Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a3a2f33322d3332203d3e20323730333139.roa
File:                     323830343a366133343a3a2f33322d3332203d3e20323730333139.roa (raw, json)
Hash identifier:          X5AOlwJe38xakCVNP8TOnb+c8vYptgcFvmLpOANk6e0=
Subject key identifier:   43:74:B3:E2:44:95:CC:A8:38:15:51:B1:75:45:E5:08:FA:BE:B4:A7
Certificate issuer:       /CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
Certificate serial:       357663B00527226E4830EFE311B8E7FA9885EB7F
Authority key identifier: 47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a3a2f33322d3332203d3e20323730333139.roa
Signing time:             Wed 03 Apr 2024 20:38:49 +0000
ROA not before:           Wed 03 Apr 2024 20:33:49 +0000
ROA not after:            Wed 02 Apr 2025 20:38:49 +0000
asID:                     270319
IP address blocks:        2804:6a34::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl
                          rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:76:63:b0:05:27:22:6e:48:30:ef:e3:11:b8:e7:fa:98:85:eb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
        Validity
            Not Before: Apr  3 20:33:49 2024 GMT
            Not After : Apr  2 20:38:49 2025 GMT
        Subject: CN=4374B3E24495CCA8381551B17545E508FABEB4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:37:9b:8f:39:bb:6e:71:91:1f:0d:14:15:
                    8b:34:db:97:4c:9a:58:5d:6e:99:17:59:3e:d1:05:
                    30:58:17:e9:51:f5:f1:b7:7b:10:31:8c:67:a0:dd:
                    44:88:3e:ab:a5:f7:ad:e8:19:c1:06:e1:dd:d6:17:
                    cf:f2:5b:df:1e:4d:b5:a5:a4:56:3f:06:74:09:7c:
                    36:2d:92:a2:b3:bf:95:e2:cd:43:d8:96:76:80:ea:
                    9b:30:a4:35:91:67:95:74:2f:24:65:a1:6e:6c:f9:
                    59:d8:33:13:e1:9c:bf:99:f2:a8:00:f4:8b:f7:94:
                    7e:1b:ae:71:2f:c3:ac:7c:b8:ed:3d:de:9f:b7:56:
                    33:4f:a0:68:e3:c8:f0:5c:de:9f:9f:f6:39:f5:a3:
                    c9:10:0a:9a:c0:5c:82:b0:12:1b:1c:19:a8:20:af:
                    72:8d:ad:d2:b7:80:01:f1:8a:99:27:91:d2:53:85:
                    bd:0d:85:4f:31:2e:c0:a6:40:29:29:58:55:7f:1a:
                    bc:83:41:20:43:d1:1e:df:a6:15:c4:0a:64:a1:91:
                    79:e1:be:6f:1f:9e:4d:39:14:be:98:76:ef:38:7f:
                    60:7f:68:86:b6:65:78:e1:19:f9:7b:12:69:79:be:
                    69:5a:24:e1:09:13:a5:20:4d:53:7b:de:db:b4:02:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:74:B3:E2:44:95:CC:A8:38:15:51:B1:75:45:E5:08:FA:BE:B4:A7
            X509v3 Authority Key Identifier:
                keyid:47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a3a2f33322d3332203d3e20323730333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a34::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:a0:57:06:74:ab:2a:61:75:69:dd:ea:32:e6:86:e8:6c:a8:
         86:95:fc:f9:ec:77:fc:ec:8f:ec:87:64:67:8b:3e:f8:7b:14:
         9f:f7:1b:f3:37:51:79:45:e6:ea:22:cd:d3:0e:ce:0c:d9:83:
         63:e3:43:05:7e:c9:dc:56:b2:bb:0f:bc:18:8b:0e:7c:30:76:
         98:f6:53:a0:64:8b:bd:91:1d:a9:50:bd:a7:16:71:96:ef:75:
         f1:23:23:5c:a8:5d:bf:a9:b8:b9:08:b7:a5:4d:83:c1:c6:fe:
         e7:04:b7:51:da:34:97:9a:75:fb:21:48:cc:15:ef:b2:9d:ec:
         48:4c:63:b4:53:84:eb:5e:38:00:bc:0b:67:89:f3:e5:07:38:
         a6:4d:75:1b:07:a8:eb:ca:70:a2:32:64:36:f7:81:17:1e:97:
         47:7e:86:a2:63:d1:9d:33:c8:16:4d:b3:65:40:8e:df:bc:c5:
         51:07:4c:c4:3a:14:2e:40:04:0f:91:7f:b6:d4:07:86:7a:54:
         11:9f:27:3a:2b:ac:d8:b3:4a:35:1b:26:3e:fa:ee:0c:3d:9d:
         73:d4:c7:a4:81:54:51:05:1f:72:0d:aa:e6:38:db:fd:48:10:
         17:94:86:c5:d2:49:56:88:e4:b1:78:de:61:41:95:fd:3a:4e:
         8f:20:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org