Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          G/ylDmLksSgQHT1CWCJJg3zXn9oTLA6jAWvB6SORXfQ=
Subject key identifier:   DB:C3:BB:6C:0D:A3:46:CD:F6:D9:4E:02:AE:23:67:BA:21:61:C9:0A
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       69A1E1A874B088D11DD76159114E303AC0715ADE
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Wed 03 Apr 2024 18:30:34 +0000
ROA not before:           Wed 03 Apr 2024 18:25:34 +0000
ROA not after:            Wed 02 Apr 2025 18:30:34 +0000
asID:                     264311
IP address blocks:        2804:25f0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a1:e1:a8:74:b0:88:d1:1d:d7:61:59:11:4e:30:3a:c0:71:5a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Apr  3 18:25:34 2024 GMT
            Not After : Apr  2 18:30:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:5d:7f:b2:99:4f:df:62:7a:f4:1b:01:7f:
                    2d:2f:bb:c3:52:20:e4:c1:e9:83:bd:45:b4:97:43:
                    25:85:87:06:cf:a0:2b:81:46:4e:26:64:ab:9f:60:
                    61:6c:8d:bb:f2:ea:60:26:d2:11:fc:cc:9f:57:7c:
                    76:97:9e:21:7d:0e:f3:01:62:7c:49:4e:2b:33:d9:
                    4d:a6:ed:49:71:1f:43:8d:92:b7:85:fc:58:7d:7e:
                    eb:fb:69:28:50:28:8e:c6:57:1c:b9:ac:b8:bf:ff:
                    fd:17:42:4b:f8:4b:34:47:06:ee:f0:c6:89:e2:88:
                    e6:1b:e2:e8:85:5e:21:b5:39:6d:54:a7:fc:6d:b7:
                    5a:31:d9:67:26:5e:0f:55:77:00:58:81:74:45:89:
                    01:97:39:38:43:3d:fc:a5:9b:8e:88:83:07:f6:34:
                    7c:bd:dd:ce:6a:92:ea:5c:e5:c1:c1:53:3b:3f:f7:
                    36:10:d0:41:4b:ac:37:74:ab:ab:51:73:73:40:20:
                    ba:2e:6b:43:16:dd:b8:6f:f3:99:f7:99:20:17:ec:
                    b8:1e:88:19:e9:f5:94:75:d4:36:af:2c:f9:23:91:
                    31:c1:23:b0:6b:0d:f1:4c:ff:99:4b:4d:bb:b4:cf:
                    86:17:da:9c:29:68:87:d3:b9:ed:6d:ec:51:26:64:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C3:BB:6C:0D:A3:46:CD:F6:D9:4E:02:AE:23:67:BA:21:61:C9:0A
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:b0:b3:ef:37:c6:8a:1d:9c:55:eb:71:1e:0e:ec:97:69:
         48:38:fd:23:97:4a:9c:fc:ea:1f:91:5c:8a:f3:4d:36:de:4a:
         60:11:b6:be:cb:25:79:39:28:82:09:19:1c:69:6d:97:a3:35:
         43:f7:aa:ea:7f:9e:49:71:1a:43:ee:64:05:c7:40:98:47:5c:
         bb:2c:06:ec:9f:bc:e9:f2:39:b4:27:03:c9:af:c5:ee:11:b7:
         88:95:4a:81:6d:5e:cc:8d:cb:b7:5e:7d:20:8e:b3:47:fd:6e:
         b6:3c:25:40:a4:d5:fd:72:f9:be:1e:aa:82:0c:25:a3:7d:ae:
         9d:e4:d8:05:2a:17:5f:48:f6:9a:b3:57:b7:59:9b:ca:11:9c:
         d1:69:5c:e9:f6:c1:f5:b4:2f:35:c4:d1:ea:7f:62:86:fd:a9:
         83:5b:89:c3:38:3b:96:8e:04:25:80:2a:6a:1a:7b:50:f1:8e:
         a5:31:ac:e5:dd:8f:e9:f3:f4:2f:fb:de:e2:61:44:c3:a5:cb:
         a4:5b:b7:22:8f:83:e1:7d:fe:ae:a1:b8:4a:2d:5a:78:11:45:
         fe:51:2f:5f:08:1d:ed:4e:38:c8:0a:51:ee:0c:57:0b:b1:fd:
         b7:f0:f2:00:4b:45:3d:bc:76:6d:44:65:6f:b6:3e:8e:bc:9e:
         20:8c:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org