Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/1/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa
File:                     323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (raw, json)
Hash identifier:          8NGgtyTMNGyce16HCvt5SRxAnOSnOjWW32nEXUb+w3k=
Subject key identifier:   D3:00:49:B7:80:14:A8:FB:C2:9C:4E:BE:61:45:F9:66:8F:74:03:4D
Certificate issuer:       /CN=01F41A5895F7B3BAA70285A22B370696C121B5CC
Certificate serial:       73C2C7784C28872F83ACFE412865E65C5F532429
Authority key identifier: 01:F4:1A:58:95:F7:B3:BA:A7:02:85:A2:2B:37:06:96:C1:21:B5:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01F41A5895F7B3BAA70285A22B370696C121B5CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/1/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa
Signing time:             Thu 04 Apr 2024 22:59:17 +0000
ROA not before:           Thu 04 Apr 2024 22:54:17 +0000
ROA not after:            Thu 03 Apr 2025 22:59:17 +0000
asID:                     272692
IP address blocks:        2804:872c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/1/01F41A5895F7B3BAA70285A22B370696C121B5CC.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/1/01F41A5895F7B3BAA70285A22B370696C121B5CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01F41A5895F7B3BAA70285A22B370696C121B5CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c2:c7:78:4c:28:87:2f:83:ac:fe:41:28:65:e6:5c:5f:53:24:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01F41A5895F7B3BAA70285A22B370696C121B5CC
        Validity
            Not Before: Apr  4 22:54:17 2024 GMT
            Not After : Apr  3 22:59:17 2025 GMT
        Subject: CN=D30049B78014A8FBC29C4EBE6145F9668F74034D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f6:07:c7:73:b7:de:ad:97:ba:3b:d7:90:9e:
                    67:b2:3a:5a:e7:c1:64:34:fb:26:43:d0:81:89:30:
                    38:e1:fc:af:b9:2c:41:c5:bc:4e:0c:7d:b2:bf:75:
                    4e:7b:35:c9:71:f1:94:c2:fa:50:ee:9d:d0:65:50:
                    41:61:2e:6c:7a:72:98:30:94:04:d0:98:73:61:4a:
                    50:2d:52:49:ab:ea:b2:82:fa:72:ac:bb:7a:64:a5:
                    aa:cc:44:07:d0:07:6d:47:45:3e:df:05:66:54:8a:
                    e1:c8:a6:87:7f:40:25:38:14:3f:13:03:56:48:9f:
                    4e:da:13:bd:c7:dd:fd:7a:e9:41:30:12:a9:51:b2:
                    d1:0e:ad:1f:2e:43:d9:13:a6:e9:a5:3a:de:9c:7e:
                    7b:fc:ce:cf:23:a0:2e:6e:2a:6c:92:d1:ae:a6:51:
                    15:c4:81:4b:cf:63:4d:45:31:98:71:8e:9b:ed:a8:
                    6a:54:f8:fe:c0:f1:92:a2:19:58:ef:e9:65:15:78:
                    6e:3a:e2:28:f2:c4:d6:91:f5:13:cc:19:06:db:f8:
                    38:a2:52:d3:17:03:7d:cb:99:bf:bc:d9:af:d7:f6:
                    00:5b:fe:8e:54:61:2d:9b:97:8b:72:c8:7e:66:b6:
                    bd:96:34:4b:de:1e:d8:29:c5:4a:9d:f5:9b:59:ec:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:00:49:B7:80:14:A8:FB:C2:9C:4E:BE:61:45:F9:66:8F:74:03:4D
            X509v3 Authority Key Identifier:
                keyid:01:F4:1A:58:95:F7:B3:BA:A7:02:85:A2:2B:37:06:96:C1:21:B5:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/1/01F41A5895F7B3BAA70285A22B370696C121B5CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01F41A5895F7B3BAA70285A22B370696C121B5CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/1/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:872c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:b1:d7:86:a8:5c:8b:82:92:3e:58:81:ce:8a:a4:4f:5d:db:
         d6:3a:5f:76:80:22:c6:f7:8a:f8:ef:d6:dc:d6:3f:f6:5f:bd:
         fa:8d:d6:c7:03:fb:73:f9:1d:70:6d:5c:ac:bc:46:51:d0:1c:
         b6:ca:a0:94:ae:ed:98:78:8c:f6:4d:0a:3b:e3:c9:91:17:f3:
         e4:44:1d:1f:57:d7:af:46:0f:d3:dd:84:1a:06:8f:16:77:04:
         96:2e:b6:5d:ab:14:41:a7:bb:57:d8:1e:ee:5e:6d:97:66:13:
         42:3a:bf:76:3b:e0:0c:ae:c4:4d:1b:08:12:e5:e3:89:50:1e:
         bf:58:93:2c:24:6f:dd:22:d1:58:99:25:24:e3:14:19:e1:f6:
         cf:92:b6:ef:14:78:f0:f1:16:a7:f2:66:7c:cb:9a:66:7c:db:
         9f:46:64:ac:9e:75:97:b9:1f:6f:ad:45:64:c9:e4:af:5a:8b:
         79:75:bc:ca:ef:b0:dd:b6:b1:c8:a6:30:2f:33:e8:58:89:53:
         e0:ef:41:17:8e:6c:ca:5b:40:2b:24:1f:4a:70:ee:29:fe:10:
         3a:33:f6:1f:58:ae:d6:a4:0f:4b:7f:35:66:54:fb:bd:0a:b5:
         ec:c8:07:2c:60:71:4a:06:a3:2e:ff:f4:10:7c:88:34:ee:7e:
         ad:b0:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:45 2024 by rpki-client on console-fra.rpki-client.org