Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/1/323830343a326233303a3a2f33322d3438203d3e20323632373431.roa
File:                     323830343a326233303a3a2f33322d3438203d3e20323632373431.roa (raw, json)
Hash identifier:          g5dGSANOK31w5M4DTZmx4JFx3Fy78PykbwVVTdvxZtg=
Subject key identifier:   EA:83:D8:FD:A9:59:E9:32:19:C2:4A:E8:89:26:69:0D:76:2A:AB:3C
Certificate issuer:       /CN=F116D9BA3FFE8D086E7E2357C8BB80D4B4A91D61
Certificate serial:       716229682638E6A891EED3D4B51D9EE4568B667F
Authority key identifier: F1:16:D9:BA:3F:FE:8D:08:6E:7E:23:57:C8:BB:80:D4:B4:A9:1D:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F116D9BA3FFE8D086E7E2357C8BB80D4B4A91D61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/1/323830343a326233303a3a2f33322d3438203d3e20323632373431.roa
Signing time:             Thu 04 Apr 2024 06:51:48 +0000
ROA not before:           Thu 04 Apr 2024 06:46:48 +0000
ROA not after:            Thu 03 Apr 2025 06:51:48 +0000
asID:                     262741
IP address blocks:        2804:2b30::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/1/F116D9BA3FFE8D086E7E2357C8BB80D4B4A91D61.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/1/F116D9BA3FFE8D086E7E2357C8BB80D4B4A91D61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F116D9BA3FFE8D086E7E2357C8BB80D4B4A91D61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:62:29:68:26:38:e6:a8:91:ee:d3:d4:b5:1d:9e:e4:56:8b:66:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F116D9BA3FFE8D086E7E2357C8BB80D4B4A91D61
        Validity
            Not Before: Apr  4 06:46:48 2024 GMT
            Not After : Apr  3 06:51:48 2025 GMT
        Subject: CN=EA83D8FDA959E93219C24AE88926690D762AAB3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:38:04:b4:61:ab:4b:f8:37:b8:29:19:bf:
                    2d:c9:3e:ec:ba:c4:f0:28:d9:89:51:b2:3e:7d:46:
                    00:9b:df:99:b3:9d:28:d2:d6:44:89:66:df:36:d9:
                    d7:4b:74:2f:6d:ef:e0:7e:f8:13:d6:60:bd:79:37:
                    bb:a9:f4:14:f5:cb:90:02:9a:a3:0a:7c:9f:1b:15:
                    f4:5d:0a:81:70:11:af:d1:e0:89:5b:df:48:d1:d5:
                    89:f2:2e:13:69:09:ad:91:84:23:8f:a1:38:9b:84:
                    2a:28:74:2f:5f:ee:ff:91:1d:ad:72:c9:86:b1:78:
                    db:db:de:e0:09:da:a1:6e:48:ef:fe:ce:6a:50:9c:
                    3d:6e:8a:9e:27:a2:99:3e:48:87:af:63:5e:6f:13:
                    3e:18:98:66:38:e4:d4:f8:6d:35:7a:42:29:1f:8a:
                    f9:51:65:0e:18:c7:e9:8b:3e:a0:45:25:d2:33:c6:
                    5d:ca:71:a5:ef:15:ad:a6:c9:a4:ec:08:0f:6d:26:
                    6c:5d:db:cf:e5:de:7f:8d:0e:6b:cf:f7:2f:6d:3b:
                    32:7b:b2:f5:bc:d4:80:94:c1:a4:b2:6c:2d:35:42:
                    d4:a5:97:5f:b4:bd:ff:fc:48:0a:b7:01:63:22:ed:
                    93:5a:cf:77:7c:9f:ee:fa:4d:e1:07:8d:e6:39:d1:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:83:D8:FD:A9:59:E9:32:19:C2:4A:E8:89:26:69:0D:76:2A:AB:3C
            X509v3 Authority Key Identifier:
                keyid:F1:16:D9:BA:3F:FE:8D:08:6E:7E:23:57:C8:BB:80:D4:B4:A9:1D:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/1/F116D9BA3FFE8D086E7E2357C8BB80D4B4A91D61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F116D9BA3FFE8D086E7E2357C8BB80D4B4A91D61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/1/323830343a326233303a3a2f33322d3438203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:dc:72:7b:c1:8b:b6:34:30:28:96:43:7b:79:63:6a:51:
         50:44:ec:89:e8:6d:55:28:0f:74:c7:80:3d:4a:ff:9a:95:4a:
         51:74:7c:db:bf:0e:08:e2:00:43:d8:3b:08:07:28:1d:5e:86:
         14:e6:01:70:22:dd:ac:68:2c:01:e2:03:32:21:d3:63:65:f7:
         ae:6a:c4:9d:30:13:bb:88:ef:f5:5d:5b:ca:7e:23:39:c5:a8:
         29:72:29:53:59:e7:c5:cf:47:de:dd:9f:c9:b1:57:d0:a4:6f:
         f6:07:3b:b5:46:2b:3a:64:89:36:04:5b:12:4d:5e:0a:62:09:
         8f:79:29:cd:b7:73:de:1a:d8:3e:75:4e:2a:76:bb:5e:0e:df:
         e9:b5:02:62:ee:a9:0a:ca:c2:fb:04:77:5c:af:a9:6e:be:ad:
         7a:ae:49:8f:a8:35:4a:e7:23:f9:ac:a7:ae:4f:68:f5:da:0f:
         a5:b0:5f:36:e7:df:eb:bb:7a:45:a5:6e:89:83:db:b4:54:ab:
         e7:6e:74:ed:a0:c1:42:c3:fc:1c:cd:22:85:8c:c5:b5:b5:95:
         75:be:20:20:92:03:8f:50:d8:3a:05:52:cc:36:ec:52:41:25:
         25:58:90:98:7c:5c:5d:ea:0c:f8:9e:4e:f1:0a:a7:b9:0a:96:
         f8:be:cb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org