Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/323830343a326134633a3a2f33322d3332203d3e203533313637.roa
File:                     323830343a326134633a3a2f33322d3332203d3e203533313637.roa (raw, json)
Hash identifier:          KxJTIMlzr3+CTGMwYDa927EsHZ+e3NlxvGiL03sqo5M=
Subject key identifier:   4C:60:9C:A0:42:4A:85:9F:5A:D5:20:87:C3:4C:9A:5D:06:AC:32:A9
Certificate issuer:       /CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4
Certificate serial:       385BFE8371095AFF3FC72F8F218591EF2A996DA1
Authority key identifier: B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/323830343a326134633a3a2f33322d3332203d3e203533313637.roa
Signing time:             Wed 03 Apr 2024 19:18:31 +0000
ROA not before:           Wed 03 Apr 2024 19:13:31 +0000
ROA not after:            Wed 02 Apr 2025 19:18:31 +0000
asID:                     53167
IP address blocks:        2804:2a4c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.crl
                          rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5b:fe:83:71:09:5a:ff:3f:c7:2f:8f:21:85:91:ef:2a:99:6d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4
        Validity
            Not Before: Apr  3 19:13:31 2024 GMT
            Not After : Apr  2 19:18:31 2025 GMT
        Subject: CN=4C609CA0424A859F5AD52087C34C9A5D06AC32A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:fe:98:de:b8:6f:d3:3d:e2:f2:9c:fb:d2:
                    20:5c:8f:c2:30:76:cc:52:f2:10:ab:02:c3:fe:c0:
                    52:30:a5:29:38:e4:bd:82:ff:c3:1e:7d:88:eb:91:
                    1c:c5:d4:66:74:08:3a:b4:15:05:07:32:ff:ed:f4:
                    2e:52:e5:06:7c:4d:92:2d:89:f8:4a:1d:ef:f3:f6:
                    3f:ba:60:07:b5:f9:a4:46:8a:d7:e3:92:e0:5e:b2:
                    b7:5c:9d:a2:c1:ee:b2:75:71:95:38:e7:60:09:b8:
                    5d:37:61:74:4b:6e:fe:f4:1e:53:81:63:57:f8:bf:
                    5b:bd:a3:bb:75:6b:00:89:b9:c4:b6:67:8a:78:25:
                    00:2c:16:75:e4:da:e4:39:0a:1e:80:2d:0e:f7:c8:
                    8b:c9:4e:2c:38:f1:d0:13:f6:2f:1c:06:92:50:6c:
                    69:b9:e8:59:22:c5:0c:09:0a:15:5f:96:28:d4:1d:
                    2b:45:e7:48:70:d0:e2:21:b7:5f:78:d5:8c:1e:28:
                    ee:6f:11:ff:0e:e4:4f:2b:1a:8a:f6:f8:16:a7:09:
                    21:28:bc:b6:06:aa:15:7e:a6:aa:5c:18:0a:43:f8:
                    b3:48:60:c8:1d:66:54:d4:02:d0:d6:c0:10:9c:86:
                    7f:6b:94:6f:21:5b:c6:09:c3:7b:e2:e1:60:7d:eb:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:9C:A0:42:4A:85:9F:5A:D5:20:87:C3:4C:9A:5D:06:AC:32:A9
            X509v3 Authority Key Identifier:
                keyid:B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/323830343a326134633a3a2f33322d3332203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:85:05:87:ef:63:e8:44:01:e1:f4:ef:91:55:6b:b9:83:d9:
         1a:46:1f:5e:9c:a8:c8:5e:0e:d1:f2:f6:d3:fa:39:5a:b9:bc:
         e6:cc:4c:c4:a0:40:3c:b3:1b:78:db:75:ff:cd:75:80:1c:80:
         b0:9a:26:45:6d:44:15:51:5d:3c:f7:38:ee:b6:94:95:d9:0b:
         c0:11:a8:85:44:41:f8:81:50:17:c2:ad:81:4c:15:7d:2b:f3:
         54:e0:fb:c8:9f:9d:5d:4e:29:d2:93:d4:3f:8c:3a:26:a3:ff:
         1f:fd:23:5e:b7:80:26:6a:c8:30:97:73:fc:7b:b7:92:bd:94:
         56:a4:34:e0:5d:5e:be:62:74:f2:a3:9d:ef:29:5f:6d:fe:ab:
         8c:7c:f8:d2:80:d4:29:e8:0c:d4:93:d5:9a:61:80:0a:a0:3d:
         73:39:46:d8:d8:a5:ce:5d:37:56:c4:22:34:04:59:5a:e5:f4:
         79:34:ee:be:ac:28:e5:60:6f:2c:4d:70:b7:9c:18:c3:c4:0b:
         06:01:3c:c8:90:e7:58:54:c1:5d:48:37:f9:e3:bc:d6:f9:30:
         70:37:55:4a:81:2c:e9:85:42:24:63:ee:04:a6:70:4e:d5:0e:
         24:90:01:ed:12:7e:03:18:8e:c0:d2:fd:af:f2:99:99:e9:96:
         a2:de:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org