Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/323830343a333330633a3a2f33322d3336203d3e20323635313133.roa
File:                     323830343a333330633a3a2f33322d3336203d3e20323635313133.roa (raw, json)
Hash identifier:          AJN1lV6OGHgqGanDHwyEOSb/ImYoqMNVouDFgr6aH3k=
Subject key identifier:   BC:74:C6:FA:DF:AC:28:58:37:69:FD:03:7F:C8:5C:60:0B:93:FB:44
Certificate issuer:       /CN=43B19C9E57D3EDADD315DF0E16760E303285E640
Certificate serial:       7B0581AD7B6A34C47EB753A40D70309B9475515F
Authority key identifier: 43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/323830343a333330633a3a2f33322d3336203d3e20323635313133.roa
Signing time:             Thu 04 Apr 2024 20:46:34 +0000
ROA not before:           Thu 04 Apr 2024 20:41:34 +0000
ROA not after:            Thu 03 Apr 2025 20:46:34 +0000
asID:                     265113
IP address blocks:        2804:330c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl
                          rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:05:81:ad:7b:6a:34:c4:7e:b7:53:a4:0d:70:30:9b:94:75:51:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B19C9E57D3EDADD315DF0E16760E303285E640
        Validity
            Not Before: Apr  4 20:41:34 2024 GMT
            Not After : Apr  3 20:46:34 2025 GMT
        Subject: CN=BC74C6FADFAC28583769FD037FC85C600B93FB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:e0:fc:86:98:d2:66:c4:69:e5:bd:05:03:
                    e7:13:9f:c0:f6:21:18:8c:4e:9c:7b:06:b3:65:f5:
                    b9:30:81:50:a6:08:cf:47:19:75:41:fa:95:1a:66:
                    83:cb:bf:d3:7b:68:71:73:13:68:53:d5:07:a1:c8:
                    fd:56:48:b9:0a:4c:75:8d:9d:fb:39:ef:a0:33:5e:
                    a9:76:a0:53:f8:eb:e0:8b:ea:f0:ae:f7:9f:ac:c4:
                    db:22:d1:f5:02:a1:11:2a:df:e4:25:1f:74:e1:20:
                    4b:99:9d:51:2b:d0:6a:d6:e9:6c:10:a9:a6:71:be:
                    28:5b:10:d9:ea:f5:8f:78:83:3b:03:40:51:d9:1c:
                    28:f8:d8:26:27:4a:5e:09:da:50:f2:27:dc:90:0b:
                    c0:3e:d8:d1:9f:d9:a5:de:14:49:9d:18:4d:72:88:
                    97:f2:85:18:63:47:29:32:31:48:08:81:b0:16:02:
                    ef:41:7d:8a:26:50:38:fa:2a:55:e7:6a:d9:d8:79:
                    a6:ef:1a:46:c6:6d:4d:27:59:83:b4:99:87:8c:ba:
                    4f:8f:d8:20:f2:32:aa:e5:ee:e3:8a:0b:d9:d7:b3:
                    0a:c5:e3:25:a5:51:7b:9d:13:1e:63:e1:02:f6:00:
                    99:de:2c:46:62:60:b5:f5:86:4b:07:5b:4b:a1:6f:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:C6:FA:DF:AC:28:58:37:69:FD:03:7F:C8:5C:60:0B:93:FB:44
            X509v3 Authority Key Identifier:
                keyid:43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/323830343a333330633a3a2f33322d3336203d3e20323635313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:330c::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:af:3b:22:e6:f2:dd:82:45:73:c3:db:bc:c9:f3:d5:f2:cb:
         44:22:34:da:d4:84:b6:12:66:23:a1:54:9e:4e:e2:db:d2:e1:
         3d:a6:54:5c:2b:26:6c:10:3d:ba:13:31:6c:10:03:f5:73:2b:
         f2:89:c4:b9:ed:db:27:10:08:a7:7c:10:55:3a:6f:85:04:e3:
         9b:4c:30:6b:9f:95:f5:ec:d7:21:bf:c0:62:ce:5a:8f:f3:59:
         ea:1c:82:ca:0a:fc:f3:a9:24:e7:af:ee:2f:63:d0:47:ab:8e:
         e5:99:39:9d:4e:aa:13:dc:8b:77:5b:d6:bc:75:7c:94:65:35:
         fe:e7:68:49:38:82:3c:04:73:3b:00:45:39:3e:f3:b5:fd:34:
         3a:99:00:94:8f:84:79:7d:53:bc:0a:76:be:0a:45:78:1e:bd:
         12:5c:db:64:7d:79:dd:28:2d:07:bc:9d:d7:30:f1:76:2d:d2:
         ff:0c:db:7b:96:4a:e0:3d:b6:f8:64:39:78:0b:f5:9a:d1:33:
         44:d6:00:5f:e6:18:a4:60:d9:a9:73:93:54:1c:e3:e3:7c:9c:
         b3:ef:61:b6:fc:91:f2:41:0e:ae:e7:32:0b:2e:11:1e:80:bc:
         be:9f:6e:25:a9:7d:ae:52:08:d9:8b:37:74:01:08:77:9b:0d:
         79:7c:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:42 2024 by rpki-client on console-fra.rpki-client.org