Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/323830343a326262303a383030303a3a2f33332d3333203d3e20323635313639.roa
File:                     323830343a326262303a383030303a3a2f33332d3333203d3e20323635313639.roa (raw, json)
Hash identifier:          xtqRLaehaUsZdyS/P5TkdNnwOoNIS1kjmowpvqN63Z4=
Subject key identifier:   D2:E5:40:D8:07:8D:65:EF:D8:E6:AE:2D:90:4A:28:90:5F:CF:EA:CC
Certificate issuer:       /CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
Certificate serial:       2E990A94DB163DCB92A4EBF9FDEB8E69E7E86F27
Authority key identifier: E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/323830343a326262303a383030303a3a2f33332d3333203d3e20323635313639.roa
Signing time:             Thu 04 Apr 2024 00:22:49 +0000
ROA not before:           Thu 04 Apr 2024 00:17:49 +0000
ROA not after:            Thu 03 Apr 2025 00:22:49 +0000
asID:                     265169
IP address blocks:        2804:2bb0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl
                          rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:99:0a:94:db:16:3d:cb:92:a4:eb:f9:fd:eb:8e:69:e7:e8:6f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
        Validity
            Not Before: Apr  4 00:17:49 2024 GMT
            Not After : Apr  3 00:22:49 2025 GMT
        Subject: CN=D2E540D8078D65EFD8E6AE2D904A28905FCFEACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:dd:a3:72:3e:5d:4c:04:12:b8:b6:9f:bd:
                    f7:dc:07:c4:2a:ec:34:df:a2:cd:c7:7e:98:c8:e2:
                    2c:a5:ef:88:81:ed:60:ef:60:c0:00:2e:46:40:63:
                    c5:90:f2:5d:24:82:55:eb:92:3f:99:77:00:73:c5:
                    32:e6:46:ca:b5:94:cf:ef:be:0e:ec:6e:d5:65:e4:
                    3e:84:c8:05:2f:0a:71:af:5e:e3:a8:94:2f:06:8b:
                    53:83:b4:4a:4b:5c:b0:c3:1f:54:ae:19:a6:1d:f6:
                    80:f9:52:4c:60:1f:e2:54:21:e6:d8:b1:3f:56:d1:
                    7f:f5:ed:11:98:a8:ec:68:2f:d8:ca:a8:8e:87:2c:
                    59:b3:86:bb:43:55:fe:73:02:f0:89:c8:90:c7:7e:
                    26:28:67:65:02:8a:79:61:0e:ee:9e:d9:03:a3:c4:
                    9f:5c:c3:bf:80:21:39:28:69:08:00:95:1b:59:53:
                    8b:cc:e7:9e:00:59:d8:f8:88:57:29:3b:a2:fd:e5:
                    c4:f4:f6:3f:dd:72:c9:c0:9c:86:85:98:bf:2b:93:
                    94:74:f4:0e:7d:61:46:6c:d6:13:b2:d3:40:d6:b8:
                    27:31:6b:08:c9:65:45:3b:65:b1:20:6a:65:d7:cb:
                    89:91:44:70:48:7c:9b:71:41:27:58:a0:15:35:26:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E5:40:D8:07:8D:65:EF:D8:E6:AE:2D:90:4A:28:90:5F:CF:EA:CC
            X509v3 Authority Key Identifier:
                keyid:E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/323830343a326262303a383030303a3a2f33332d3333203d3e20323635313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bb0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:4c:91:ee:70:f4:fb:f2:9f:e5:44:cd:bf:c6:32:82:a2:
         20:51:a5:ad:ad:f8:5c:52:4c:a5:9b:da:e6:df:a9:b7:ed:4e:
         41:db:99:8b:64:5d:8f:36:95:3c:4c:29:2d:b0:74:bc:91:f0:
         9e:0b:98:bd:31:6f:d3:7b:17:e4:b9:e9:74:75:80:ec:0c:0c:
         fd:82:e4:1f:01:d6:27:ef:50:3e:b3:40:10:12:dd:02:a8:a7:
         0f:ba:f4:5b:43:8b:df:65:11:43:c4:b3:82:e7:fd:c7:68:0d:
         7f:1b:82:ab:d6:b7:51:fc:df:87:74:57:95:1d:5c:8d:09:00:
         aa:17:04:08:ee:f4:e4:4d:6d:02:f7:08:45:15:ca:fc:ee:e2:
         05:8e:66:dd:cc:1f:63:cd:98:83:ae:85:46:a6:94:bd:3c:af:
         5c:2d:10:e1:9b:f7:7e:39:43:56:03:1e:02:63:23:4f:79:1e:
         0a:1b:96:a1:2c:9c:9d:4b:74:c7:3f:b0:9d:a5:f3:37:f9:67:
         d2:53:f0:bf:7a:95:d9:d0:65:fe:42:c8:ed:d8:b8:67:20:75:
         5d:1a:0a:4b:f7:12:70:b6:62:f8:ea:00:fd:27:14:5d:5a:fb:
         f1:37:2d:dd:e0:87:77:d0:5a:ec:69:47:e9:e8:8b:03:db:0a:
         d7:24:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:27 2024 by rpki-client on console-fra.rpki-client.org