Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/323830343a323565383a3a2f33322d3336203d3e20323634333130.roa
File:                     323830343a323565383a3a2f33322d3336203d3e20323634333130.roa (raw, json)
Hash identifier:          XzcqISPfCm5AFL6O006XPuOjOsPfFkrWFzYkzwR4+2I=
Subject key identifier:   74:87:9D:D4:C0:76:05:6E:83:0D:93:B7:BA:8B:19:31:C7:AC:E3:3F
Certificate issuer:       /CN=ADBBDC22DFFC572346705DC21FD364B79726B65C
Certificate serial:       38B163F0E599924D0434F760069326BCA03CE916
Authority key identifier: AD:BB:DC:22:DF:FC:57:23:46:70:5D:C2:1F:D3:64:B7:97:26:B6:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/323830343a323565383a3a2f33322d3336203d3e20323634333130.roa
Signing time:             Wed 07 Aug 2024 16:54:47 +0000
ROA not before:           Wed 07 Aug 2024 16:49:47 +0000
ROA not after:            Wed 06 Aug 2025 16:54:47 +0000
asID:                     264310
IP address blocks:        2804:25e8::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.crl
                          rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b1:63:f0:e5:99:92:4d:04:34:f7:60:06:93:26:bc:a0:3c:e9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADBBDC22DFFC572346705DC21FD364B79726B65C
        Validity
            Not Before: Aug  7 16:49:47 2024 GMT
            Not After : Aug  6 16:54:47 2025 GMT
        Subject: CN=74879DD4C076056E830D93B7BA8B1931C7ACE33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:d3:56:d3:e9:24:06:b8:81:af:15:1f:46:
                    e6:b8:3a:7f:6c:d4:47:45:9c:8e:39:72:d0:64:08:
                    ff:55:2b:d9:01:9f:0b:ad:57:24:ba:c4:92:88:d7:
                    35:3a:66:bf:ed:d2:f7:70:08:a0:0b:8d:e7:29:96:
                    7a:12:09:49:2d:6d:9d:fb:97:55:16:cf:95:4f:f0:
                    69:10:ec:f8:a0:66:fa:8a:37:c3:60:5b:d7:a7:0e:
                    aa:db:fc:45:76:e9:8b:10:c5:15:55:3d:0b:54:f5:
                    85:7e:9f:5c:86:d8:40:14:09:a9:65:e9:04:1c:a5:
                    53:9a:43:ba:52:68:55:fb:8f:ce:19:b1:55:be:46:
                    98:2c:73:da:32:37:b5:cd:ca:44:90:46:bd:85:03:
                    5c:9e:35:c0:75:88:76:9b:c5:10:27:27:4d:90:2e:
                    1b:45:96:96:35:4e:f5:8d:3a:6e:57:6f:0e:09:90:
                    4e:7e:af:f0:d9:6e:ad:9c:f9:bd:2c:ed:46:ec:d9:
                    b8:39:21:ec:79:53:75:e2:ce:c4:69:e2:a9:cc:8b:
                    8f:e0:05:69:95:4a:f2:fa:f1:36:e6:03:24:8a:c8:
                    ac:78:ea:51:0b:a4:c9:66:b6:c4:07:a2:1e:5a:bd:
                    6c:5c:aa:59:ff:e1:ba:90:be:f8:9b:4d:4e:33:ce:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:87:9D:D4:C0:76:05:6E:83:0D:93:B7:BA:8B:19:31:C7:AC:E3:3F
            X509v3 Authority Key Identifier:
                keyid:AD:BB:DC:22:DF:FC:57:23:46:70:5D:C2:1F:D3:64:B7:97:26:B6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/323830343a323565383a3a2f33322d3336203d3e20323634333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:8c:1b:61:03:11:4c:8f:4e:2c:24:e3:90:7d:5c:e6:bd:
         a5:b7:07:a8:a8:e8:30:8e:8f:d0:a0:37:cd:b4:c5:0b:41:2f:
         24:38:49:35:a8:28:42:96:ef:9b:90:5e:fc:c7:d2:dc:42:c0:
         52:0b:3d:92:c7:71:a4:27:ac:13:61:bc:bb:e4:1c:31:e8:50:
         c5:65:dd:fb:2d:6c:c1:e8:b2:ce:da:4f:24:ae:a1:ac:1c:d4:
         d1:71:82:1f:f4:d1:2e:bc:70:87:82:95:96:05:12:3d:ae:2c:
         10:44:b8:c1:50:98:84:28:c5:2b:f9:71:f3:53:34:3d:36:ba:
         12:45:af:c2:a2:18:92:ab:12:26:0a:44:50:6a:76:32:f9:1d:
         7d:b6:b3:24:e6:c5:df:a6:e8:8e:46:62:d8:10:d2:3c:be:54:
         b9:b8:84:3c:fd:ec:e2:37:22:36:1b:5b:05:dc:47:9b:d8:4b:
         8e:98:e5:22:67:26:ac:f8:07:0e:da:fb:fc:a2:0a:fd:1f:a6:
         99:9b:b9:03:58:be:5f:0b:71:fb:b7:09:fe:de:94:dd:4e:61:
         63:30:cf:6f:34:71:ef:f1:cb:54:00:c2:fe:be:e9:86:9d:30:
         f1:82:af:94:6b:8c:f0:8d:0f:5c:e3:1c:b3:7d:cf:e2:fe:da:
         ce:60:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:51 2024 by rpki-client on console-fra.rpki-client.org