Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/323830343a313636303a3a2f33322d3438203d3e203532353630.roa
File:                     323830343a313636303a3a2f33322d3438203d3e203532353630.roa (raw, json)
Hash identifier:          goPWj+lcaIfz3Y2J8TiUWo8UbwmmgpuHXmTbHOsTYg4=
Subject key identifier:   18:21:3C:F4:51:7B:D1:C8:04:7A:92:40:64:FE:0B:EF:63:D2:6A:69
Certificate issuer:       /CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
Certificate serial:       2881CF4F42D8402CBDE06E914827B71129F8C40F
Authority key identifier: 12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/323830343a313636303a3a2f33322d3438203d3e203532353630.roa
Signing time:             Thu 04 Apr 2024 03:45:53 +0000
ROA not before:           Thu 04 Apr 2024 03:40:53 +0000
ROA not after:            Thu 03 Apr 2025 03:45:53 +0000
asID:                     52560
IP address blocks:        2804:1660::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl
                          rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:81:cf:4f:42:d8:40:2c:bd:e0:6e:91:48:27:b7:11:29:f8:c4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
        Validity
            Not Before: Apr  4 03:40:53 2024 GMT
            Not After : Apr  3 03:45:53 2025 GMT
        Subject: CN=18213CF4517BD1C8047A924064FE0BEF63D26A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:ad:1f:9a:d7:a0:50:0e:3f:64:fe:61:4f:
                    97:67:af:28:bd:9f:ff:59:bb:a1:24:38:58:b3:7a:
                    ff:0c:84:89:b1:d1:bd:60:7c:4f:11:d5:d3:4b:88:
                    64:65:75:77:ef:e1:fa:fa:cf:3e:16:2b:8d:69:1e:
                    2c:ef:42:5d:2f:27:c3:5e:49:27:bb:49:b2:56:c1:
                    02:a0:48:44:d2:da:4e:68:60:75:4e:69:11:04:4a:
                    22:ea:d9:58:82:d4:d0:ac:17:a5:0e:e1:19:3d:90:
                    d0:76:e6:23:36:37:8c:ec:00:bc:d3:c2:74:bf:68:
                    25:19:da:6d:77:f3:ae:ed:19:9e:25:ea:4f:dd:59:
                    5e:5a:d2:ba:32:ac:cf:04:2c:aa:79:4b:f2:21:33:
                    b8:0f:8c:58:0c:37:91:56:6f:2c:bd:7d:7e:72:ed:
                    b7:ce:f3:c6:88:36:b7:a9:6a:4d:b0:33:4c:41:f9:
                    6a:17:62:69:14:0f:a2:d2:32:f9:24:25:a9:b8:32:
                    7e:1b:56:9c:31:b2:5e:a2:b9:7f:b6:57:47:69:08:
                    ec:e8:dd:62:05:09:ad:04:81:8a:94:3f:0e:1e:47:
                    28:bd:08:c1:6a:86:d1:f0:ef:0f:27:71:3f:23:83:
                    20:02:9d:5a:ad:ad:72:dc:0f:d5:75:c2:1b:5b:ed:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:3C:F4:51:7B:D1:C8:04:7A:92:40:64:FE:0B:EF:63:D2:6A:69
            X509v3 Authority Key Identifier:
                keyid:12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/323830343a313636303a3a2f33322d3438203d3e203532353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1660::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:87:0a:a5:8a:eb:43:d1:ff:e4:b2:fe:86:d6:a9:e6:46:38:
         0d:e8:91:e2:10:f4:0b:b1:f7:cf:9c:d2:ce:50:77:7f:18:fb:
         ab:7d:07:29:b0:1c:88:ed:98:93:04:31:26:e7:87:1c:59:1e:
         f7:88:48:8f:9c:d7:7b:a2:4e:29:b8:29:c2:bb:5a:30:1a:0f:
         f1:16:68:ae:af:e5:ff:46:22:49:9e:b2:13:27:21:79:2f:9d:
         d7:7e:de:7f:9d:c1:68:0c:06:a2:8a:4f:b4:02:65:d0:4e:fc:
         48:37:ff:3b:21:f9:38:10:d8:76:b7:7e:4c:50:1f:4b:8e:a7:
         5c:c9:e4:83:23:4f:20:56:c3:63:f8:d0:4d:45:5b:62:4e:1f:
         8e:32:ce:68:04:36:45:23:c1:82:cb:1a:ae:f3:29:00:8d:2d:
         83:bb:cc:96:e4:f5:5e:91:6a:14:57:fa:83:df:33:aa:cf:1a:
         d7:98:62:31:62:dc:69:24:9c:f2:12:64:88:1a:bb:b7:37:98:
         7e:1a:6b:cf:ce:57:eb:ba:18:f5:9e:58:c7:4c:49:56:f6:81:
         5f:c1:57:87:24:59:fc:78:cf:68:26:df:63:6d:ab:e5:3a:4b:
         91:e7:6d:c8:ef:aa:91:76:4c:7f:de:97:ba:2c:01:e5:3e:9d:
         c6:2b:3a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:07 2024 by rpki-client on console-ams.rpki-client.org