Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa
File:                     323830343a353831383a3a2f33332d3334203d3e20323638313036.roa (raw, json)
Hash identifier:          ssP7rs3zs5sTkRXkFkHbTu4ZejnfrWVswJZqlbnpBUs=
Subject key identifier:   59:E1:84:8D:7F:7E:A0:43:4F:B8:B2:B1:75:75:BA:11:D0:77:41:FE
Certificate issuer:       /CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
Certificate serial:       278095DA35CB3616B6B159F35F8B16F93A67FD53
Authority key identifier: 17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa
Signing time:             Wed 03 Apr 2024 22:15:33 +0000
ROA not before:           Wed 03 Apr 2024 22:10:33 +0000
ROA not after:            Wed 02 Apr 2025 22:15:33 +0000
asID:                     268106
IP address blocks:        2804:5818::/33 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:80:95:da:35:cb:36:16:b6:b1:59:f3:5f:8b:16:f9:3a:67:fd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
        Validity
            Not Before: Apr  3 22:10:33 2024 GMT
            Not After : Apr  2 22:15:33 2025 GMT
        Subject: CN=59E1848D7F7EA0434FB8B2B17575BA11D07741FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:be:a0:2b:ab:da:75:12:5d:c0:c8:90:c8:
                    08:64:cf:97:5f:71:3a:9e:3d:78:86:d3:67:d7:fd:
                    9b:d7:41:3c:63:68:36:e8:f0:be:ee:4a:3a:61:0e:
                    c6:d2:cf:94:4f:e9:60:40:17:4c:8a:8f:0e:c8:18:
                    87:25:d8:3d:49:98:62:96:08:ea:52:3b:a2:76:d2:
                    a9:1c:27:2e:59:ad:36:62:f2:c4:7d:29:2b:7b:b7:
                    7c:1e:fa:a4:9c:b5:8a:af:2b:2a:d9:b6:69:8f:1d:
                    f5:70:99:fd:69:38:38:67:59:8b:f5:68:8e:a6:34:
                    9e:4c:d1:62:88:6d:10:37:da:54:80:08:17:b1:bc:
                    2c:4f:6f:63:96:48:0b:84:ec:6f:cf:c5:fa:30:4b:
                    52:fc:86:54:f6:33:84:c3:3b:11:09:47:79:7f:45:
                    2f:d6:5c:5e:44:d3:22:02:88:7a:c9:61:b6:3c:c6:
                    d7:32:05:ee:e2:39:8e:94:18:97:90:03:de:0d:15:
                    ba:78:50:8f:10:47:ae:59:4a:87:4e:20:70:f5:dc:
                    5e:6b:bc:c8:51:3a:ae:64:4e:f4:e4:2c:b3:bc:87:
                    ca:2d:4b:0e:42:d9:47:72:38:fd:d9:05:96:cc:05:
                    4c:6a:73:cb:ba:88:7e:24:31:ed:61:29:33:b1:39:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E1:84:8D:7F:7E:A0:43:4F:B8:B2:B1:75:75:BA:11:D0:77:41:FE
            X509v3 Authority Key Identifier:
                keyid:17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:92:8f:f7:40:29:8d:2a:06:48:7a:cf:5f:c3:88:08:85:f9:
         ba:dc:dd:68:b2:cb:a5:08:71:a7:db:77:0d:ad:1f:7f:49:3f:
         68:22:ee:34:04:ef:82:55:6a:87:d8:99:95:23:c4:f5:e7:3e:
         02:0a:5c:e6:67:43:22:63:24:7b:28:79:ba:ae:25:5a:bf:7a:
         90:42:47:b6:14:2a:1d:2b:8d:82:42:4f:1c:41:6f:7c:a0:bf:
         e1:f4:ea:b7:f8:4b:37:bb:b5:d8:94:1b:e6:b9:04:37:34:40:
         9f:79:92:04:bf:67:bc:1e:af:7a:17:e1:ba:0a:bb:05:b7:78:
         aa:be:73:51:53:09:92:ce:86:96:ae:c3:d1:12:76:27:b5:cc:
         df:b8:7f:d2:8b:d7:e5:00:59:8e:3d:b2:10:b6:27:3b:41:42:
         c6:71:2d:66:bd:2d:7a:16:19:8b:79:08:ff:dd:aa:28:21:6a:
         a2:30:e4:fa:0f:d4:05:9c:e6:6c:51:6e:6c:8a:72:22:c5:0b:
         fc:70:a8:22:12:14:b0:b2:1a:e1:a0:bf:11:67:50:6f:0d:de:
         89:a5:81:37:77:8f:a3:af:ff:65:20:18:b4:4d:80:bb:f3:84:
         5c:aa:f3:80:12:59:15:b6:b9:be:b9:6c:5f:0a:c6:28:01:65:
         5f:d2:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org