Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa
File:                     323830343a376264303a3a2f33332d3333203d3e20323731343536.roa (raw, json)
Hash identifier:          yZZPxZlmgTWL1Dws8k79zFgWYirf3SzOiTRDNPdndH8=
Subject key identifier:   56:A5:3D:B3:F8:DE:BB:93:C2:FE:3C:BB:9C:8B:8D:9C:9B:11:57:49
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       10454CC965D67FC689854856DEA243C366C09667
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa
Signing time:             Thu 04 Apr 2024 18:12:58 +0000
ROA not before:           Thu 04 Apr 2024 18:07:58 +0000
ROA not after:            Thu 03 Apr 2025 18:12:58 +0000
asID:                     271456
IP address blocks:        2804:7bd0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:45:4c:c9:65:d6:7f:c6:89:85:48:56:de:a2:43:c3:66:c0:96:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Apr  4 18:07:58 2024 GMT
            Not After : Apr  3 18:12:58 2025 GMT
        Subject: CN=56A53DB3F8DEBB93C2FE3CBB9C8B8D9C9B115749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:68:48:76:d0:f9:be:bd:1d:39:8a:44:34:
                    42:7a:4c:b5:1e:7b:e3:ec:76:fe:88:ab:b7:4c:11:
                    48:5e:7c:d3:24:cd:1d:53:6c:cb:43:39:e9:2f:94:
                    32:1a:dc:48:7f:99:65:0e:c6:52:fc:b0:08:56:df:
                    a9:c7:ce:55:3e:77:86:11:79:4d:85:5c:13:e1:9a:
                    a6:38:40:19:df:33:8f:94:b7:ad:f0:66:59:9e:1a:
                    ea:14:dc:42:b9:fa:6b:10:79:81:16:1d:da:c9:ac:
                    4a:2c:e9:4b:0e:6c:8c:26:c0:4d:65:2d:df:f7:db:
                    82:1c:52:f3:4a:88:e8:5c:b8:3e:cf:82:e6:8f:0e:
                    a3:5c:d2:c0:85:00:5d:f6:81:57:6c:cc:3d:8f:ec:
                    e2:19:55:b2:92:ab:0e:69:ae:5d:86:eb:26:1c:42:
                    25:10:bf:54:3d:63:25:e3:29:52:e5:9b:70:e7:bf:
                    50:c5:04:7f:e8:58:9a:4f:bc:49:d1:f8:38:9b:b3:
                    f2:63:57:b8:d2:df:b1:a2:63:fa:fe:03:33:22:72:
                    dd:e1:b2:7d:88:10:e3:34:e8:c5:9a:e0:3b:8e:d9:
                    5e:d0:95:db:06:0d:6f:49:1b:87:84:87:c8:af:39:
                    5d:4a:33:1b:27:d1:29:54:4d:5b:4e:17:60:54:98:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A5:3D:B3:F8:DE:BB:93:C2:FE:3C:BB:9C:8B:8D:9C:9B:11:57:49
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a8:34:ac:0e:8c:d8:f6:18:80:d3:9e:30:d1:b3:6e:55:45:56:
         01:cd:24:77:87:fd:20:8a:6e:f8:e9:78:ec:6d:82:67:dd:46:
         71:eb:9f:36:ce:6a:77:12:ea:2e:85:6c:ad:a0:4e:31:d1:6e:
         56:6e:85:ae:6d:4c:d3:0d:bb:91:0c:c4:74:d2:c4:41:f5:b5:
         10:31:d0:86:e4:17:07:83:2b:71:3b:90:ac:f2:9d:5f:6b:df:
         a6:0c:67:25:f7:dd:f5:83:c7:c0:34:a2:07:1a:f0:0e:d5:22:
         e3:d3:76:06:2f:6c:7e:43:43:8d:6a:30:2a:61:d4:e3:0e:0a:
         2a:42:79:64:ea:c1:90:ad:a2:cb:da:94:fb:1b:da:ea:8d:80:
         0d:93:8c:75:a8:99:54:c5:e9:bb:82:b5:54:4b:dd:38:4e:57:
         b9:31:cb:22:13:22:11:35:5e:65:7f:8c:a2:82:08:1e:6f:d7:
         04:af:4c:87:83:c1:44:51:5f:0a:12:5e:1b:c9:c7:6b:ce:72:
         a0:0f:5a:80:af:29:59:2a:e9:e6:4e:f7:19:e6:5f:88:49:59:
         fc:aa:60:12:bb:5a:01:9d:b9:c9:12:58:d9:bb:01:4a:e3:67:
         23:3a:72:77:41:76:7d:0f:a9:4d:62:42:bf:c9:2d:68:f2:d9:
         ee:c5:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:10 2024 by rpki-client on console-fra.rpki-client.org