Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f34302d3430203d3e203533323336.roa
File:                     323830343a3266303a3a2f34302d3430203d3e203533323336.roa (raw, json)
Hash identifier:          qLmGGgLhlrkXenivcl+HhYjBvpGAHmsFRf1pQbp3bxE=
Subject key identifier:   8F:EA:BF:6F:21:DF:56:EA:5B:65:5A:BB:63:2F:96:86:DC:33:D1:3E
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       53D8436A0FAD2C18CA187E788D4DD86A4F90ADB5
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f34302d3430203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     53236
IP address blocks:        2804:2f0::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d8:43:6a:0f:ad:2c:18:ca:18:7e:78:8d:4d:d8:6a:4f:90:ad:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:8e:a3:1c:6e:8c:3e:ab:f4:7c:c6:8a:a6:
                    e6:dc:ba:fb:52:71:02:77:aa:5a:07:ec:c3:89:bf:
                    dd:54:da:21:85:f5:db:5d:b8:68:cb:ad:8d:2c:a4:
                    1f:5a:57:5d:89:dd:47:88:d1:64:9e:d3:55:9f:a1:
                    e2:e5:d9:75:ac:3d:0c:96:94:31:46:24:f1:f9:6d:
                    37:03:04:a7:81:66:e4:54:7d:2f:91:75:45:14:6e:
                    6c:b1:17:8b:1f:3f:a0:f2:90:4e:93:ba:d0:61:10:
                    34:29:4c:43:75:dd:a2:5d:21:97:76:7b:0d:53:04:
                    47:ca:75:e7:88:1c:cc:34:a8:72:46:6e:60:88:73:
                    45:9d:b9:77:f1:19:d1:17:7a:f2:f5:1c:b0:ae:c7:
                    12:f8:36:c8:f0:ac:5a:97:cf:67:e8:7a:da:4a:ed:
                    cc:44:91:5e:4b:eb:23:f4:11:93:d7:66:79:ad:e2:
                    5c:14:4d:09:37:04:3b:b7:82:fc:cc:c4:d3:17:78:
                    43:bf:a5:28:c3:00:23:69:66:cf:0c:d0:bd:23:c8:
                    c2:72:a5:31:e8:31:37:78:a6:06:98:8a:2e:ea:dc:
                    0e:2b:07:d5:47:8f:f4:0f:83:14:1b:94:e5:5c:ef:
                    8d:28:dc:a2:0d:51:69:d8:f7:bd:22:c9:b7:32:16:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EA:BF:6F:21:DF:56:EA:5B:65:5A:BB:63:2F:96:86:DC:33:D1:3E
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f34302d3430203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:76:6c:18:36:04:e7:4d:8f:a0:9a:df:a0:c2:05:a0:e0:de:
         68:f6:e3:74:7d:8f:6f:71:fc:8e:40:54:14:99:97:65:94:06:
         f4:f7:85:52:3c:31:dd:5e:19:8d:aa:f1:7e:ce:0f:b0:b2:50:
         d8:ba:8b:55:75:69:d7:8f:8d:49:42:10:68:d9:1c:ff:2d:89:
         5b:3d:34:be:24:05:93:74:0f:3f:57:25:01:5f:e7:60:1d:d9:
         63:1c:d1:4d:a5:16:a0:5a:da:4e:c0:79:db:19:c1:39:ef:f9:
         18:ad:71:2a:82:c1:bc:d7:82:66:7f:00:f1:61:30:fb:8e:b6:
         b0:31:16:ab:be:06:81:60:7e:4f:65:7f:7e:c1:c9:82:d8:e3:
         d7:8d:21:1f:05:c1:f2:9c:c3:86:4d:5d:02:d3:2e:73:b0:a4:
         35:4d:2e:be:9f:a1:41:53:a4:01:6b:cd:62:8d:14:ee:e7:53:
         ff:d7:a4:c7:62:d2:4b:90:75:b7:29:c8:db:72:64:db:41:5e:
         3c:13:f8:29:c1:eb:e1:ea:df:d3:e0:64:77:ce:cf:c7:2d:7a:
         2e:b5:a6:a6:c1:d1:a6:91:f6:d0:1c:0d:f6:9d:d3:7f:0a:ce:
         56:9b:ce:c5:cb:49:45:cb:3d:04:43:3f:2c:a4:bf:e8:b0:89:
         42:68:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org