Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d313238203d3e20323639323534.roa
File:                     323830343a363163303a3a2f33322d313238203d3e20323639323534.roa (raw, json)
Hash identifier:          gLkUamOkCJ71DD+gydq80xOuf1GpeJzDN03lDIO6MbA=
Subject key identifier:   36:63:C6:ED:45:FD:C5:D5:AC:88:BB:26:9B:59:CC:37:48:4B:31:2C
Certificate issuer:       /CN=1B79FEE32135ACD244AD3D7B46E21E6437E6F025
Certificate serial:       271B7BE381D01B2983ACCE45F44321B481C459A0
Authority key identifier: 1B:79:FE:E3:21:35:AC:D2:44:AD:3D:7B:46:E2:1E:64:37:E6:F0:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B79FEE32135ACD244AD3D7B46E21E6437E6F025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d313238203d3e20323639323534.roa
Signing time:             Thu 25 Jul 2024 17:31:21 +0000
ROA not before:           Thu 25 Jul 2024 17:26:21 +0000
ROA not after:            Thu 24 Jul 2025 17:31:21 +0000
asID:                     269254
IP address blocks:        2804:61c0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/1B79FEE32135ACD244AD3D7B46E21E6437E6F025.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/1B79FEE32135ACD244AD3D7B46E21E6437E6F025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B79FEE32135ACD244AD3D7B46E21E6437E6F025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1b:7b:e3:81:d0:1b:29:83:ac:ce:45:f4:43:21:b4:81:c4:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B79FEE32135ACD244AD3D7B46E21E6437E6F025
        Validity
            Not Before: Jul 25 17:26:21 2024 GMT
            Not After : Jul 24 17:31:21 2025 GMT
        Subject: CN=3663C6ED45FDC5D5AC88BB269B59CC37484B312C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:b9:d3:a0:f1:84:be:2d:09:98:b1:a2:d1:
                    50:95:c8:33:da:78:88:0f:a5:25:89:be:90:eb:f0:
                    29:11:6e:f4:e5:69:56:be:46:dd:77:2c:c8:4c:14:
                    bb:33:85:94:99:dc:34:8d:c3:e9:f8:e1:ff:c8:33:
                    18:73:e3:9b:e2:d0:08:ec:43:b4:61:30:86:54:7e:
                    6e:00:8e:e7:06:d5:5b:4e:fc:42:8f:d7:fa:c8:ba:
                    45:74:43:8d:48:f7:7c:0c:e0:66:f5:6a:41:40:28:
                    41:0f:2b:12:cf:c9:73:15:f1:0d:e9:89:ee:4a:29:
                    21:b1:b9:29:02:a6:10:94:bf:f7:8e:03:d5:ba:10:
                    08:e7:7f:4f:0e:8c:1a:b6:b4:01:20:a0:43:18:11:
                    b9:6b:fe:1f:29:b0:69:78:c2:1e:30:ab:1c:32:fd:
                    e9:75:5a:5e:36:30:05:ef:e2:76:d8:4b:64:1c:e2:
                    47:59:22:c4:18:1b:82:c5:fe:2c:e5:cf:69:c8:fd:
                    e9:3f:ca:f7:ba:76:3a:e7:3e:42:42:cc:00:3c:37:
                    d3:1e:a9:78:d1:51:cd:ed:4a:13:2d:f2:96:1d:e5:
                    70:ea:48:d3:3c:b9:68:e0:65:67:68:d2:7a:a8:85:
                    3a:85:02:9c:95:13:fc:20:65:43:71:df:9d:02:61:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:C6:ED:45:FD:C5:D5:AC:88:BB:26:9B:59:CC:37:48:4B:31:2C
            X509v3 Authority Key Identifier:
                keyid:1B:79:FE:E3:21:35:AC:D2:44:AD:3D:7B:46:E2:1E:64:37:E6:F0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/1B79FEE32135ACD244AD3D7B46E21E6437E6F025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B79FEE32135ACD244AD3D7B46E21E6437E6F025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d313238203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:ce:05:46:6c:5f:c6:e8:ed:d5:d2:6d:14:32:bd:c6:c2:
         91:57:66:9c:f6:b5:81:d3:c5:9d:1d:84:d6:cb:87:4c:fb:41:
         9b:2e:78:70:68:01:7d:df:ac:c1:58:c3:03:2e:40:29:47:46:
         17:34:28:e3:17:f8:35:d8:90:9a:ce:4f:99:d8:8d:de:e8:56:
         35:12:b5:94:e1:f1:f5:40:03:37:db:50:0d:e6:b6:bb:7b:6a:
         cc:06:f7:ac:73:a9:cd:e1:13:c6:6f:21:5e:1e:e9:4a:22:d3:
         c9:a1:38:20:1f:88:13:7a:9b:1a:7e:cc:fa:9b:3e:a5:8c:ca:
         af:e8:ff:8b:50:83:a3:51:de:34:bf:5c:f5:c5:fd:6e:06:b2:
         aa:ed:23:5b:85:25:9e:21:52:eb:70:aa:d5:20:6a:e0:49:36:
         cb:97:e1:58:75:93:1d:f4:38:ad:a7:21:30:a2:aa:0f:78:ce:
         28:ce:c6:ac:b4:4e:2f:f2:b1:d5:92:fa:6e:8c:de:ba:69:db:
         f3:a8:c9:5a:eb:6b:7e:2c:41:33:ee:57:78:3b:4e:6e:0c:0a:
         3d:2f:d1:cb:d8:b1:f1:99:c2:b4:45:4f:9b:9a:59:b8:2c:48:
         16:6b:45:5c:ab:e5:a1:f7:0b:9d:38:76:e7:8a:84:8a:90:ba:
         4e:38:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org