad:0a:df:f8:68:04:bc:4b:b4:86:c8:19:f6:d9:7b:
                    ba:8b:67:0c:51:8c:b5:02:05:53:4a:33:4a:67:36:
                    e1:9b:a2:45:5b:ea:b6:9f:00:ea:28:a9:c4:45:15:
                    34:db:be:90:45:2d:07:81:6c:0c:66:06:f2:9e:4e:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:05:2C:69:A3:BB:80:BD:69:0C:27:59:32:4F:0D:BA:15:43:A1
            X509v3 Authority Key Identifier:
                keyid:1C:D7:63:40:8D:AD:C1:A6:01:11:84:64:59:A0:4E:70:92:9F:8F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/1CD763408DADC1A60111846459A04E70929F8FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CD763408DADC1A60111846459A04E70929F8FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/323830343a356261343a3a2f33322d3335203d3e20323638383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ba4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:a6:bf:ac:c0:9f:17:b2:4c:1a:c7:7e:5c:35:fb:57:61:
         2a:5b:f7:e0:31:d5:16:b9:e7:b7:74:e1:80:79:ea:65:52:62:
         a8:10:cc:45:68:e3:3f:b5:32:9f:9d:aa:11:7d:1d:46:12:4f:
         16:ca:1f:0a:2a:cc:24:88:6a:64:ed:e0:16:9a:4c:dc:53:f0:
         3a:7a:85:3f:ad:bf:13:50:a8:bf:ac:69:f2:d0:b2:66:e8:57:
         9e:e7:e1:10:2b:49:e0:ae:1f:9d:bc:b3:ca:48:b1:7a:c6:dd:
         0c:b2:1a:cb:24:01:65:23:ce:42:11:56:f2:de:e3:d3:a7:bf:
         9c:cf:af:83:7e:31:64:e1:ed:f2:ce:74:ca:20:bf:ce:cd:ab:
         cb:76:a1:a8:17:c7:9d:88:f3:89:0e:99:0a:a2:2d:7c:06:e8:
         ab:56:7d:43:b8:3f:b0:31:b8:34:f6:0f:df:a0:65:71:db:e5:
         f8:ca:53:cd:b0:be:f4:0b:a0:66:77:75:e2:20:62:f4:94:c7:
         81:6f:52:42:22:2d:d6:b0:fd:dc:72:f7:c4:b0:15:66:2a:8e:
         d8:0b:81:88:3a:74:f4:c9:52:65:68:27:03:cd:97:b2:07:0f:
         7a:6c:60:8a:e2:91:92:a8:11:3b:db:e6:f2:a6:2a:30:54:09:
         a9:6c:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org