Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/323830343a3638303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830343a3638303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          GXHvxv/rX7SoJk7S69+B7WvJC8UbWxJdax9hfvtQ6WE=
Subject key identifier:   46:B9:B6:92:8F:FB:A5:45:C1:5D:E0:11:E0:4D:00:2B:22:80:89:F6
Certificate issuer:       /CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
Certificate serial:       1B10AC378349D519FCD800DB8276BB22CEAC3B5B
Authority key identifier: BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/323830343a3638303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Fri 05 Apr 2024 03:32:32 +0000
ROA not before:           Fri 05 Apr 2024 03:27:32 +0000
ROA not after:            Fri 04 Apr 2025 03:32:32 +0000
asID:                     262589
IP address blocks:        2804:680::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:10:ac:37:83:49:d5:19:fc:d8:00:db:82:76:bb:22:ce:ac:3b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
        Validity
            Not Before: Apr  5 03:27:32 2024 GMT
            Not After : Apr  4 03:32:32 2025 GMT
        Subject: CN=46B9B6928FFBA545C15DE011E04D002B228089F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:2a:ca:e7:f3:11:23:2e:ab:10:42:b7:19:
                    fb:71:92:3e:6a:f3:e9:b6:5e:31:31:ea:9e:37:bf:
                    50:c3:f2:dc:06:40:8b:18:b7:f6:fc:cf:98:1c:4f:
                    00:19:65:aa:76:3f:41:7f:1d:fb:07:6d:3a:11:29:
                    dd:11:97:cd:aa:ce:ea:26:a2:05:ab:6b:a9:1b:d8:
                    8b:c7:fe:d3:8b:31:7c:c0:c7:6f:e3:6a:54:93:db:
                    36:54:af:5a:93:cf:67:a9:0a:61:6a:c4:3d:4b:94:
                    cc:92:2c:54:8e:fb:3a:0a:59:fc:d0:66:e8:59:ec:
                    77:a9:9a:21:5c:78:5e:4b:25:09:d4:97:aa:bf:51:
                    f7:72:0d:23:8f:67:a5:48:ea:5e:44:05:41:34:28:
                    be:77:79:16:3a:e4:66:36:27:d5:e2:f3:4f:70:18:
                    ae:fe:b7:19:ad:1b:fe:07:00:32:a1:93:de:12:b2:
                    9b:c5:72:9a:71:1c:67:4d:57:9f:2f:68:f0:0b:97:
                    0c:05:e6:ec:c5:da:05:a4:22:14:3f:b8:0d:78:09:
                    c4:ec:3b:37:bd:fc:25:8a:78:18:20:fc:1f:4b:07:
                    44:bc:07:1b:f7:18:25:b1:21:a4:9c:5a:2e:e0:d3:
                    5c:33:0e:6d:2a:30:dd:55:51:80:03:b7:b9:42:00:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B9:B6:92:8F:FB:A5:45:C1:5D:E0:11:E0:4D:00:2B:22:80:89:F6
            X509v3 Authority Key Identifier:
                keyid:BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/323830343a3638303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:81:e7:80:4a:9c:62:a2:4c:a1:03:06:20:28:3e:0f:ca:ae:
         b1:f0:39:26:f1:b0:c7:50:d6:20:7c:16:3d:d1:2d:0f:f2:19:
         d0:64:6a:b4:2f:e2:85:21:d1:d1:14:d1:68:35:b2:6e:cc:35:
         b5:a1:bb:dd:e6:b0:63:b5:17:18:cb:f8:3c:97:e7:c5:7d:25:
         11:0e:a7:ad:f4:e2:d4:2e:c4:f0:2f:d9:da:1e:15:94:fc:ba:
         a7:4b:ad:86:35:bf:e3:01:82:b3:90:ea:33:fa:8e:d8:ef:53:
         dc:94:74:50:f8:79:69:4b:0e:38:f7:eb:66:9f:44:79:b1:aa:
         01:a3:21:ab:29:a8:29:5d:0a:36:36:2b:b0:9c:86:dc:e5:10:
         43:05:fc:e8:c1:9a:c3:d8:a5:69:c0:b4:82:ea:39:7a:23:e6:
         b8:23:bd:7c:bc:7a:71:8f:91:40:12:fa:13:5e:96:f8:d4:9a:
         6e:f0:12:e3:b5:7e:d5:a7:f7:ae:65:56:96:0c:10:a3:3b:64:
         b8:69:1c:b2:91:60:53:10:78:9f:2e:c8:f4:73:6d:b9:60:a2:
         a7:19:3b:5e:08:6a:d5:94:b1:44:9a:16:61:73:78:70:96:c0:
         2d:4d:54:1f:50:aa:98:8e:b8:d2:8f:74:95:e7:2a:15:35:28:
         c7:c2:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:24 2024 by rpki-client on console-fra.rpki-client.org