Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/323830343a343530633a3a2f33332d3438203d3e20323637363639.roa
File:                     323830343a343530633a3a2f33332d3438203d3e20323637363639.roa (raw, json)
Hash identifier:          NX8lZZTYi07lhGx9qEVOLoXcGSCHUdFNxO2I4+P9Q6Q=
Subject key identifier:   97:C8:80:E8:1D:32:D4:FF:A4:89:24:7B:F5:BA:0A:3B:F1:63:D9:E3
Certificate issuer:       /CN=478E2899036889EA4A713455340EF1FCB5B880A7
Certificate serial:       309D5DEC63596A5C7F5F4D85D9741652B837CB7F
Authority key identifier: 47:8E:28:99:03:68:89:EA:4A:71:34:55:34:0E:F1:FC:B5:B8:80:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478E2899036889EA4A713455340EF1FCB5B880A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/323830343a343530633a3a2f33332d3438203d3e20323637363639.roa
Signing time:             Thu 18 Apr 2024 13:39:04 +0000
ROA not before:           Thu 18 Apr 2024 13:34:04 +0000
ROA not after:            Thu 17 Apr 2025 13:39:04 +0000
asID:                     267669
IP address blocks:        2804:450c::/33 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/478E2899036889EA4A713455340EF1FCB5B880A7.crl
                          rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/478E2899036889EA4A713455340EF1FCB5B880A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478E2899036889EA4A713455340EF1FCB5B880A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9d:5d:ec:63:59:6a:5c:7f:5f:4d:85:d9:74:16:52:b8:37:cb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478E2899036889EA4A713455340EF1FCB5B880A7
        Validity
            Not Before: Apr 18 13:34:04 2024 GMT
            Not After : Apr 17 13:39:04 2025 GMT
        Subject: CN=97C880E81D32D4FFA489247BF5BA0A3BF163D9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:35:4c:c1:77:71:09:e2:c9:ed:8a:f4:3f:
                    2b:78:6c:2e:70:e9:20:c7:dc:33:c1:01:c1:ca:f1:
                    5e:6d:6e:f8:40:30:0a:c2:0b:9a:77:e0:14:f9:ad:
                    1d:fa:ae:61:ed:4c:19:e7:ce:f2:21:bd:ab:9b:91:
                    75:99:f2:e9:ee:e5:dd:d8:d8:df:e5:16:89:ac:67:
                    0a:4d:59:6d:46:a7:3b:25:df:35:f8:ee:35:6b:33:
                    59:ea:ea:5a:a2:34:d9:d8:1f:7a:f7:a3:b8:dc:ee:
                    ea:ef:72:3c:ff:a4:31:bd:35:10:a2:a2:63:69:ed:
                    25:e0:17:a1:4a:8c:18:7e:7f:7c:2c:48:87:c7:09:
                    2f:6f:b4:82:a6:06:e0:07:15:82:5d:12:07:05:40:
                    06:3c:8d:44:3c:48:2b:76:07:b2:b2:1e:37:1c:6f:
                    e3:ba:91:5e:a1:4a:99:aa:14:7c:3f:8b:2f:8e:11:
                    37:9b:25:af:04:5d:04:ea:2f:7f:8f:a9:76:05:05:
                    12:31:7d:13:2e:69:b0:c5:05:70:cf:20:8b:e9:74:
                    44:1a:8e:74:71:d5:63:f8:c6:0d:73:f0:7b:ab:95:
                    da:5f:b9:e5:ac:9c:37:ee:dd:2d:83:4a:34:7f:33:
                    bb:1f:55:4e:7d:b9:60:5d:d6:3e:40:bb:4c:66:e4:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C8:80:E8:1D:32:D4:FF:A4:89:24:7B:F5:BA:0A:3B:F1:63:D9:E3
            X509v3 Authority Key Identifier:
                keyid:47:8E:28:99:03:68:89:EA:4A:71:34:55:34:0E:F1:FC:B5:B8:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/478E2899036889EA4A713455340EF1FCB5B880A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478E2899036889EA4A713455340EF1FCB5B880A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/323830343a343530633a3a2f33332d3438203d3e20323637363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:450c::/33

    Signature Algorithm: sha256WithRSAEncryption
         c2:d0:93:f8:40:c5:d8:b3:96:69:04:3e:e5:43:36:b5:d3:c4:
         ef:1a:4d:d5:1e:fe:18:9f:d3:a7:19:ca:ef:ed:77:67:ab:5f:
         cf:57:39:2d:3a:9b:51:87:54:86:07:66:f8:48:c4:bb:e0:29:
         a5:e6:65:f6:74:79:7c:4b:bf:d4:27:e2:8e:4f:6c:0e:43:a6:
         a2:eb:52:81:ca:37:bc:bc:3c:d9:ef:ba:6e:93:a7:6c:77:db:
         fb:ff:90:d9:c1:eb:fd:90:96:10:eb:a1:98:d5:7e:c1:46:8b:
         fd:d6:1c:ac:fb:11:7d:1a:27:bc:2a:26:56:c4:c0:1f:73:c2:
         cc:3a:64:5e:c2:2a:e1:06:bc:f5:85:11:ae:f3:41:c2:13:7e:
         be:87:3d:a1:65:a6:0a:9a:be:06:94:f7:e2:96:dc:99:d7:02:
         6f:4d:96:5b:b0:fa:93:43:cc:f9:10:cd:2e:ea:82:d9:01:2d:
         aa:ac:a2:ae:3a:6d:ba:61:d5:a8:a9:9b:92:53:c5:34:11:45:
         9f:f6:ff:3f:a4:54:36:65:bb:7d:f1:66:e1:e4:26:e5:5f:67:
         ac:fa:06:9c:b0:0b:b2:64:7c:03:75:72:9a:cd:25:c4:8e:ae:
         16:60:51:cb:7a:d1:9f:3c:f1:05:f8:37:24:c8:a0:17:c0:8b:
         13:1b:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:43 2024 by rpki-client on console-fra.rpki-client.org