Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33322d3332203d3e20323637363134.roa
File:                     323830343a343366633a3a2f33322d3332203d3e20323637363134.roa (raw, json)
Hash identifier:          Pe4KGKr454SlZTS8gu2lYaSfZQgSAC1CCdRrnjdTrYE=
Subject key identifier:   AD:75:95:8B:DA:AD:57:C4:92:EF:9A:9D:4B:10:E7:3C:9A:65:5C:8B
Certificate issuer:       /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
Certificate serial:       72BF4C7BE313E2EB80C2B56C6640D1345350A5FF
Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33322d3332203d3e20323637363134.roa
Signing time:             Thu 04 Apr 2024 20:25:42 +0000
ROA not before:           Thu 04 Apr 2024 20:20:42 +0000
ROA not after:            Thu 03 Apr 2025 20:25:42 +0000
asID:                     267614
IP address blocks:        2804:43fc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl
                          rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bf:4c:7b:e3:13:e2:eb:80:c2:b5:6c:66:40:d1:34:53:50:a5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Validity
            Not Before: Apr  4 20:20:42 2024 GMT
            Not After : Apr  3 20:25:42 2025 GMT
        Subject: CN=AD75958BDAAD57C492EF9A9D4B10E73C9A655C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:a7:0e:08:0c:af:2d:58:84:bb:41:af:4e:
                    ef:96:be:4f:9e:af:a2:71:ea:98:b8:9f:41:c3:c9:
                    6c:84:ac:29:de:0e:3f:e6:ab:67:ec:d9:a2:cd:51:
                    3f:2b:3c:6a:08:1f:c7:8e:e6:03:83:d7:67:10:14:
                    9d:0d:0c:c2:c1:8e:b7:94:59:c7:f9:8e:22:8d:37:
                    0c:73:46:f0:0a:42:f7:2f:35:04:7e:ce:16:91:c8:
                    db:f6:5f:bd:d6:61:e7:91:09:37:a4:91:4c:51:a3:
                    8d:7f:be:ec:d6:1b:03:14:b3:7d:12:4e:0c:0f:21:
                    2d:1e:68:da:fa:50:48:66:f3:16:57:88:e3:11:a0:
                    7e:c3:39:05:c6:1b:0e:38:ff:0b:a8:de:91:90:0b:
                    36:d3:9a:48:24:e3:c6:95:66:25:99:5a:e2:12:94:
                    a3:56:65:30:18:58:77:17:fc:f8:2b:21:a3:eb:32:
                    ce:d5:1c:c8:2d:02:0a:15:68:a3:a5:99:f3:a0:0b:
                    3a:a4:18:63:cb:1e:7d:a2:7b:33:f3:a9:98:0b:c7:
                    e1:c8:d4:af:aa:3a:18:de:bc:e1:da:93:63:eb:b8:
                    3d:d8:25:db:89:68:c2:53:f5:83:ee:30:87:67:9b:
                    c8:23:1f:31:89:f0:69:56:62:e6:83:de:08:73:56:
                    72:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:75:95:8B:DA:AD:57:C4:92:EF:9A:9D:4B:10:E7:3C:9A:65:5C:8B
            X509v3 Authority Key Identifier:
                keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33322d3332203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:9d:a8:25:71:3f:93:90:b7:97:42:27:99:2c:73:43:a4:
         f4:e1:76:6b:8f:89:c8:6a:49:95:44:80:e9:50:78:c7:7c:5f:
         83:3d:16:b6:06:fc:ee:56:4f:ca:c8:ca:00:68:53:b1:6d:b0:
         62:af:95:8b:9a:9d:54:01:63:c4:c8:6b:82:83:9d:33:83:4f:
         18:f2:7b:3b:32:3e:19:d9:a1:35:3f:3d:dd:6a:c4:4e:79:37:
         6b:6e:b9:12:8c:06:f5:2b:bc:c8:d3:1e:c7:9d:b5:25:07:ff:
         fb:b8:90:b7:c1:02:1f:45:34:1c:47:a8:01:bb:cc:ee:fd:aa:
         91:2b:36:52:cf:6c:8c:29:c2:b3:05:92:5f:fa:c4:e6:d6:5d:
         e6:65:04:c4:16:c8:d4:3f:e4:44:b3:28:8c:29:aa:55:b8:3e:
         0a:7a:ed:18:46:ea:3d:d2:3e:91:35:b2:0a:82:ac:9e:82:3b:
         5e:db:02:32:2e:0c:66:fa:4f:fa:aa:0d:1a:b7:bd:52:9c:b1:
         42:06:c0:df:df:12:b8:c0:bb:8c:e6:0f:15:0b:1d:cb:2d:a9:
         a3:46:86:92:b2:fd:da:82:0e:d1:f7:ac:04:be:8d:8a:36:e4:
         d0:88:f0:4f:17:c8:75:15:b3:a5:ba:6b:fd:ca:2d:ee:4b:a7:
         11:a2:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org