Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa
File:                     323830343a386435343a3a2f33322d3335203d3e20323733333530.roa (raw, json)
Hash identifier:          RLwoZ5ZwsOIv0+HGzD9yNQ738yo8V60YRA0iEePJ+RM=
Subject key identifier:   00:86:13:A6:AC:69:6E:18:D5:48:81:72:AA:78:C9:F1:48:32:87:CF
Certificate issuer:       /CN=613FAA413557F145002B707154580B79D61AF413
Certificate serial:       7675AE760FF2EA41D57463AEE4B97B45E52AD6BA
Authority key identifier: 61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa
Signing time:             Thu 04 Apr 2024 10:57:18 +0000
ROA not before:           Thu 04 Apr 2024 10:52:18 +0000
ROA not after:            Thu 03 Apr 2025 10:57:18 +0000
asID:                     273350
IP address blocks:        2804:8d54::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl
                          rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:75:ae:76:0f:f2:ea:41:d5:74:63:ae:e4:b9:7b:45:e5:2a:d6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613FAA413557F145002B707154580B79D61AF413
        Validity
            Not Before: Apr  4 10:52:18 2024 GMT
            Not After : Apr  3 10:57:18 2025 GMT
        Subject: CN=008613A6AC696E18D5488172AA78C9F1483287CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:af:72:90:21:15:98:b5:a4:f6:3e:a2:23:eb:
                    b7:ab:50:71:4e:d3:3d:2e:ef:f4:94:04:f5:55:64:
                    72:ce:40:f1:ca:e1:b4:52:8e:72:83:27:ee:88:78:
                    ad:93:b7:3f:44:28:db:c6:cf:71:61:0a:1c:56:81:
                    aa:15:73:e4:82:e9:22:8a:2e:c5:4a:66:40:29:24:
                    25:76:a9:a1:cf:f7:db:db:c1:e5:cd:57:43:7d:61:
                    ca:e7:96:bc:4b:e4:4e:95:8a:8e:4b:46:86:f4:89:
                    d1:8f:d8:2e:4a:b0:d2:25:70:1c:cd:29:ef:9b:ee:
                    74:68:73:a6:f4:29:cd:1f:cd:b2:66:ef:ec:6f:ec:
                    58:11:89:8a:bb:c2:9b:b3:58:bc:3b:00:66:11:8c:
                    dc:f3:1b:08:e8:e1:d9:97:d3:c7:c8:82:dc:a4:45:
                    cb:26:be:08:92:40:87:8a:6a:3b:3b:c8:d2:f7:35:
                    32:cb:dc:d7:f8:08:e3:5e:fc:d3:c1:23:06:57:2f:
                    84:4c:4a:ea:88:8a:75:9a:54:6c:a4:ba:ff:e0:e9:
                    75:3e:01:39:63:27:90:02:dc:24:43:c8:82:ae:37:
                    8b:7b:7e:7c:8b:33:9b:c2:8b:a7:db:a3:12:95:06:
                    a3:db:a5:fb:67:d2:a8:ff:87:18:47:14:90:b7:fa:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:86:13:A6:AC:69:6E:18:D5:48:81:72:AA:78:C9:F1:48:32:87:CF
            X509v3 Authority Key Identifier:
                keyid:61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:d4:02:48:74:73:8c:d3:99:88:41:3a:fb:36:d4:8a:7c:
         80:a8:9b:b3:65:04:c2:bc:23:c6:de:f9:aa:b0:5f:9a:9e:fb:
         d5:f2:2d:58:28:42:16:ba:94:39:bb:98:99:8f:ca:1c:22:07:
         44:02:0b:94:d4:ef:b3:5c:78:45:67:cc:00:bd:96:cc:28:2c:
         ad:c0:4a:f6:72:70:46:df:61:d2:a6:d7:0f:e4:07:40:e7:99:
         73:1c:88:8f:77:fd:ca:59:83:d1:c4:ab:ef:22:88:f7:2b:6c:
         3a:34:ce:26:53:c8:cd:56:b3:ad:68:a0:f8:3d:d0:e0:77:2e:
         d3:05:d2:89:28:df:50:fd:60:b5:c2:2e:77:79:5e:d5:82:78:
         33:b3:ed:0d:a8:30:75:aa:eb:f1:d3:e7:a0:64:e7:f7:ca:f7:
         42:1b:70:06:37:e7:ed:06:67:04:97:41:d0:8b:b3:83:27:1d:
         b3:d1:f0:68:67:9c:c3:0c:14:b7:3c:6a:72:d5:eb:f3:44:a0:
         4a:28:25:21:10:fe:1c:a5:68:92:78:82:94:07:a4:71:fb:5d:
         ba:fe:5c:c8:bc:92:06:5b:55:cf:1e:17:68:74:47:b4:ce:f1:
         66:98:93:7d:7f:35:23:01:9c:80:db:69:58:fb:a7:6b:cb:8a:
         51:46:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org