Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/323830343a336431343a3a2f33322d3438203d3e20323636323532.roa
File:                     323830343a336431343a3a2f33322d3438203d3e20323636323532.roa (raw, json)
Hash identifier:          DxpxOy9lDFKhfU9vbOxGe24QI3aY4Hh2XzjH4Bu3f6k=
Subject key identifier:   E1:BD:BC:11:21:EC:FE:A2:E2:62:E9:F9:CF:20:25:F7:7D:97:60:F7
Certificate issuer:       /CN=BAA18970CC079B92BECD7E6D383312166C09CD3E
Certificate serial:       33041546E2C54A320C58C9583D2E47B622FB3221
Authority key identifier: BA:A1:89:70:CC:07:9B:92:BE:CD:7E:6D:38:33:12:16:6C:09:CD:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA18970CC079B92BECD7E6D383312166C09CD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/323830343a336431343a3a2f33322d3438203d3e20323636323532.roa
Signing time:             Thu 04 Apr 2024 13:30:21 +0000
ROA not before:           Thu 04 Apr 2024 13:25:21 +0000
ROA not after:            Thu 03 Apr 2025 13:30:21 +0000
asID:                     266252
IP address blocks:        2804:3d14::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/BAA18970CC079B92BECD7E6D383312166C09CD3E.crl
                          rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/BAA18970CC079B92BECD7E6D383312166C09CD3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA18970CC079B92BECD7E6D383312166C09CD3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:04:15:46:e2:c5:4a:32:0c:58:c9:58:3d:2e:47:b6:22:fb:32:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA18970CC079B92BECD7E6D383312166C09CD3E
        Validity
            Not Before: Apr  4 13:25:21 2024 GMT
            Not After : Apr  3 13:30:21 2025 GMT
        Subject: CN=E1BDBC1121ECFEA2E262E9F9CF2025F77D9760F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:09:cd:b8:78:40:fd:da:da:28:9d:5b:13:
                    ec:9a:95:4a:6c:b3:5b:65:a6:23:1b:ae:00:08:2d:
                    86:e3:56:4d:92:5d:3d:70:f3:4e:e8:e6:b4:37:84:
                    0f:35:44:e3:20:6b:3e:10:d5:78:81:bd:03:e6:e5:
                    d5:0e:d3:37:2e:a4:02:cc:a7:90:13:0d:e0:8d:9b:
                    e9:31:c8:7e:6d:7a:4d:9a:83:55:86:ba:cb:34:88:
                    69:63:7d:97:33:cb:c7:dd:c1:2e:39:dc:43:53:fe:
                    15:7e:53:17:cb:42:0d:ad:16:92:b7:5f:0b:b9:4e:
                    ec:08:68:fd:4b:0e:1a:35:24:13:83:87:da:53:7f:
                    9f:e5:4e:15:e9:2b:cd:50:84:23:88:74:dd:f4:d4:
                    63:ae:84:46:fa:04:e4:db:30:1c:39:ed:13:38:85:
                    f5:96:69:8d:5a:89:45:1d:b0:3d:67:54:cf:ff:b8:
                    db:8f:a4:d4:12:1b:64:7f:84:96:63:c3:49:bf:25:
                    13:15:3c:4a:97:6c:b1:f9:27:b3:6b:31:e8:eb:98:
                    21:39:26:0c:e9:75:8b:ca:f3:15:04:45:c2:af:91:
                    89:87:89:03:92:1c:8f:bb:64:7a:55:dd:b4:22:df:
                    57:b9:cd:6d:65:17:e4:36:7a:33:b4:23:01:06:89:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BD:BC:11:21:EC:FE:A2:E2:62:E9:F9:CF:20:25:F7:7D:97:60:F7
            X509v3 Authority Key Identifier:
                keyid:BA:A1:89:70:CC:07:9B:92:BE:CD:7E:6D:38:33:12:16:6C:09:CD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/BAA18970CC079B92BECD7E6D383312166C09CD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA18970CC079B92BECD7E6D383312166C09CD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/323830343a336431343a3a2f33322d3438203d3e20323636323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:18:fe:31:22:bd:aa:ee:8a:53:56:25:69:7e:a4:46:34:
         be:1d:8f:13:87:85:35:41:ec:d6:e0:1b:0e:c4:e2:49:3e:b1:
         ce:9d:c4:6f:2d:c8:1d:a0:19:42:73:39:6f:14:85:fd:f3:21:
         a6:c4:9e:25:19:e5:f1:c3:2f:33:aa:cd:67:59:2a:5d:06:1f:
         cc:3d:91:72:e1:69:b4:42:02:e7:46:05:94:40:6b:15:38:97:
         5c:53:18:fd:ab:e9:d0:17:43:4b:1a:35:b4:9a:b8:a5:fe:7c:
         0e:5d:c2:20:a7:85:0f:6a:b7:31:03:0f:e4:1e:70:ee:31:56:
         6c:9b:4e:6b:b7:9c:cf:e0:27:34:a3:79:fd:cd:a2:99:4d:5a:
         a6:65:40:9d:7b:16:b0:d5:f6:0e:23:39:b8:53:1e:f8:5f:65:
         30:33:c1:52:07:79:83:fc:cb:bd:37:05:f3:74:3c:e6:0b:72:
         6d:0c:49:f5:bb:b9:b2:8d:b1:66:af:ae:67:7e:41:91:a9:84:
         b9:e0:06:7b:a7:bd:9e:c9:14:8d:15:86:de:31:1c:eb:54:dc:
         70:b4:d5:1a:10:4a:d5:81:30:00:9e:91:50:28:9e:75:3d:fa:
         cf:7a:b9:36:c6:67:27:fc:94:9a:4b:6f:48:ec:81:a4:4e:76:
         45:ff:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org