Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/323830343a333866343a3a2f33322d3332203d3e20323636353134.roa
File:                     323830343a333866343a3a2f33322d3332203d3e20323636353134.roa (raw, json)
Hash identifier:          kVbraNGQFuCDF6irkcddFvgux0iSC1n78cbLA14xxUA=
Subject key identifier:   24:4C:E5:D9:A0:B3:B4:E2:2D:0E:F1:21:D5:33:CC:C4:A2:EA:F8:18
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       52580552CEAE21DEFF51DCB305C9EAA002E539A8
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/323830343a333866343a3a2f33322d3332203d3e20323636353134.roa
Signing time:             Thu 04 Apr 2024 08:40:47 +0000
ROA not before:           Thu 04 Apr 2024 08:35:47 +0000
ROA not after:            Thu 03 Apr 2025 08:40:47 +0000
asID:                     266514
IP address blocks:        2804:38f4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:58:05:52:ce:ae:21:de:ff:51:dc:b3:05:c9:ea:a0:02:e5:39:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Apr  4 08:35:47 2024 GMT
            Not After : Apr  3 08:40:47 2025 GMT
        Subject: CN=244CE5D9A0B3B4E22D0EF121D533CCC4A2EAF818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:9d:c4:a1:ec:06:0b:e5:c6:47:31:9f:b8:
                    b4:ab:db:c4:dd:6f:1e:53:c7:6b:41:ad:f2:31:5f:
                    70:5b:28:81:05:00:89:f1:92:5b:41:8b:16:56:23:
                    74:c1:96:4d:6d:32:3f:24:bd:7c:95:e5:09:e5:12:
                    45:e3:cb:5a:bf:bd:f7:d8:bc:61:83:ca:ae:7e:1b:
                    c2:96:3a:67:8f:85:7d:bd:3b:9d:ab:a3:bf:4c:f5:
                    38:c7:06:95:3e:21:20:bc:02:5f:b9:85:94:8b:c7:
                    b6:a8:44:c2:47:71:fb:92:13:00:29:e9:fc:15:c3:
                    d0:e6:f8:84:5d:87:65:ad:5e:81:d9:42:ec:e1:f5:
                    a0:d8:ef:9f:ed:37:d3:a7:c7:d7:3c:b1:bf:f0:bc:
                    cc:d8:6d:b7:d6:2a:e0:c4:08:33:45:4c:9a:ef:26:
                    ce:9c:17:ec:d4:e2:6f:db:46:38:ce:83:69:54:a5:
                    6c:22:9c:92:f3:b1:7c:d6:82:c6:9a:a4:18:0d:20:
                    46:ac:69:3d:80:f5:3d:dc:3b:17:9c:e5:4e:0a:fe:
                    2a:3e:63:0a:29:3d:64:85:50:54:bd:f6:06:f0:51:
                    ad:ba:2a:96:5c:08:f6:4e:8d:1d:57:11:90:77:8c:
                    dc:84:e6:be:3e:74:f4:77:54:11:4b:08:3e:84:0d:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:E5:D9:A0:B3:B4:E2:2D:0E:F1:21:D5:33:CC:C4:A2:EA:F8:18
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/323830343a333866343a3a2f33322d3332203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:59:76:00:7f:5b:88:5d:31:25:c6:75:09:09:20:21:02:
         16:71:fc:54:ae:1f:6d:02:04:10:11:2e:4b:0b:3b:de:88:97:
         50:27:e4:f1:d8:d9:64:6a:ac:33:11:70:f7:4c:b2:b3:cf:5a:
         db:59:32:d1:83:1b:19:37:67:7b:c6:d2:83:0c:b7:27:3e:3c:
         e5:87:af:19:95:ea:55:3b:43:cb:d5:31:0a:de:d1:df:9a:5a:
         8f:cc:22:92:52:69:c2:3a:12:e8:b6:46:ff:f3:48:ee:b2:81:
         d3:08:09:64:c0:08:46:1b:a0:1c:4b:fa:f4:2b:b6:75:59:3c:
         9f:43:d4:8f:ef:db:78:a9:82:50:05:58:2b:83:3a:33:60:22:
         2c:42:a5:08:17:67:fb:5a:20:d4:6b:3a:63:ad:61:87:02:29:
         4f:28:97:df:5a:a2:5f:c9:02:c4:64:f5:35:07:6b:4a:22:73:
         f4:41:44:95:7a:49:d5:6d:80:d3:ac:50:dd:87:e8:2a:59:25:
         81:b9:e8:0f:e9:3d:e7:c6:6b:88:bd:ef:84:35:11:06:e8:6c:
         08:73:b8:fd:1d:40:af:d9:29:95:67:04:74:67:06:85:77:b6:
         d2:6d:ce:74:e0:b0:84:1e:47:78:66:a2:54:7d:a0:df:2b:d7:
         c6:d5:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:08 2024 by rpki-client on console-fra.rpki-client.org