Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/323830343a356637633a3a2f33322d313238203d3e20323639313033.roa
File:                     323830343a356637633a3a2f33322d313238203d3e20323639313033.roa (raw, json)
Hash identifier:          IEQYH61AZNUIPQqaQD7CtYAT9RoDCMuJFawTWAELlFc=
Subject key identifier:   A3:95:BC:ED:47:5B:79:5D:F2:53:15:00:1A:52:00:F9:82:27:3F:1B
Certificate issuer:       /CN=C37D443ACE2088B9542008EA9127A8D95802391D
Certificate serial:       36C9C8B5802DBF896AC6935CCDD12771E1F1CD5C
Authority key identifier: C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/323830343a356637633a3a2f33322d313238203d3e20323639313033.roa
Signing time:             Mon 14 Oct 2024 17:05:29 +0000
ROA not before:           Mon 14 Oct 2024 17:00:29 +0000
ROA not after:            Mon 13 Oct 2025 17:05:29 +0000
asID:                     269103
IP address blocks:        2804:5f7c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl
                          rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c9:c8:b5:80:2d:bf:89:6a:c6:93:5c:cd:d1:27:71:e1:f1:cd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37D443ACE2088B9542008EA9127A8D95802391D
        Validity
            Not Before: Oct 14 17:00:29 2024 GMT
            Not After : Oct 13 17:05:29 2025 GMT
        Subject: CN=A395BCED475B795DF25315001A5200F982273F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:dc:e8:31:83:ef:3e:c9:c7:a8:4d:96:58:
                    c4:61:05:82:eb:b8:74:05:60:98:1d:60:3f:74:3b:
                    2b:28:21:81:83:20:2d:2c:c7:62:d2:4f:a0:f9:e0:
                    6c:14:a2:a9:e7:df:26:ce:b8:bf:c9:9f:3c:18:38:
                    2a:a1:47:c3:37:63:dd:5b:d6:a5:40:0d:1c:63:5e:
                    e2:c5:c8:a1:33:30:0f:94:33:56:a9:54:e1:d9:07:
                    9d:e1:7f:02:d8:48:0a:47:73:ed:92:1f:53:44:99:
                    c5:23:b0:c2:bb:27:e0:84:99:2a:37:64:65:de:f2:
                    f9:0f:3e:fb:60:78:39:1c:cd:05:ec:33:c2:d8:37:
                    9e:48:a4:ea:21:1e:ab:d7:cf:a8:5f:14:a7:c3:c1:
                    85:d1:af:8d:52:77:cf:f8:68:3f:bb:f6:00:ea:3f:
                    8b:25:cc:db:fa:e1:fc:f4:e0:90:31:54:c6:c0:14:
                    de:ea:9a:af:9a:ea:bf:20:5f:2a:1d:5c:be:7e:e8:
                    b7:96:1e:85:28:56:f6:cd:fd:05:39:61:62:21:c3:
                    39:73:38:4f:70:88:01:d4:f4:68:c1:ad:b2:4b:31:
                    39:17:b7:17:57:0c:32:35:5a:af:90:8a:61:8f:0f:
                    ab:ae:96:4c:be:68:28:c8:a1:3f:38:e7:55:c7:d1:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:95:BC:ED:47:5B:79:5D:F2:53:15:00:1A:52:00:F9:82:27:3F:1B
            X509v3 Authority Key Identifier:
                keyid:C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/323830343a356637633a3a2f33322d313238203d3e20323639313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:58:a5:33:8f:fb:c0:77:27:8b:bc:ac:d3:c9:73:db:7e:
         03:07:27:b8:7d:17:a2:5f:42:a3:bc:71:9e:d4:3b:a7:ce:b5:
         77:c2:28:6f:e4:4f:aa:20:1d:54:2a:7d:16:c7:e2:3d:58:20:
         89:7d:46:17:1f:2b:77:b5:23:74:8e:7a:9a:e3:b4:15:b5:81:
         ab:ed:41:f6:06:5b:fc:0b:fb:67:06:cc:ee:dc:26:b9:da:bb:
         37:af:e9:61:75:3f:67:31:a3:50:85:81:83:03:2a:52:10:4a:
         ac:2e:73:93:28:4e:a7:74:6d:5a:c8:18:d1:11:0f:34:8e:85:
         65:22:27:bf:62:19:f4:42:b3:ff:c4:82:e5:02:a1:ac:a5:0d:
         2b:c3:f9:02:6c:a0:a6:da:bc:22:10:22:0a:08:4f:0a:32:cc:
         aa:98:11:55:c6:2b:11:db:5d:b3:dd:d1:c6:62:36:48:5d:d6:
         c0:23:05:eb:a6:73:31:9a:b3:59:78:5c:15:1e:13:34:22:5b:
         09:57:18:5c:c8:31:11:2e:39:7f:96:a3:c5:a2:1b:9f:0a:7a:
         23:ed:1d:66:fb:94:7c:81:63:37:68:21:96:2d:10:71:18:3a:
         ea:36:99:5d:1a:2f:2c:49:c5:fa:72:46:73:de:7f:a0:f5:f5:
         86:91:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:05 2024 by rpki-client on console-fra.rpki-client.org