Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33322d3438203d3e20323633343139.roa
File:                     323830343a313566303a3a2f33322d3438203d3e20323633343139.roa (raw, json)
Hash identifier:          xQe03CH3MB5JEPJozQIf40tpYuTWnp/H84/XEw0Yxmc=
Subject key identifier:   92:39:7C:4E:64:F7:E1:78:7F:6B:39:CF:7C:98:0B:01:7B:94:70:66
Certificate issuer:       /CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
Certificate serial:       0C2DDB0367BF947D1BCF5AFDB799E8FA9F8FB749
Authority key identifier: 69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33322d3438203d3e20323633343139.roa
Signing time:             Wed 05 Jun 2024 19:03:29 +0000
ROA not before:           Wed 05 Jun 2024 18:58:29 +0000
ROA not after:            Wed 04 Jun 2025 19:03:29 +0000
asID:                     263419
IP address blocks:        2804:15f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl
                          rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:db:03:67:bf:94:7d:1b:cf:5a:fd:b7:99:e8:fa:9f:8f:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
        Validity
            Not Before: Jun  5 18:58:29 2024 GMT
            Not After : Jun  4 19:03:29 2025 GMT
        Subject: CN=92397C4E64F7E1787F6B39CF7C980B017B947066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:52:1a:a4:85:48:ee:27:81:68:9c:e5:91:5e:
                    23:cc:21:39:e8:8f:36:ca:c3:9b:30:9a:cb:50:29:
                    b6:9c:11:d4:04:e7:34:5d:93:87:be:80:f7:90:d4:
                    d5:94:37:e8:5e:91:3e:b7:4f:b7:c7:2b:3b:be:2c:
                    87:8a:ac:ab:90:0c:e4:3d:9a:1e:05:31:f3:c4:27:
                    ea:1f:6a:0a:aa:9c:13:08:b1:07:b3:8c:88:31:e8:
                    d4:00:72:b8:7a:d1:55:54:93:16:15:9f:1b:b4:6f:
                    8f:88:a1:95:a3:ef:0d:ff:19:fe:89:d4:d3:25:7c:
                    73:f2:4f:42:49:07:fd:17:58:36:a9:04:60:10:02:
                    ed:a9:fe:4a:79:bc:02:20:83:4d:0d:79:51:16:bd:
                    e6:7a:4a:ae:e7:4a:61:a6:64:e0:d0:ec:14:44:1a:
                    c2:92:e7:a9:45:fd:3d:f1:31:d4:c3:23:d1:39:19:
                    8c:51:86:d5:66:68:99:7f:a8:a8:11:b7:d8:cb:df:
                    89:b3:cc:b0:3b:48:f8:51:59:1b:32:3c:f3:ae:7e:
                    ac:c4:f5:11:f6:ec:8a:d8:67:59:0d:4f:45:56:f6:
                    56:02:bd:52:35:a7:75:33:61:49:61:eb:8e:73:ea:
                    85:3e:81:a8:39:20:15:7f:9a:7a:61:16:e4:c3:0e:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:39:7C:4E:64:F7:E1:78:7F:6B:39:CF:7C:98:0B:01:7B:94:70:66
            X509v3 Authority Key Identifier:
                keyid:69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33322d3438203d3e20323633343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:94:61:c3:4a:69:e5:72:3c:b4:45:d6:fd:10:15:dc:8a:
         53:7d:bd:b0:ab:62:08:31:d4:da:8c:41:f3:34:de:8a:47:47:
         2e:83:69:56:e7:05:3c:ea:aa:96:68:5a:60:f0:e3:20:9e:ea:
         e3:20:32:68:16:22:79:d5:cd:67:1b:a2:9f:5e:c9:7d:3a:65:
         77:76:65:95:0b:85:65:a2:fc:1e:8b:0b:96:88:6b:05:37:aa:
         bc:6b:c4:49:2e:b8:ca:05:7a:cb:d7:5b:80:8d:f0:ff:1e:74:
         a2:0a:78:2c:b2:7d:ee:09:10:f9:8a:fa:a9:f1:a2:89:33:56:
         56:a2:2b:6b:7b:93:b0:66:98:79:ab:ae:08:8f:5d:50:c4:92:
         6d:c6:0d:31:c8:c1:b5:f3:f1:d4:c3:6b:86:6c:23:ed:ad:27:
         8a:34:e7:96:91:ab:d2:bb:c8:97:55:4f:7a:6e:e9:0c:48:9a:
         16:16:13:53:23:31:e6:fc:24:9a:87:49:16:77:29:2f:48:fa:
         4d:e9:cd:83:93:05:03:12:62:4e:77:90:18:bf:6f:bf:a3:c0:
         67:9b:e0:51:95:79:b4:2d:b6:e3:88:68:23:d5:fd:45:11:c2:
         80:c4:49:7c:f5:26:2a:0f:00:c8:43:d0:99:61:69:b9:9b:71:
         79:de:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:04 2024 by rpki-client on console-ams.rpki-client.org