Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a383030303a3a2f33342d3334203d3e20323637363134.roa
File:                     323830343a343366633a383030303a3a2f33342d3334203d3e20323637363134.roa (raw, json)
Hash identifier:          Q/uCebJ/oK+0jSDVPRoN03TK2fJDUiD8+jq9VEaQ8OU=
Subject key identifier:   1F:92:9E:81:0F:D7:C3:CB:AB:1C:70:3F:9E:99:5C:9A:94:C8:17:42
Certificate issuer:       /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
Certificate serial:       1D8D16ACFF1F35C3A3F34B12592ED89D9723C6F5
Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a383030303a3a2f33342d3334203d3e20323637363134.roa
Signing time:             Thu 04 Apr 2024 20:25:43 +0000
ROA not before:           Thu 04 Apr 2024 20:20:43 +0000
ROA not after:            Thu 03 Apr 2025 20:25:43 +0000
asID:                     267614
IP address blocks:        2804:43fc:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl
                          rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8d:16:ac:ff:1f:35:c3:a3:f3:4b:12:59:2e:d8:9d:97:23:c6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Validity
            Not Before: Apr  4 20:20:43 2024 GMT
            Not After : Apr  3 20:25:43 2025 GMT
        Subject: CN=1F929E810FD7C3CBAB1C703F9E995C9A94C81742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e5:f1:69:84:0d:22:96:9c:37:28:c2:21:2e:
                    03:cf:dc:02:c4:be:e7:15:31:4f:fd:9f:a3:15:91:
                    cd:07:b3:00:ff:0b:d9:0a:fa:16:7a:be:6e:5c:35:
                    db:31:3a:37:69:55:6c:22:31:07:0d:6c:2a:f6:56:
                    0c:d0:fd:30:bb:ab:16:a2:69:16:21:89:a0:06:8f:
                    79:d6:1d:63:78:dc:10:19:62:05:6d:de:e0:04:30:
                    df:dc:cc:e6:a1:97:14:27:5e:f8:ea:61:04:ab:56:
                    e1:a0:37:b1:50:f2:9a:45:9f:97:36:1a:4f:90:f7:
                    c8:87:50:fb:52:86:40:9f:44:7b:26:ed:f3:24:b8:
                    a4:e0:fb:fb:77:7b:66:c1:c5:43:a0:dd:a8:ab:35:
                    8e:5e:aa:96:34:72:03:8c:b7:86:70:f1:7d:f6:d6:
                    72:ea:79:27:d4:18:50:cd:05:c2:0a:eb:84:9b:f8:
                    04:fb:6f:bb:7e:08:bd:bc:5c:fb:20:09:b1:a4:53:
                    4b:bd:3d:a4:a3:c3:04:71:49:f1:d2:ec:5d:ba:fa:
                    8c:5c:63:f9:74:94:8e:7f:09:8d:b1:ae:cd:05:be:
                    3e:24:5e:bf:65:7a:29:ca:8c:7a:de:63:8a:c5:27:
                    ad:33:02:f4:ad:9e:65:67:39:3f:7a:73:72:29:bd:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:92:9E:81:0F:D7:C3:CB:AB:1C:70:3F:9E:99:5C:9A:94:C8:17:42
            X509v3 Authority Key Identifier:
                keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a383030303a3a2f33342d3334203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:13:77:9c:33:d0:0f:fb:12:93:33:3f:6c:7a:33:02:b1:46:
         5d:d3:a6:1b:0b:08:89:13:22:a3:4f:da:5d:c4:3c:70:17:af:
         4a:cc:9d:3e:a6:1f:db:35:3c:85:34:f1:f4:8d:49:05:fd:6f:
         e3:8b:4b:39:7c:52:0a:e4:a1:80:76:16:a3:95:b0:30:0c:05:
         ac:cd:b6:c8:3d:3e:23:41:14:2d:18:dc:4d:7c:85:b1:db:f3:
         82:18:6e:ed:4d:9d:03:a5:ab:41:e0:a1:d0:89:49:1e:19:85:
         1f:4c:11:d6:d6:49:b0:d4:f6:5c:7b:1c:a7:88:68:85:99:6d:
         c4:95:c0:86:dd:83:86:bd:2c:f5:59:94:83:d8:ad:c6:bc:39:
         23:f0:69:2c:af:b0:da:34:d3:9f:f7:c8:da:a8:67:6d:7f:de:
         7f:68:66:0b:f5:70:67:63:5e:b4:f4:1f:2f:64:f9:2f:23:35:
         4f:47:0c:ff:eb:ad:58:e8:24:31:1a:62:68:74:99:2e:f5:39:
         b3:16:c7:61:58:6e:7d:34:82:fa:9e:04:bc:26:63:ed:e2:eb:
         c5:3a:ef:bd:cd:4d:72:f3:44:21:13:8c:3a:76:57:0a:00:79:
         b1:6e:a0:05:b5:72:c8:3d:8f:a9:35:98:a7:af:78:45:29:19:
         22:86:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:49 2024 by rpki-client on console-fra.rpki-client.org