Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa
File:                     323830343a376264303a3a2f33322d3332203d3e20323731343536.roa (raw, json)
Hash identifier:          HvjG9VvjeF3HCHxDbaO8dGPVTqujxjO/YF6l3s08BxY=
Subject key identifier:   79:B8:BD:0A:7D:7B:15:F4:50:AE:7A:71:46:62:22:BE:6C:A7:46:C3
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       23A4C8A5C883C57D9C61DD088574772AC9EE654E
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa
Signing time:             Thu 04 Apr 2024 18:12:58 +0000
ROA not before:           Thu 04 Apr 2024 18:07:58 +0000
ROA not after:            Thu 03 Apr 2025 18:12:58 +0000
asID:                     271456
IP address blocks:        2804:7bd0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a4:c8:a5:c8:83:c5:7d:9c:61:dd:08:85:74:77:2a:c9:ee:65:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Apr  4 18:07:58 2024 GMT
            Not After : Apr  3 18:12:58 2025 GMT
        Subject: CN=79B8BD0A7D7B15F450AE7A71466222BE6CA746C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:cf:54:43:9e:47:12:3a:81:89:a7:10:29:
                    3c:7d:a3:fd:05:34:c3:d5:ab:85:d0:9b:d8:89:9a:
                    2f:d9:41:8a:03:98:69:6e:02:d8:7c:86:46:6c:7d:
                    03:8a:c9:d9:39:96:08:2b:a7:65:a8:3f:ee:0e:dc:
                    56:93:9e:0a:21:a8:83:c2:46:2e:9f:e4:f9:85:cf:
                    62:d0:96:87:51:d5:7d:e0:c5:dc:4a:ad:76:7b:0a:
                    fb:a2:4f:8f:6f:56:0f:56:18:83:4d:28:97:f4:91:
                    b7:13:1e:d9:8d:da:4e:87:5e:af:c4:a6:b6:b0:73:
                    19:3b:6b:c2:e2:a9:f2:50:58:b5:e0:a8:58:b6:25:
                    17:40:6e:da:f8:51:66:90:6a:0d:27:48:f9:77:4b:
                    34:a6:e8:c0:f1:60:60:d9:e7:e3:26:b5:2d:8a:a5:
                    e2:a4:25:f4:e8:29:76:2d:63:77:19:01:2a:39:1f:
                    1d:c8:42:8d:8c:a6:8f:23:5d:45:69:4c:37:e4:b0:
                    bd:2a:51:a8:bb:bf:29:05:7b:e6:69:1f:79:47:0d:
                    34:69:aa:97:a5:d8:2a:3d:68:8f:ba:4a:22:c2:f1:
                    bf:5f:ef:8a:28:ec:22:0a:92:00:16:3b:d8:86:e1:
                    76:83:7e:df:19:1f:e9:18:fb:45:17:01:3b:e8:d0:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B8:BD:0A:7D:7B:15:F4:50:AE:7A:71:46:62:22:BE:6C:A7:46:C3
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:87:7a:8e:17:d6:bc:ae:99:cc:4b:65:8c:b6:0d:89:c0:
         c4:8c:14:bf:d7:f9:66:27:80:29:88:1f:b5:d0:da:2f:19:dc:
         5b:3c:6e:a6:9e:74:f4:d7:39:17:23:66:d2:5d:8e:a0:3f:57:
         40:8b:48:5c:18:92:3c:00:19:a2:7a:e9:f3:b5:b9:18:5a:3a:
         2d:f3:45:4b:bf:c0:f2:12:d3:7b:e1:84:d8:a8:02:92:07:a9:
         37:e2:98:2c:90:91:39:f9:34:82:17:40:60:a2:f5:0b:38:20:
         fb:4b:95:6c:a7:85:e3:25:82:51:6a:f9:e9:f3:19:b9:25:25:
         69:7d:f2:11:7a:a2:cb:ee:bb:1f:41:d3:1b:d1:1b:ba:ff:ae:
         dc:a5:bc:42:28:28:df:86:dd:c0:d3:9d:0f:c8:d6:f1:8f:a1:
         f1:be:8d:6f:bf:b9:90:07:bb:a7:2b:85:57:be:bd:02:a1:6f:
         9a:ec:b2:28:9d:8d:71:11:0d:70:68:66:b0:ee:f5:07:7f:e1:
         3d:39:08:7b:00:85:e3:09:f3:49:b8:53:37:07:15:cb:3d:2b:
         85:86:ae:e3:19:a5:18:10:c5:6d:66:e2:1c:f5:12:6e:9f:51:
         d9:8b:e3:79:9b:a9:13:b2:fc:e4:51:67:89:00:54:3e:34:65:
         41:36:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org