Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/323830343a316131343a3a2f33322d3336203d3e203238313533.roa
File:                     323830343a316131343a3a2f33322d3336203d3e203238313533.roa (raw, json)
Hash identifier:          O2VqskAQlZQ6TkYJIMwYexqS6K/yb5ZyIpz+SSsh4sc=
Subject key identifier:   D2:AB:E2:D9:FA:8A:78:59:09:FA:8A:09:D1:BC:C7:A1:42:02:C3:01
Certificate issuer:       /CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
Certificate serial:       3864EABADEBB46D7C981FB676CA146FEDB587F83
Authority key identifier: 73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/323830343a316131343a3a2f33322d3336203d3e203238313533.roa
Signing time:             Thu 04 Apr 2024 13:28:35 +0000
ROA not before:           Thu 04 Apr 2024 13:23:35 +0000
ROA not after:            Thu 03 Apr 2025 13:28:35 +0000
asID:                     28153
IP address blocks:        2804:1a14::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:64:ea:ba:de:bb:46:d7:c9:81:fb:67:6c:a1:46:fe:db:58:7f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
        Validity
            Not Before: Apr  4 13:23:35 2024 GMT
            Not After : Apr  3 13:28:35 2025 GMT
        Subject: CN=D2ABE2D9FA8A785909FA8A09D1BCC7A14202C301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:ca:3e:0c:5e:b2:c2:74:d6:b9:e3:15:8d:
                    6f:47:cf:a2:70:d4:63:05:c6:ab:53:8e:53:dd:9d:
                    99:09:27:cb:74:dd:8c:5f:35:80:f4:ea:40:84:11:
                    0b:a7:a2:8d:7e:2a:82:2c:24:58:9a:9e:b6:71:63:
                    55:04:67:6b:34:4c:c0:c7:22:c0:b5:94:b1:91:ad:
                    f6:c7:48:c4:af:37:67:b6:f9:6d:0b:cd:1c:41:a7:
                    14:16:28:46:60:79:fb:ea:b7:64:6a:45:f2:53:5d:
                    f2:d9:9f:d2:a3:5e:2a:9a:04:2e:34:83:95:56:69:
                    3c:96:ad:3c:0a:7b:1f:76:4e:72:1a:0a:05:81:f8:
                    df:96:3c:6a:fa:0b:0f:a1:1b:48:aa:e0:40:c5:26:
                    ba:06:a6:52:8d:b3:05:9e:e4:7c:48:3e:8c:af:73:
                    50:1d:35:7d:8b:e5:c7:a9:c9:00:97:59:20:56:26:
                    de:4f:49:de:b7:78:f8:0b:66:d1:22:6f:d8:36:05:
                    62:6e:c5:96:5d:dd:f6:a0:70:d1:42:77:75:96:33:
                    c0:8e:09:ef:a0:d2:cf:e3:31:c5:76:93:ab:c8:32:
                    0c:85:61:2d:b1:f8:18:58:be:b4:15:53:42:a0:9c:
                    da:d3:80:98:09:37:c2:fb:c8:c6:90:c6:12:f0:2a:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AB:E2:D9:FA:8A:78:59:09:FA:8A:09:D1:BC:C7:A1:42:02:C3:01
            X509v3 Authority Key Identifier:
                keyid:73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/323830343a316131343a3a2f33322d3336203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:25:7f:ba:55:7a:32:f1:61:64:b5:b6:69:40:11:0b:6c:
         3a:bb:0e:19:71:15:61:75:97:2d:1d:dc:2c:d9:20:5f:03:d5:
         dc:d3:b9:05:83:0f:13:43:ee:a1:c5:ba:75:00:09:17:a9:cc:
         4f:b6:e8:48:58:ba:e5:1d:24:ce:97:00:4b:b2:7f:0a:2b:24:
         4a:a3:f5:d8:b0:cc:44:9c:df:b6:2d:91:65:f7:c5:d1:5e:69:
         92:14:4f:13:4c:ad:38:b2:54:cf:2f:4f:38:64:7c:ce:0d:bd:
         76:6b:25:f0:5f:7c:50:1c:6c:ca:94:3d:52:d2:a5:76:52:d6:
         81:40:5c:16:a4:8a:0d:de:b4:c9:49:41:b2:e9:3f:e2:97:77:
         83:d2:9a:d0:83:3b:6c:a9:5b:1d:2e:de:79:b5:90:43:95:82:
         23:5d:ef:08:fb:22:17:bc:3c:e8:80:77:76:f0:09:4c:7c:2a:
         ea:23:d7:fa:0f:b6:aa:c4:05:8b:0e:1b:fe:70:11:cc:fb:41:
         ab:fe:0a:9d:ca:1b:ca:10:94:ac:0f:91:8a:86:c5:11:06:82:
         68:23:b1:56:4d:85:12:01:fb:25:3f:53:c2:5a:d9:bd:64:60:
         f2:9c:32:1a:58:cb:47:e8:d2:a3:54:24:5a:79:12:01:e7:2f:
         fb:b8:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org