Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
File:                     323830343a373434343a3a2f33322d3334203d3e20323730393730.roa (raw, json)
Hash identifier:          PUhLIB8SSaRVgT7VzOyCgqx971x+yevvaytDg0D3ezU=
Subject key identifier:   DA:6F:FD:AA:11:05:E8:FD:C2:8A:09:EE:C2:D9:CB:2F:ED:6E:DE:12
Certificate issuer:       /CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
Certificate serial:       050C9FC56711023707A676E2B5D5E5F4860789B4
Authority key identifier: 2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
Signing time:             Thu 04 Apr 2024 09:11:47 +0000
ROA not before:           Thu 04 Apr 2024 09:06:47 +0000
ROA not after:            Thu 03 Apr 2025 09:11:47 +0000
asID:                     270970
IP address blocks:        2804:7444::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl
                          rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0c:9f:c5:67:11:02:37:07:a6:76:e2:b5:d5:e5:f4:86:07:89:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
        Validity
            Not Before: Apr  4 09:06:47 2024 GMT
            Not After : Apr  3 09:11:47 2025 GMT
        Subject: CN=DA6FFDAA1105E8FDC28A09EEC2D9CB2FED6EDE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:51:f5:29:f9:d2:6e:83:10:d3:39:8a:6d:
                    ff:a0:45:5d:5f:9c:61:d2:4f:d3:dc:b0:d9:06:3f:
                    0f:b5:f0:01:65:5d:03:2f:a2:ef:1d:b7:4b:42:a9:
                    bd:81:de:16:ac:44:56:08:60:2f:3e:54:49:f8:13:
                    73:c0:23:8c:b9:d6:5b:a9:4b:fa:1f:ce:ba:09:2d:
                    35:9f:3c:1c:8c:85:f4:b6:b6:52:ec:c1:70:49:ec:
                    82:9c:2e:8b:41:4f:00:2b:2c:07:62:b7:2c:27:4f:
                    de:0b:02:72:ca:2d:38:b3:1e:30:56:a9:b3:8c:e9:
                    a5:54:83:6e:6b:8e:40:7d:60:18:5d:07:a1:e9:20:
                    8b:6e:46:7f:71:67:fd:8c:92:fa:46:c6:e4:23:bc:
                    71:8f:ab:8a:23:f8:b5:82:6c:ad:42:f7:f7:8d:a0:
                    ca:01:07:8a:f0:db:bd:43:9d:18:1d:41:30:92:61:
                    48:0f:f6:69:d8:c8:cf:a3:5d:c2:c1:76:a3:de:a3:
                    9b:c2:b2:70:b6:9f:c8:01:96:bb:26:b1:ac:a4:53:
                    72:6f:63:06:a8:c5:b4:9e:d2:95:b9:1b:34:e1:71:
                    c4:7f:70:4a:8e:02:89:4b:4c:c5:66:41:4c:d8:68:
                    08:bb:38:dd:35:ee:9c:d8:84:34:e6:1e:64:68:88:
                    a5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:FD:AA:11:05:E8:FD:C2:8A:09:EE:C2:D9:CB:2F:ED:6E:DE:12
            X509v3 Authority Key Identifier:
                keyid:2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7444::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:b4:65:b4:d1:46:32:aa:1e:7b:45:17:16:63:56:c8:2c:f0:
         da:fa:af:86:86:86:78:15:db:12:4d:6e:06:8d:88:7a:f5:ea:
         9e:61:0a:66:ae:d2:7f:5b:0b:b5:ea:03:d8:fd:66:75:16:cd:
         80:ab:33:79:9d:b9:cd:81:72:e6:20:11:ca:24:ef:e5:b8:5b:
         8a:22:96:71:df:8b:1b:b0:65:0e:63:3f:e0:ef:f9:a7:55:ca:
         72:e4:7c:11:eb:f9:2d:a0:4c:e9:50:16:f4:f8:bb:ab:0e:46:
         b0:89:34:ce:c4:c6:93:c8:84:fe:4a:59:7f:d4:c2:e9:d5:02:
         d0:b0:bd:23:0e:11:9c:0d:16:22:2b:e1:ac:92:52:f6:3d:d8:
         3b:59:0c:17:0c:ff:78:9c:90:10:94:3d:a2:df:7b:dd:1e:07:
         85:fd:db:99:ae:a7:7e:ef:8b:a1:2a:d9:00:8f:b1:2b:a0:e6:
         ad:1c:61:75:2d:e0:74:83:0c:35:bd:dc:52:00:6b:20:04:9c:
         44:99:a4:50:a6:82:b2:9d:8d:f9:4a:fc:62:be:0a:db:df:66:
         68:98:cc:79:de:85:48:fd:cb:20:ee:31:65:e6:08:a0:d7:8c:
         e8:c4:95:8a:4a:bd:c8:40:e4:6e:38:6c:0e:ee:2f:a5:09:5c:
         73:a7:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:59 2024 by rpki-client on console-fra.rpki-client.org