Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33322d3336203d3e20323637333330.roa
File:                     323830343a346263633a3a2f33322d3336203d3e20323637333330.roa (raw, json)
Hash identifier:          vwdDpy7xhXjdx40+vn+eOPhf1pFiYnifSWTg94out/g=
Subject key identifier:   82:3B:44:9F:22:1B:C3:46:8E:A7:5A:A1:65:DC:93:53:63:A3:75:EF
Certificate issuer:       /CN=CF003B615CAAD618C94E1EB995B64B55082F0C0C
Certificate serial:       488B5DC9BC12975C68EA19599061BF156F4598E1
Authority key identifier: CF:00:3B:61:5C:AA:D6:18:C9:4E:1E:B9:95:B6:4B:55:08:2F:0C:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF003B615CAAD618C94E1EB995B64B55082F0C0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33322d3336203d3e20323637333330.roa
Signing time:             Mon 22 Apr 2024 13:16:01 +0000
ROA not before:           Mon 22 Apr 2024 13:11:01 +0000
ROA not after:            Mon 21 Apr 2025 13:16:01 +0000
asID:                     267330
IP address blocks:        2804:4bcc::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/CF003B615CAAD618C94E1EB995B64B55082F0C0C.crl
                          rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/CF003B615CAAD618C94E1EB995B64B55082F0C0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF003B615CAAD618C94E1EB995B64B55082F0C0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8b:5d:c9:bc:12:97:5c:68:ea:19:59:90:61:bf:15:6f:45:98:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF003B615CAAD618C94E1EB995B64B55082F0C0C
        Validity
            Not Before: Apr 22 13:11:01 2024 GMT
            Not After : Apr 21 13:16:01 2025 GMT
        Subject: CN=823B449F221BC3468EA75AA165DC935363A375EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:75:95:29:6e:f0:5c:43:4a:c8:4e:00:2c:
                    97:af:ce:db:eb:00:9f:bf:9a:2f:4e:b6:f4:c6:c1:
                    f6:be:77:40:6e:63:0a:4d:93:aa:96:4a:90:21:e2:
                    f1:5e:5f:e7:66:10:1f:75:8b:01:8d:f6:e3:6c:c5:
                    86:09:5c:62:06:ed:bb:18:1a:ff:84:4e:82:58:06:
                    89:ad:52:e8:55:93:24:e1:df:fc:9a:df:7b:f6:7e:
                    b8:eb:19:84:19:c4:34:a1:fe:40:7c:8b:27:33:85:
                    72:a9:c1:9d:32:ba:12:80:8b:50:42:a1:68:0b:e8:
                    54:38:a7:16:15:ac:b5:9a:8e:93:75:c5:98:cb:6c:
                    6f:cd:9a:40:6d:b7:2e:7f:ce:e7:17:25:c1:8b:02:
                    f1:81:0d:93:96:0d:0d:0c:e6:8f:bf:68:a7:91:89:
                    53:70:d6:18:76:fa:b6:a5:54:6c:a4:df:b7:a1:b4:
                    bf:ff:b0:b3:94:83:f7:a6:83:67:94:c4:70:5b:a6:
                    c8:25:e6:85:d5:be:ec:9f:1f:d3:e7:d0:fe:68:a5:
                    ff:02:f3:82:09:bd:30:03:f0:89:6b:6c:09:8e:25:
                    cd:11:48:0f:fa:fe:a3:12:59:3e:cb:f3:2b:98:e9:
                    51:74:bb:9a:76:9c:14:a1:a4:b0:32:b1:bb:f2:b7:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3B:44:9F:22:1B:C3:46:8E:A7:5A:A1:65:DC:93:53:63:A3:75:EF
            X509v3 Authority Key Identifier:
                keyid:CF:00:3B:61:5C:AA:D6:18:C9:4E:1E:B9:95:B6:4B:55:08:2F:0C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/CF003B615CAAD618C94E1EB995B64B55082F0C0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF003B615CAAD618C94E1EB995B64B55082F0C0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33322d3336203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:4c:1f:7b:fc:e7:15:ff:cb:31:53:fd:70:83:4f:30:f4:5d:
         e8:d8:7e:f6:4e:cf:8c:ae:77:b8:8a:41:17:f8:e8:b7:37:22:
         dc:89:89:22:ce:fe:66:88:72:4c:49:89:ab:41:b2:3d:8d:67:
         56:60:a7:e6:71:93:a5:15:5c:ff:f1:0e:2a:97:23:56:ab:39:
         15:28:02:5c:5c:c8:b2:1a:6e:b9:40:b6:0c:6e:1b:ea:69:b0:
         04:75:ab:83:8d:15:aa:9a:b8:eb:37:f3:28:18:01:ae:8d:89:
         05:77:3d:67:38:c2:9f:d0:e8:18:1d:33:ed:12:bb:5d:6a:f1:
         a8:82:9f:bf:1e:99:06:54:1b:2c:4a:d5:b2:a0:04:c0:b8:e1:
         4c:d2:7a:58:f5:18:2d:fd:29:e7:b0:bc:96:3f:9e:97:f8:54:
         ce:e8:e6:81:26:7b:25:b7:c4:4a:ad:42:e5:1a:18:1b:11:2a:
         b2:90:cb:bf:86:67:a1:df:a3:b4:e2:d8:75:f9:cc:de:39:7b:
         7b:57:cc:0e:f1:d8:4b:ba:55:59:c8:95:a4:99:35:f6:d7:ee:
         bc:ed:1c:62:ce:ef:04:56:0f:92:98:55:6e:eb:15:31:3d:97:
         43:8f:c9:00:c9:f8:2f:9d:0d:fc:ff:60:37:0d:c9:e2:88:b8:
         54:9c:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:12:45 2024 by rpki-client on console-ams.rpki-client.org