Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/323830343a373536633a3a2f33322d3438203d3e20323731303435.roa
File:                     323830343a373536633a3a2f33322d3438203d3e20323731303435.roa (raw, json)
Hash identifier:          D5ioELFZ6g/Oeg/lQyDuOUiVBKD5EnXS9P+anCrs1S8=
Subject key identifier:   6D:F4:A8:B5:D9:1F:CD:31:B8:08:BC:52:65:B3:4C:D4:3B:3B:EE:CE
Certificate issuer:       /CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
Certificate serial:       2946BAFAA00DEF72C69A871A71EFEE750EAD1B94
Authority key identifier: 22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/323830343a373536633a3a2f33322d3438203d3e20323731303435.roa
Signing time:             Thu 04 Jul 2024 19:07:16 +0000
ROA not before:           Thu 04 Jul 2024 19:02:16 +0000
ROA not after:            Thu 03 Jul 2025 19:07:16 +0000
asID:                     271045
IP address blocks:        2804:756c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl
                          rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:46:ba:fa:a0:0d:ef:72:c6:9a:87:1a:71:ef:ee:75:0e:ad:1b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
        Validity
            Not Before: Jul  4 19:02:16 2024 GMT
            Not After : Jul  3 19:07:16 2025 GMT
        Subject: CN=6DF4A8B5D91FCD31B808BC5265B34CD43B3BEECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:c8:ac:e0:73:d1:42:a5:ad:7b:0a:cf:29:
                    39:f5:f2:7f:69:b8:9b:b5:f0:75:d7:74:bc:83:57:
                    22:3c:4c:41:59:88:56:61:3f:b9:c6:ea:b3:26:d2:
                    5c:d0:d1:c9:af:b7:22:fd:a0:c4:cf:11:15:a7:93:
                    32:5d:ae:3a:29:5a:b2:25:92:99:1b:19:e0:0f:bc:
                    a3:3f:ba:9a:d3:c8:5a:f1:4a:dd:30:ef:2a:b0:f1:
                    2c:24:de:7a:b0:ed:8c:86:2b:48:62:3a:2c:96:71:
                    6b:17:1b:64:16:a9:c1:aa:94:03:37:04:4c:17:ec:
                    67:71:76:e8:9e:f5:ab:d3:e5:9d:3e:e1:70:4d:37:
                    c3:9d:5b:f9:65:8e:17:3c:8c:6f:4b:e9:55:f1:d2:
                    73:de:f2:72:b1:cb:f9:07:19:96:3a:a3:04:e7:d0:
                    b1:7e:40:54:84:e9:1d:49:ec:bd:48:ff:ec:7d:42:
                    56:64:37:65:36:18:26:e0:86:f8:cb:19:e3:61:83:
                    5a:1e:87:5d:76:52:60:dd:ad:b5:d2:1f:25:f1:14:
                    e6:31:26:66:cd:56:3b:24:18:ab:38:43:b5:54:13:
                    ee:d9:2e:bc:bb:02:96:4c:54:6a:85:28:43:0c:9e:
                    95:eb:4a:69:b7:11:0b:2b:7e:82:9c:e6:35:a9:a2:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F4:A8:B5:D9:1F:CD:31:B8:08:BC:52:65:B3:4C:D4:3B:3B:EE:CE
            X509v3 Authority Key Identifier:
                keyid:22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/323830343a373536633a3a2f33322d3438203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:756c::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:62:9d:d8:3f:31:fc:9c:32:32:56:55:fd:01:d9:96:1b:41:
         b7:58:c6:c2:d2:d0:4a:c7:db:ec:81:15:c2:45:9e:2d:a3:2a:
         97:da:4d:d4:23:fe:55:fc:14:a2:33:82:64:2a:94:5c:55:67:
         3e:48:4a:fe:7e:1a:f0:1d:b9:33:27:01:2f:90:a3:57:3e:ad:
         a5:b3:35:0b:63:fd:6e:3d:6f:d2:b5:6c:c7:13:d5:61:bf:1f:
         3e:5c:cc:9f:21:5f:a4:a4:ab:b8:c1:3f:39:52:6a:ee:b3:55:
         f4:9e:7c:85:3b:10:ef:0a:21:fc:a8:df:31:05:74:ce:b8:30:
         fc:ef:a4:63:59:28:30:10:2c:0c:da:7c:00:74:64:06:1b:ed:
         a3:96:52:9e:7f:58:bb:d6:dc:9b:df:e1:b0:52:2f:12:18:a6:
         2d:de:ef:92:a7:81:20:b6:db:9f:21:d3:ec:ab:50:5d:8c:ca:
         5e:df:0d:49:5a:ec:7e:6f:df:4f:0a:a9:ad:b3:6f:33:b9:c6:
         d6:27:e1:6b:c4:bd:c0:bc:d2:f6:dd:28:e9:08:09:a5:52:3e:
         d3:2e:cb:42:2d:76:d7:7e:45:4f:2a:76:8c:b5:de:fc:e6:3c:
         2f:4f:cc:aa:b0:48:ed:cb:80:ce:75:b6:19:73:43:c0:1b:f6:
         93:71:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:52 2024 by rpki-client on console-fra.rpki-client.org