Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa
File:                     323830343a323736303a3a2f33332d3333203d3e20323633383937.roa (raw, json)
Hash identifier:          bK9FcF4FfQQ0xOEETfBXjE7w3xni0HDXydgHyeExaX8=
Subject key identifier:   9B:A8:E9:AD:E9:A7:96:00:F5:27:02:AB:FC:F0:F7:57:A9:7E:25:22
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       55526541E1FD2EB77189C02FD7E95FB3E1A860A2
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa
Signing time:             Thu 04 Apr 2024 21:00:58 +0000
ROA not before:           Thu 04 Apr 2024 20:55:58 +0000
ROA not after:            Thu 03 Apr 2025 21:00:58 +0000
asID:                     263897
IP address blocks:        2804:2760::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:52:65:41:e1:fd:2e:b7:71:89:c0:2f:d7:e9:5f:b3:e1:a8:60:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Apr  4 20:55:58 2024 GMT
            Not After : Apr  3 21:00:58 2025 GMT
        Subject: CN=9BA8E9ADE9A79600F52702ABFCF0F757A97E2522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:03:3b:62:43:18:96:d3:47:a9:8e:72:df:
                    24:cd:03:8d:e0:3d:96:2d:61:3c:ae:25:c7:61:f2:
                    b7:2e:5b:40:9b:da:e2:d4:2b:a9:1e:06:95:ff:b4:
                    0c:51:71:85:83:24:45:91:f6:26:f0:d2:36:d9:d0:
                    53:67:46:14:87:cc:5e:bf:10:0f:aa:14:f9:80:22:
                    3d:b7:bc:39:13:f8:b8:5b:71:83:2d:a2:91:94:c6:
                    64:cd:54:d4:6b:3e:2a:8b:42:0d:fb:72:3d:d1:bb:
                    53:ff:46:f6:33:56:04:24:c1:46:1e:ed:83:a2:b9:
                    31:53:73:ec:d1:98:dc:bc:5a:51:1f:b0:df:97:95:
                    ea:e1:54:a7:88:2f:c2:f4:7e:87:2e:83:a0:d5:e4:
                    d6:b2:6d:64:64:61:67:09:30:b9:d3:23:19:df:4e:
                    9b:cb:45:fb:e7:43:cd:a8:67:8c:d5:e4:6f:26:90:
                    8c:b7:5a:47:04:85:91:bf:18:44:e4:31:af:9d:f2:
                    6e:78:80:b0:14:e0:4b:07:5f:ce:1f:6c:3e:e2:98:
                    81:ba:c0:a0:fa:0b:40:3f:f8:76:3d:ea:52:0d:ca:
                    24:1e:4f:1c:0e:a1:0e:cd:c2:1e:7f:f5:8d:9b:33:
                    c3:58:4b:b1:55:3f:a5:36:0c:45:42:79:0a:34:20:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A8:E9:AD:E9:A7:96:00:F5:27:02:AB:FC:F0:F7:57:A9:7E:25:22
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2760::/33

    Signature Algorithm: sha256WithRSAEncryption
         5b:20:48:97:fb:f4:59:78:c7:42:3c:91:1e:88:aa:6d:24:dc:
         99:0f:6f:42:b4:04:dd:ae:8e:a5:21:e7:d6:8e:a9:29:28:58:
         c9:1e:9f:a2:32:83:8a:87:57:1c:1e:5a:f8:65:42:d6:db:3b:
         b0:89:b0:19:fe:41:7f:64:ee:a8:03:7f:46:ec:d0:2f:33:d9:
         16:cb:68:06:52:65:ce:4c:3a:cd:74:5d:8c:3b:cb:35:98:03:
         6c:f9:98:66:bf:14:6e:8d:58:7e:38:4a:80:8e:8a:4d:83:e2:
         80:41:9e:ec:7e:0a:af:8d:b1:be:a2:c7:70:b6:4a:75:8d:4d:
         99:4e:5c:54:10:23:e3:4c:5c:4f:b1:e8:80:d9:62:dd:29:4c:
         60:00:00:81:58:8c:00:20:35:c7:b2:da:6b:e6:6e:5d:03:7a:
         19:f2:da:5b:5e:d1:9b:ca:8b:ba:6b:bf:26:65:63:7a:0d:58:
         ac:6a:ec:82:ff:10:ae:f5:48:43:71:e7:82:9c:81:e0:4d:26:
         3a:f2:f9:bc:27:08:b1:b6:49:99:83:a1:8f:ef:7d:f0:4a:25:
         ee:9b:85:0c:3c:8e:a9:df:74:2d:3c:8d:82:8d:2e:8c:1a:2a:
         32:05:3e:e6:a2:8d:a5:f5:d2:fc:0f:93:3b:f3:2e:96:9b:0f:
         39:a4:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org