Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a383030303a3a2f33342d3334203d3e20323633383535.roa
File:                     323830343a323663343a383030303a3a2f33342d3334203d3e20323633383535.roa (raw, json)
Hash identifier:          0xSbrtWcwK26F6ZN+NOvbbgVeSTgQhjAj4fZDMxuOY4=
Subject key identifier:   76:A2:4B:F0:7D:01:7B:6B:60:17:BA:63:00:22:BB:41:8A:FE:F6:5F
Certificate issuer:       /CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
Certificate serial:       3E1BD5E753EC903F930F43495779061ECBE81B41
Authority key identifier: 2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a383030303a3a2f33342d3334203d3e20323633383535.roa
Signing time:             Tue 26 Nov 2024 18:54:20 +0000
ROA not before:           Tue 26 Nov 2024 18:49:20 +0000
ROA not after:            Tue 25 Nov 2025 18:54:20 +0000
asID:                     263855
IP address blocks:        2804:26c4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl
                          rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1b:d5:e7:53:ec:90:3f:93:0f:43:49:57:79:06:1e:cb:e8:1b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
        Validity
            Not Before: Nov 26 18:49:20 2024 GMT
            Not After : Nov 25 18:54:20 2025 GMT
        Subject: CN=76A24BF07D017B6B6017BA630022BB418AFEF65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:66:ca:6a:af:c5:fd:68:5e:01:2f:29:eb:
                    59:fa:bd:89:3e:f0:d7:3d:be:d8:bd:90:d7:ef:f5:
                    6b:d7:86:06:f2:e0:6d:4e:be:06:c0:46:34:60:f2:
                    28:76:fd:be:92:eb:b0:88:2e:1a:46:98:70:1b:c7:
                    90:4d:59:35:37:e5:6f:44:76:6a:0c:57:cd:6a:14:
                    29:5c:bb:5a:81:c5:5a:b0:f3:8f:6f:a0:e4:33:31:
                    d9:dc:10:65:4d:ed:c8:23:19:7c:a2:e6:ae:18:55:
                    30:04:83:ea:64:b1:a3:4a:d3:f8:b9:6e:15:dc:74:
                    de:53:86:7e:ec:be:ec:8d:dd:7e:83:60:20:79:0e:
                    df:20:90:8d:17:5d:4a:a3:54:49:49:42:0c:21:df:
                    db:dd:69:9d:52:13:dc:98:4f:f8:a2:31:05:b2:66:
                    7d:39:c0:91:85:07:9f:a4:87:11:2b:67:27:7b:d6:
                    79:d2:15:14:a5:91:b0:36:fe:58:f4:0e:8c:a7:40:
                    1f:7b:5a:93:9d:4c:15:3b:5d:60:a5:0b:fe:4e:c4:
                    19:52:67:ca:c0:1c:9c:e4:87:3e:94:e0:ea:78:5a:
                    3e:2e:85:55:23:bd:3a:51:89:5e:77:56:df:19:18:
                    12:85:65:40:4c:6c:6e:46:59:bd:d6:cf:f2:3d:ef:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A2:4B:F0:7D:01:7B:6B:60:17:BA:63:00:22:BB:41:8A:FE:F6:5F
            X509v3 Authority Key Identifier:
                keyid:2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a383030303a3a2f33342d3334203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:b9:db:3d:7e:73:68:1f:16:82:02:b6:ff:68:3c:a1:d3:
         fd:68:24:e0:a2:94:85:e4:cd:c7:ed:72:c2:37:be:5d:09:61:
         ff:74:4b:0e:08:01:03:5e:04:56:5f:85:b0:6b:90:13:14:ef:
         89:60:97:e8:6a:22:a1:8d:d7:a2:fc:5d:ad:05:9f:d8:b4:27:
         13:b4:a5:3f:9a:35:2b:a8:59:c9:37:e5:b9:d8:b7:30:da:be:
         be:c1:85:06:49:0d:92:5e:7d:8a:91:48:15:98:f9:96:e6:73:
         b6:63:b7:f8:cc:0f:db:7c:cb:47:e3:a0:d5:c4:f3:89:bc:b9:
         94:5e:53:c1:70:81:a7:8a:99:00:2f:38:84:1e:af:f5:b3:b0:
         a4:00:5b:b8:95:3d:66:eb:da:8e:4e:3d:42:2d:b1:c5:26:61:
         96:c2:ba:53:64:82:95:15:1a:6c:1e:6e:d5:81:ad:53:2d:dc:
         2b:3d:84:44:a7:75:36:4e:6d:ed:ed:d8:6b:ce:97:bc:45:69:
         96:96:72:05:35:91:dd:a6:11:be:4a:08:70:cb:60:c8:dd:c8:
         b2:5c:c1:e7:af:3a:ee:4e:39:83:5a:53:87:a1:8c:89:d5:eb:
         11:a4:f0:45:f1:05:76:b1:ca:b9:65:e5:58:67:92:bb:af:d5:
         da:a9:8d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:50:50 2024 by rpki-client on console-ams.rpki-client.org