Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/323830343a376266633a3a2f33322d3332203d3e20323731343638.roa
File:                     323830343a376266633a3a2f33322d3332203d3e20323731343638.roa (raw, json)
Hash identifier:          vNnzhLVhcrUPSJrIZld2KArn5OI5HTEGV8YTI5sNnTM=
Subject key identifier:   97:E8:44:76:CC:2E:59:81:4A:60:49:3F:F8:25:2A:59:10:F5:80:4B
Certificate issuer:       /CN=B726A967EC3E14BF4F129A42C460D887468E3D1F
Certificate serial:       349461A10C3C6E7EE051443189D8193BC103E7B5
Authority key identifier: B7:26:A9:67:EC:3E:14:BF:4F:12:9A:42:C4:60:D8:87:46:8E:3D:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/323830343a376266633a3a2f33322d3332203d3e20323731343638.roa
Signing time:             Thu 04 Apr 2024 14:25:42 +0000
ROA not before:           Thu 04 Apr 2024 14:20:42 +0000
ROA not after:            Thu 03 Apr 2025 14:25:42 +0000
asID:                     271468
IP address blocks:        2804:7bfc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.crl
                          rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:94:61:a1:0c:3c:6e:7e:e0:51:44:31:89:d8:19:3b:c1:03:e7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B726A967EC3E14BF4F129A42C460D887468E3D1F
        Validity
            Not Before: Apr  4 14:20:42 2024 GMT
            Not After : Apr  3 14:25:42 2025 GMT
        Subject: CN=97E84476CC2E59814A60493FF8252A5910F5804B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5b:fb:59:05:37:18:8e:e1:46:49:40:21:cb:
                    cb:ab:82:19:37:17:a0:b4:b0:84:48:ff:01:c0:88:
                    ef:90:23:8c:d5:75:2c:11:b3:bb:32:d6:e7:05:cc:
                    27:d3:52:2b:00:9a:97:a6:1a:39:7b:a3:ce:ce:bc:
                    d8:00:3d:2a:45:95:52:e6:2e:c7:e4:29:43:f4:7c:
                    6f:56:d9:70:6f:91:aa:41:76:a2:d2:e3:a1:92:9e:
                    0e:9b:65:a5:1d:54:45:71:8f:9e:a2:44:f3:3b:2b:
                    a9:a1:b0:98:4f:22:a0:8c:9b:1f:e5:f8:d3:66:5d:
                    28:5c:5a:1f:4b:a0:b7:54:f0:54:e9:9a:e5:aa:fb:
                    c7:0c:6c:5f:8f:61:6a:18:f1:59:fb:d9:a2:2c:0b:
                    f2:5a:67:31:50:fb:97:5a:ab:e5:bc:38:bb:62:55:
                    ef:78:7c:df:eb:97:bb:ce:3f:1e:ac:3a:f7:f4:c8:
                    af:14:d8:4a:27:1d:e8:a3:5c:75:10:d4:75:e4:25:
                    7e:11:d1:21:14:fa:76:90:6b:34:58:90:5c:86:56:
                    d1:bf:c8:5a:df:11:6f:27:05:74:9c:fd:1d:e2:40:
                    30:19:2a:ed:d2:d7:48:e3:fc:99:2e:74:66:ff:76:
                    5f:c7:1f:5e:44:6c:7a:33:d4:50:fc:53:4b:f9:16:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E8:44:76:CC:2E:59:81:4A:60:49:3F:F8:25:2A:59:10:F5:80:4B
            X509v3 Authority Key Identifier:
                keyid:B7:26:A9:67:EC:3E:14:BF:4F:12:9A:42:C4:60:D8:87:46:8E:3D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/323830343a376266633a3a2f33322d3332203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:01:8e:65:36:62:7a:ba:71:25:7f:9a:ec:fa:f5:67:e0:
         2e:25:c6:52:b7:6f:be:16:d4:f2:fb:14:f6:19:8f:0c:bd:6f:
         b3:79:9a:ea:c5:f1:1d:d9:a9:1b:22:b2:ad:51:af:9f:d9:83:
         ab:24:34:c6:cf:e4:6a:19:0c:00:fa:d9:e2:3f:18:89:6d:c9:
         f4:e3:d2:63:42:ac:16:3d:bc:b0:b2:ad:65:4a:a5:69:a1:11:
         33:fb:28:b1:8e:6c:70:e2:28:33:08:78:f4:a0:c4:c9:69:3d:
         1e:58:54:31:a3:7a:88:4a:49:83:d6:2a:2e:94:b3:e5:9a:73:
         56:0f:a4:1b:e4:0c:93:3d:c9:ba:a1:b1:82:8f:34:56:ca:d6:
         83:15:14:94:36:b8:0d:6c:be:72:08:a1:44:60:a8:52:3f:e6:
         8e:8e:24:47:d6:89:aa:8f:a8:7d:35:50:50:08:33:99:d0:5f:
         35:6f:b0:5e:a5:46:a7:69:21:22:98:ba:9e:61:39:14:26:39:
         55:a3:34:d1:05:dd:88:7d:77:e9:e4:6b:da:14:74:09:75:6e:
         6b:83:06:9c:87:0b:92:37:b1:3a:e2:99:61:e0:17:3e:57:bd:
         8c:65:07:85:f2:ec:f7:2a:4c:f2:43:27:31:08:cd:75:91:6f:
         18:f5:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org