Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3430203d3e203533323336.roa
File:                     323830343a3266303a3a2f33362d3430203d3e203533323336.roa (raw, json)
Hash identifier:          9i7fK6zuQAVBzqrLesqsqpJIAETHqlfiPoTiruOBoec=
Subject key identifier:   85:C3:BC:F9:D9:7A:0C:82:D3:8E:BE:F4:FA:3A:84:C6:35:FB:36:85
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       0AF8DF67DEA8C817FEE02F61021650C5AAC0FD18
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3430203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     53236
IP address blocks:        2804:2f0::/36 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f8:df:67:de:a8:c8:17:fe:e0:2f:61:02:16:50:c5:aa:c0:fd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:c5:f2:3d:bf:68:69:bc:ad:cf:9b:10:09:
                    38:57:ff:23:39:6f:62:66:1d:cd:e1:e8:16:10:22:
                    cf:25:4b:8e:9c:cb:7b:04:13:54:9a:5e:6c:f9:fc:
                    77:89:92:bc:b7:45:8b:52:22:e2:ef:29:a8:40:1a:
                    56:85:ac:de:9b:bc:d3:78:f9:0d:40:3d:0d:03:5f:
                    21:36:4c:25:e0:3e:22:2f:c9:b1:25:e9:6a:19:d9:
                    07:fe:11:c2:42:97:0f:ce:ed:03:97:eb:e7:10:82:
                    7a:52:48:6d:9d:35:b3:4d:7e:9c:6d:b6:29:9e:5b:
                    99:30:df:e5:f7:e2:3f:bf:15:e4:75:b8:4a:0c:30:
                    81:6a:73:a7:dc:6b:f3:53:c3:b0:d7:ea:f4:b8:c7:
                    c0:7e:a8:10:ce:28:bf:13:e7:77:42:23:e4:85:88:
                    7f:eb:8c:b9:ec:70:42:bf:b1:8d:da:43:82:b4:7a:
                    6c:b2:af:d6:dd:7d:01:74:96:cf:6e:06:86:94:d9:
                    26:94:eb:25:f1:e8:8f:58:bd:55:09:29:4d:58:2c:
                    8b:86:c9:33:f9:31:3d:05:af:1f:d3:20:8a:83:4f:
                    b9:5d:50:74:92:85:2a:a7:7c:ed:75:10:ff:f3:5d:
                    d2:af:03:13:fa:13:79:50:14:e8:37:95:0b:94:5c:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:BC:F9:D9:7A:0C:82:D3:8E:BE:F4:FA:3A:84:C6:35:FB:36:85
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3430203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:2d:fb:96:89:b3:0c:e8:d2:44:ce:5b:d4:3f:83:f3:80:
         4c:62:3f:5e:34:58:bf:40:c1:ec:fa:70:a8:1c:a9:aa:24:7e:
         7e:8b:e0:9c:08:27:8c:57:a3:70:be:14:e6:39:91:95:ac:3b:
         51:e5:89:5e:df:a9:b1:2a:43:78:8c:97:ed:e5:ac:bd:7d:50:
         06:de:6d:04:68:a9:8e:01:42:00:20:2f:32:ad:6a:35:d7:8c:
         4c:34:f0:30:02:4f:39:6c:1e:35:6e:3a:35:2c:b3:57:2e:03:
         4c:bb:ed:51:82:42:1f:78:f2:1d:58:11:b7:95:8d:ef:aa:90:
         94:9e:74:4d:04:e1:03:64:4d:58:ef:ee:62:47:a3:5d:52:74:
         05:60:9d:71:6c:48:68:fd:80:07:94:63:e2:b3:7e:4a:2c:14:
         3e:b3:81:5b:8a:10:cd:b7:7e:d7:f7:72:91:19:ce:7a:05:28:
         df:5c:6f:23:62:01:6c:55:fb:e1:bb:b4:cf:aa:1e:1b:c3:40:
         32:ca:3f:36:46:11:69:3d:ca:7c:47:46:77:ed:79:2c:51:3c:
         41:9e:61:56:c0:08:57:be:cf:1f:2d:56:1e:44:ee:51:b0:90:
         1f:ad:4b:d8:d8:38:1a:16:49:83:bb:04:0f:bb:48:38:88:01:
         ea:45:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:06 2024 by rpki-client on console-fra.rpki-client.org