Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa
File:                     323830343a363763343a3a2f33322d313238203d3e20323639363439.roa (raw, json)
Hash identifier:          LNvle2Nx+NrdKHBtn2B2YvIxRHgPFzrWyDAwiGZFlJQ=
Subject key identifier:   D7:3F:75:E2:99:44:2D:0B:5E:6E:C5:E1:C3:32:B0:8D:21:C5:5C:32
Certificate issuer:       /CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
Certificate serial:       67A372AE6A468FDE9F05BB9DE3997A5CDF0336C2
Authority key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa
Signing time:             Thu 04 Apr 2024 19:27:22 +0000
ROA not before:           Thu 04 Apr 2024 19:22:22 +0000
ROA not after:            Thu 03 Apr 2025 19:27:22 +0000
asID:                     269649
IP address blocks:        2804:67c4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl
                          rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a3:72:ae:6a:46:8f:de:9f:05:bb:9d:e3:99:7a:5c:df:03:36:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
        Validity
            Not Before: Apr  4 19:22:22 2024 GMT
            Not After : Apr  3 19:27:22 2025 GMT
        Subject: CN=D73F75E299442D0B5E6EC5E1C332B08D21C55C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:91:49:58:96:f4:68:35:cc:ea:8d:68:ca:
                    b7:aa:32:12:09:92:bf:cd:ee:32:d5:b9:7d:0f:f1:
                    be:88:7b:3e:87:01:ca:ea:f2:7a:f2:66:c0:ff:ec:
                    8d:a3:f0:e0:c4:ae:9d:4a:09:eb:84:c3:79:5a:7e:
                    56:ba:d2:f6:bd:fa:1b:73:a2:df:64:02:78:02:c7:
                    75:ea:86:03:c3:c3:3f:a6:e4:bc:ef:38:b0:f5:06:
                    1f:45:b5:a3:96:00:9e:75:0b:ca:58:8b:37:24:10:
                    5c:04:df:f5:7e:97:73:15:d8:69:ac:c3:e6:db:77:
                    7c:d0:4a:fa:01:d5:eb:15:90:1e:dd:ec:2d:c2:21:
                    6e:6f:e0:e0:d5:6e:2c:86:22:06:24:d1:f8:79:ff:
                    cf:c5:03:dc:67:34:5f:38:54:c1:8a:88:c5:64:31:
                    b5:21:c2:29:da:97:43:70:5b:17:b9:1c:f4:3e:9d:
                    2f:ea:c1:4e:9f:67:7b:7a:9c:c8:35:c8:39:4a:56:
                    f3:01:07:3c:c4:52:fd:f3:eb:e1:76:1a:d8:0b:f2:
                    8b:e8:e5:db:9b:eb:fa:08:97:e5:5f:c8:58:4e:a1:
                    24:20:d9:69:ac:40:c4:c2:07:c2:73:6e:35:b8:08:
                    b1:f9:71:60:10:b3:c1:12:69:ec:72:71:3a:88:a3:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3F:75:E2:99:44:2D:0B:5E:6E:C5:E1:C3:32:B0:8D:21:C5:5C:32
            X509v3 Authority Key Identifier:
                keyid:BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:7d:16:3e:38:ae:86:35:55:cc:5a:f7:a7:b2:b8:f7:de:
         ec:19:79:64:33:d8:d3:60:b8:76:70:20:57:3a:fd:8b:d4:af:
         69:04:f3:27:d9:48:be:ae:ab:2e:1c:f4:c7:94:9e:58:a1:a2:
         76:c4:5d:4f:05:c0:ce:24:fb:9d:1c:15:59:7d:68:26:0f:79:
         2c:6e:c3:44:b3:9c:a2:0c:d9:0a:bf:4b:df:d2:6a:2a:71:f5:
         72:4e:ab:a4:65:cf:b6:93:6a:6e:21:13:00:e0:37:35:d2:b9:
         b9:96:dd:c2:d7:01:19:aa:6e:af:5f:99:19:2f:f1:cf:9d:f6:
         5e:55:d9:9c:39:2b:15:1b:cb:79:83:3b:98:e3:f4:b4:13:07:
         b8:fd:9a:8c:c3:ba:8b:1b:b4:41:55:35:e8:c8:64:19:80:3f:
         e0:50:88:58:ab:9d:e5:0e:b9:33:ee:bb:4b:4f:17:3d:79:d2:
         82:d5:97:57:e2:d9:e5:3a:e4:dd:50:2c:77:97:5d:81:83:8e:
         6c:98:e7:06:b4:e9:6e:74:06:1f:21:c6:57:91:dc:b6:6b:fb:
         81:7e:3e:4d:4a:14:f0:82:08:d4:9b:42:65:51:4d:f4:45:59:
         e7:a7:cd:39:15:be:29:9b:a5:83:8d:1d:21:69:94:62:18:0b:
         a0:86:61:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org