Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa
File:                     323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa (raw, json)
Hash identifier:          anFLZXVF7KswH4cinkYV7BJJDWr5zwAnxcVRuGZ68jg=
Subject key identifier:   4E:74:21:91:71:E0:63:5B:90:AE:F3:53:7A:C9:B6:D7:86:12:DA:55
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       599A00BFC20F523AE0A58352D0E8957622F1D4F8
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa
Signing time:             Wed 03 Apr 2024 19:05:23 +0000
ROA not before:           Wed 03 Apr 2024 19:00:23 +0000
ROA not after:            Wed 02 Apr 2025 19:05:23 +0000
asID:                     263900
IP address blocks:        2804:276c:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9a:00:bf:c2:0f:52:3a:e0:a5:83:52:d0:e8:95:76:22:f1:d4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Apr  3 19:00:23 2024 GMT
            Not After : Apr  2 19:05:23 2025 GMT
        Subject: CN=4E74219171E0635B90AEF3537AC9B6D78612DA55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:b7:d6:01:84:46:72:d6:b3:01:6e:3b:45:
                    23:82:28:a0:fd:39:49:56:a5:c9:3e:98:56:8e:61:
                    bc:4a:4f:7e:83:04:ed:7b:1e:a9:1e:b9:35:15:44:
                    ae:dc:a6:f0:71:97:82:d2:04:a7:2b:2c:4c:c3:44:
                    60:06:c0:a0:a3:41:b4:fc:35:78:24:6a:9b:c2:dc:
                    ee:4d:9f:eb:bf:9d:6c:79:d9:80:34:8b:dc:d2:c3:
                    be:89:78:8d:ed:80:29:af:b7:06:a8:0c:23:f1:34:
                    51:a0:d1:cc:12:4b:1c:63:39:83:2a:6f:48:d5:a6:
                    5d:5b:89:f9:06:3e:3d:a0:d4:50:30:7e:8a:91:9e:
                    5f:bc:76:39:59:47:44:1d:a6:b2:32:de:60:47:7a:
                    76:a6:df:98:62:0b:31:fa:c9:15:f2:36:73:31:c5:
                    0a:d9:0f:ba:20:3c:23:64:58:db:0c:cb:15:82:43:
                    37:84:a7:8d:11:79:94:b8:49:27:86:02:29:24:f1:
                    c0:88:11:9b:1b:4d:94:59:d2:05:0f:96:ac:da:1c:
                    b2:4d:e7:25:12:fa:f0:7a:5f:88:b4:ad:f6:7f:28:
                    be:25:ce:ee:33:61:77:be:67:f9:38:a5:a3:2d:d2:
                    b4:63:3b:6b:38:cd:57:e5:98:ab:3d:dc:77:6e:73:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:74:21:91:71:E0:63:5B:90:AE:F3:53:7A:C9:B6:D7:86:12:DA:55
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:06:9c:f1:be:16:db:6b:bd:9e:98:13:b4:bd:2f:27:5b:e6:
         c0:bc:ed:f9:3b:67:d2:bb:c6:1d:02:4c:60:08:46:82:f7:a7:
         21:8c:19:66:a5:6f:a0:99:0e:32:3f:78:32:36:94:2c:a8:c9:
         1b:c6:fe:ce:16:8f:a8:ab:43:e0:dd:b6:82:a7:44:ea:29:44:
         36:e6:6c:7d:4f:59:bf:d0:c1:fa:84:e7:6c:07:cd:da:15:16:
         88:f2:0f:8b:30:eb:4f:19:58:c1:3d:c1:8c:91:95:19:c6:b0:
         31:11:b9:ff:5c:d8:bc:18:bd:41:bd:66:8c:dd:85:5f:14:f6:
         99:6d:2a:ac:d5:8a:63:d8:85:35:63:90:e0:a6:4a:10:d2:8a:
         3a:52:bb:40:a0:75:35:c2:f9:a3:77:e3:5e:e2:5b:43:8a:78:
         7e:d1:2e:af:b5:01:4b:2b:37:71:43:60:ca:3b:4f:10:f9:af:
         41:78:aa:68:e9:77:92:74:b6:0e:88:2f:79:ef:89:d6:a0:a3:
         56:25:24:5c:be:3e:46:e5:a5:bc:78:7c:c5:f9:07:ca:91:b1:
         64:d6:c5:ae:26:ea:05:48:61:17:0d:3f:f3:8c:eb:3c:84:9d:
         bf:e0:97:b3:6c:01:64:5f:c8:c3:81:7c:1e:7a:8e:81:b9:4d:
         9e:05:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:18 2024 by rpki-client on console-ams.rpki-client.org