Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/323830343a363030303a3a2f33322d3438203d3e20323639313339.roa
File:                     323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (raw, json)
Hash identifier:          a2A+czeoUonIrOR1aNYN0R9UmvOungi1jE85htJEX/8=
Subject key identifier:   63:DA:99:10:8D:23:DC:37:96:F1:C6:2D:EC:AD:02:A3:BA:7E:92:FC
Certificate issuer:       /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E
Certificate serial:       6D476E94784D34CDA5AFBE4C38320086B2B5F6EA
Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/323830343a363030303a3a2f33322d3438203d3e20323639313339.roa
Signing time:             Thu 04 Apr 2024 00:50:32 +0000
ROA not before:           Thu 04 Apr 2024 00:45:32 +0000
ROA not after:            Thu 03 Apr 2025 00:50:32 +0000
asID:                     269139
IP address blocks:        2804:6000::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl
                          rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:47:6e:94:78:4d:34:cd:a5:af:be:4c:38:32:00:86:b2:b5:f6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E
        Validity
            Not Before: Apr  4 00:45:32 2024 GMT
            Not After : Apr  3 00:50:32 2025 GMT
        Subject: CN=63DA99108D23DC3796F1C62DECAD02A3BA7E92FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:14:67:a3:88:89:59:1f:36:b8:12:ff:40:b9:
                    29:ab:98:e2:0b:c8:39:35:1a:98:ce:01:f5:42:38:
                    de:1b:d8:17:09:2f:08:0e:5e:56:ae:1d:76:e6:fe:
                    a3:eb:81:b7:cb:c8:1c:4b:c5:c6:fb:ff:03:37:ea:
                    2d:d9:80:79:27:01:b4:3d:af:f9:ce:ea:86:ad:08:
                    5f:50:b5:29:c9:40:13:93:16:8b:54:a1:48:c7:a4:
                    09:98:cf:ac:14:3a:cf:8c:be:13:77:62:e2:18:78:
                    7d:43:2a:36:cb:66:4c:27:9e:44:fe:45:f1:df:6e:
                    f2:cc:f9:ec:95:1a:cf:dd:f5:1a:13:ed:fb:53:8a:
                    07:ee:85:19:36:17:fc:36:75:4c:50:c6:9f:75:be:
                    5d:b3:64:eb:c6:12:00:6e:ff:d0:32:9a:0f:44:be:
                    da:ce:1d:71:f1:5f:6f:11:30:5b:39:71:a6:3a:91:
                    7c:25:9c:37:8d:b1:79:42:5b:06:22:a6:d5:82:a5:
                    4e:cb:e6:9a:7a:58:15:b1:46:d6:8a:2e:08:cd:0e:
                    d1:00:1e:8d:1a:48:1a:99:20:26:e8:77:3d:75:5f:
                    0d:b0:64:44:15:1f:59:ee:0d:4a:90:bf:cf:8f:3b:
                    f8:4a:9a:d6:33:63:54:45:4c:67:6a:71:ba:af:b5:
                    b8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DA:99:10:8D:23:DC:37:96:F1:C6:2D:EC:AD:02:A3:BA:7E:92:FC
            X509v3 Authority Key Identifier:
                keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/323830343a363030303a3a2f33322d3438203d3e20323639313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6000::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:06:a1:56:3a:15:c4:ec:83:77:bf:ce:3e:83:f4:d2:21:6d:
         b1:0b:b3:1b:16:03:5a:d6:46:45:2f:dd:be:4e:58:de:89:5e:
         c0:af:19:0b:0f:2c:fc:9d:ee:b9:7b:83:3e:17:37:d1:13:84:
         88:45:0c:45:29:41:56:09:21:1d:6d:ba:f7:2e:04:09:50:97:
         a9:89:29:0a:d9:87:10:1d:c3:24:76:7a:32:ec:23:b1:0a:7c:
         2d:7c:96:5a:94:06:5c:f3:ae:0e:2f:50:9d:06:83:c9:6d:f2:
         af:15:a6:6e:48:5b:09:7a:b0:26:06:74:87:68:8e:2b:78:fc:
         24:e2:66:23:13:7d:91:5d:e6:55:9e:83:fa:86:76:47:92:d0:
         34:93:d6:f3:60:8b:fe:73:e3:34:21:f8:8a:59:b6:44:8a:8e:
         39:b5:31:ed:64:83:7a:d4:3d:9e:73:fd:df:6a:29:20:b0:c2:
         01:ec:f8:d4:d5:ed:e0:b8:d5:48:8a:e6:2e:5e:fc:3a:6a:8f:
         6e:86:27:ef:24:36:6c:7b:c5:88:98:59:e2:a1:97:a5:2e:35:
         ac:ae:a5:51:16:49:b3:fc:5c:b1:cd:56:8a:bf:b6:fa:f4:95:
         3a:7f:1d:fe:ad:a9:30:2d:89:17:4c:af:15:2f:e4:87:5e:67:
         8e:73:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org