Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa
File:                     323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (raw, json)
Hash identifier:          jJaW1JIbNZVWgV1gpN+3FzBsfwPR149jRNwJEoDuaaE=
Subject key identifier:   D3:68:31:A4:5A:26:82:ED:E7:A0:C1:C8:6D:EB:D8:81:0E:19:3A:FC
Certificate issuer:       /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial:       4F7A91EA2C46C4E5BED65D176E483C075D8A3035
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa
Signing time:             Thu 04 Apr 2024 17:22:35 +0000
ROA not before:           Thu 04 Apr 2024 17:17:35 +0000
ROA not after:            Thu 03 Apr 2025 17:22:35 +0000
asID:                     264993
IP address blocks:        2804:311c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
                          rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7a:91:ea:2c:46:c4:e5:be:d6:5d:17:6e:48:3c:07:5d:8a:30:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
        Validity
            Not Before: Apr  4 17:17:35 2024 GMT
            Not After : Apr  3 17:22:35 2025 GMT
        Subject: CN=D36831A45A2682EDE7A0C1C86DEBD8810E193AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:07:22:6a:82:3c:a8:a1:f0:4d:aa:be:04:
                    0a:da:4b:ed:3c:6b:bc:ad:94:0c:69:2f:13:9d:88:
                    08:c1:e0:05:4d:a3:0b:79:4e:53:1b:66:68:57:f3:
                    00:df:18:17:1f:37:12:9e:aa:8f:aa:51:eb:50:87:
                    1c:70:25:04:dd:10:90:22:11:b1:ed:cc:f4:ca:99:
                    5d:42:27:6f:3c:93:66:21:7e:21:44:d4:4c:c6:ba:
                    52:90:5f:52:e8:4a:14:a9:e6:97:1c:98:1a:cb:20:
                    ac:b1:6c:19:37:c2:ce:b6:60:6f:b8:0c:00:5f:42:
                    93:99:fa:24:cb:19:4b:94:d2:c0:b6:31:04:3d:c2:
                    36:af:f9:33:32:1e:a2:a0:38:88:f6:6d:08:d8:63:
                    e0:0e:fa:27:50:f8:72:a3:81:ee:25:54:d3:1f:c9:
                    dd:23:36:42:c7:13:1c:da:3e:0b:63:60:c6:9a:02:
                    5b:a4:34:76:22:4f:3d:37:58:45:25:fd:3d:d6:30:
                    8a:0d:9a:e2:4e:bf:df:e8:97:ba:8d:7e:e0:a6:21:
                    3e:99:27:41:ac:02:9f:13:b7:27:ab:29:2c:6b:92:
                    81:ae:ed:0d:f2:50:29:ec:23:60:85:a4:03:a9:e6:
                    6e:59:c2:d0:11:c6:66:20:f2:5e:fe:7c:0d:8a:6f:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:68:31:A4:5A:26:82:ED:E7:A0:C1:C8:6D:EB:D8:81:0E:19:3A:FC
            X509v3 Authority Key Identifier:
                keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:311c::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:de:4d:46:b1:61:1d:b8:49:b5:83:11:c9:0c:35:92:d9:fc:
         93:99:b2:aa:fa:42:38:f0:da:8e:2b:19:c7:87:fc:cf:77:e7:
         66:c6:fa:62:ac:f9:e8:34:69:01:9d:19:ee:82:b1:42:6d:30:
         26:6d:b2:70:b8:68:d3:9a:0b:5b:0d:9c:92:8b:62:9a:c2:0b:
         91:8d:c1:8d:ff:d5:d8:c8:ab:ea:29:2b:2f:4a:21:6e:d7:57:
         b4:78:a5:eb:59:ce:9e:73:a4:ea:46:c9:b5:8a:b4:b3:e2:dd:
         e5:5d:02:42:8f:14:f1:4c:f2:5f:fc:ae:00:fa:9b:64:c1:0e:
         0d:ef:5b:6c:d7:01:d8:95:6e:cb:00:75:fe:9d:a5:8f:b3:9d:
         e5:ec:c4:86:bb:26:8e:87:62:dd:3a:c2:18:45:14:22:f5:fb:
         e8:2c:5a:4f:4a:b3:9e:bc:0e:b5:92:42:64:b7:e9:ac:a2:34:
         bc:96:f2:3c:f2:ec:88:9d:0d:62:f7:06:97:c2:7c:fc:eb:41:
         e3:7f:a8:a3:1e:3e:a7:04:10:7c:3e:da:53:2f:c4:4a:0f:f1:
         b7:72:f4:70:35:ab:24:57:d9:52:a5:5b:94:93:7d:f1:36:32:
         f6:41:9f:81:22:d8:19:ae:dc:34:d9:3d:98:c9:d0:09:76:44:
         f8:9e:7e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:42 2024 by rpki-client on console-ams.rpki-client.org