Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33332d3333203d3e20323637363134.roa
File:                     323830343a343366633a3a2f33332d3333203d3e20323637363134.roa (raw, json)
Hash identifier:          fH5WOwoRBa/2wTfgct+FIlDOg7Srty+u/N4xKkHkECA=
Subject key identifier:   B9:7F:93:C0:B7:F0:88:FB:14:A5:5E:A6:4D:15:A3:D1:E5:67:1D:09
Certificate issuer:       /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
Certificate serial:       1B1BA9D3C7C74FA8A2A6FF0DD797C409FFC29655
Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33332d3333203d3e20323637363134.roa
Signing time:             Thu 04 Apr 2024 20:25:44 +0000
ROA not before:           Thu 04 Apr 2024 20:20:44 +0000
ROA not after:            Thu 03 Apr 2025 20:25:44 +0000
asID:                     267614
IP address blocks:        2804:43fc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl
                          rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1b:a9:d3:c7:c7:4f:a8:a2:a6:ff:0d:d7:97:c4:09:ff:c2:96:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Validity
            Not Before: Apr  4 20:20:44 2024 GMT
            Not After : Apr  3 20:25:44 2025 GMT
        Subject: CN=B97F93C0B7F088FB14A55EA64D15A3D1E5671D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:72:a7:73:d9:9a:a2:f2:31:05:7f:c6:cf:
                    3f:0c:ef:5c:cd:53:79:6a:8f:29:01:6d:23:1d:05:
                    aa:b8:cb:0f:c9:48:6f:cc:2d:d6:0e:4d:1b:a6:3d:
                    9a:81:18:1f:0a:d6:d1:e0:20:28:a7:7a:82:55:da:
                    9d:f0:c4:f2:51:21:0a:50:6e:59:bb:a4:2b:03:41:
                    80:22:ab:11:e3:d5:57:18:0e:73:01:57:2e:69:cc:
                    fc:f7:96:dd:75:ab:a0:6c:0c:78:c2:e4:db:4b:ed:
                    07:87:07:1c:e0:a4:34:38:86:42:47:0b:f9:47:1d:
                    74:13:ab:09:1c:0a:61:2e:a8:2a:12:0a:cd:34:bb:
                    13:76:eb:0b:e8:67:c2:41:b1:36:d7:24:1b:82:dd:
                    19:ac:b2:a8:e1:60:a5:37:f6:52:75:67:d5:9c:27:
                    c0:72:aa:5a:23:26:50:41:4a:a6:fd:d9:42:f1:75:
                    bf:39:ee:20:f0:c7:3b:ef:a9:95:4f:65:59:4a:89:
                    86:16:d5:01:f1:87:6c:28:a7:dd:e9:a8:bf:fa:08:
                    72:18:5a:0f:4f:84:bf:59:56:87:2c:9b:4d:e1:40:
                    c4:e0:e9:69:71:54:62:0b:df:bb:8c:43:8e:7f:83:
                    55:28:50:bb:15:62:6b:88:bb:10:a9:f6:c0:9d:2b:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7F:93:C0:B7:F0:88:FB:14:A5:5E:A6:4D:15:A3:D1:E5:67:1D:09
            X509v3 Authority Key Identifier:
                keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a3a2f33332d3333203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:66:4c:e8:aa:8c:cf:21:9f:63:9c:8e:d5:11:66:4f:93:
         af:1c:f8:a0:53:5b:be:13:b7:eb:df:6a:53:f4:a7:0e:38:2d:
         00:95:72:8a:df:64:af:25:52:97:6a:d2:34:30:f0:f0:02:3d:
         b3:f3:b2:71:30:2e:bb:2e:95:72:b5:fa:7d:b2:06:c4:5a:5a:
         4e:31:05:85:82:86:42:44:8c:ee:b3:89:67:34:95:2c:74:34:
         30:fd:18:09:e9:b3:28:74:86:b7:5d:01:6b:30:5f:f9:fb:5e:
         62:88:9e:ba:4f:90:02:1b:39:56:a0:e4:c8:1e:a6:70:04:06:
         61:54:b3:d0:01:0a:58:c1:2c:3a:ca:ff:d8:04:d0:a2:27:4d:
         be:38:69:ea:df:e6:ac:dc:64:56:48:09:e4:19:15:a6:e3:ff:
         39:20:18:32:29:b4:1b:94:2f:24:aa:6e:c2:49:8d:03:f5:27:
         f7:c3:68:f2:84:b2:3d:85:e4:f9:7e:c1:4f:61:0a:1d:6a:ec:
         13:5c:66:33:95:7c:8e:3f:60:dc:e9:5b:20:09:a8:7b:10:f2:
         45:66:47:b3:4e:00:11:31:8f:54:b1:33:e4:02:cc:87:f6:ea:
         23:6b:24:2a:b3:1f:8d:17:c8:1e:73:19:0c:31:89:c7:32:b7:
         23:0c:05:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org