Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa
File:                     323830343a386235383a3a2f33322d313238203d3e20323733373237.roa (raw, json)
Hash identifier:          y4NQI14x8AlBG+F+T6UEycpx5yV3p+bt8WFwHMM+K60=
Subject key identifier:   3D:F4:A6:E7:A1:CA:D2:8E:97:4C:0D:BB:22:5E:92:DC:0D:52:9C:CE
Certificate issuer:       /CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
Certificate serial:       2B43F49DB40CCF11B5B284DE164B1735BC856503
Authority key identifier: 3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa
Signing time:             Thu 04 Apr 2024 16:29:13 +0000
ROA not before:           Thu 04 Apr 2024 16:24:13 +0000
ROA not after:            Thu 03 Apr 2025 16:29:13 +0000
asID:                     273727
IP address blocks:        2804:8b58::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl
                          rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:43:f4:9d:b4:0c:cf:11:b5:b2:84:de:16:4b:17:35:bc:85:65:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
        Validity
            Not Before: Apr  4 16:24:13 2024 GMT
            Not After : Apr  3 16:29:13 2025 GMT
        Subject: CN=3DF4A6E7A1CAD28E974C0DBB225E92DC0D529CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:8e:a6:62:8b:12:45:23:be:e2:4f:1b:f8:
                    d1:43:08:75:de:5d:98:b7:8c:d5:ac:86:ab:b3:69:
                    48:d8:0b:1c:f7:29:60:b0:c9:56:6d:c8:ee:f4:f8:
                    02:36:41:9f:59:94:e8:26:88:4c:d2:2a:bb:6d:77:
                    1f:24:98:a8:47:5f:f5:da:f5:f1:5b:ed:8c:ad:33:
                    08:25:ba:7f:2f:13:25:d3:19:2e:e3:c0:69:89:b1:
                    d1:51:a7:fa:90:8a:36:4b:3b:fc:17:13:95:86:93:
                    89:c0:b1:eb:02:ba:1f:ed:f6:d2:af:8e:cb:a1:35:
                    21:20:ae:ea:74:7d:ab:61:2f:c1:ff:84:6f:e0:94:
                    81:5d:59:ea:66:41:01:68:35:3c:c8:d3:41:23:bf:
                    78:c7:25:4c:b7:11:ee:de:31:ca:31:d0:ce:04:cc:
                    b0:47:3c:b1:2a:df:ed:ae:0d:17:24:51:56:78:4c:
                    62:a4:79:86:ea:a0:25:7b:b2:5a:3a:16:7f:a7:aa:
                    4e:d6:27:eb:ff:18:ec:10:71:50:47:d6:0e:36:24:
                    c3:ea:9c:ec:c4:f3:df:75:d6:77:9b:58:49:6b:95:
                    bf:74:ea:7c:aa:7d:03:1d:54:7e:df:bd:f6:5a:b0:
                    59:7b:f7:34:9e:e0:aa:c4:a2:7c:01:03:18:43:c7:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F4:A6:E7:A1:CA:D2:8E:97:4C:0D:BB:22:5E:92:DC:0D:52:9C:CE
            X509v3 Authority Key Identifier:
                keyid:3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:de:0f:a7:d6:92:7f:fc:e5:a9:00:38:6f:9b:d1:b7:08:f0:
         5d:dd:22:6e:8c:ec:a8:19:5f:95:c4:df:cb:51:d9:73:0f:cf:
         29:24:61:cb:7e:6e:59:0e:f8:4c:f3:e3:60:63:5d:2e:cf:2e:
         18:51:58:97:61:4a:21:89:9d:93:8b:64:cb:91:87:ea:9a:bd:
         05:bb:b1:dc:56:30:c2:df:37:78:ba:bb:3e:78:f6:3c:3c:7b:
         e8:6d:ad:56:57:c4:21:58:11:8f:c6:d6:9c:18:13:79:0e:24:
         25:b7:dd:6f:42:04:36:87:a8:05:3f:2d:38:d1:1c:fc:54:d6:
         3d:f8:70:a0:29:e9:63:9b:0f:ea:84:e0:8c:3f:02:84:a7:ff:
         9c:ae:e2:6b:1d:eb:db:20:f0:79:3c:82:ea:11:89:13:0b:b4:
         2c:15:f8:32:af:4a:2c:b1:e2:e8:04:04:2b:33:56:88:d3:8c:
         20:b3:5f:b5:55:1f:f1:d2:6e:6c:43:2f:34:3c:b5:ac:58:b8:
         98:44:f9:8a:cf:f1:5b:7f:66:9f:b5:f1:fe:3f:54:cd:b6:4a:
         57:9d:41:61:63:07:e5:bd:b1:2d:e4:3a:1f:81:b1:ee:39:9a:
         ab:6f:93:82:99:23:da:b3:ae:fa:09:bd:4a:d2:e9:87:3f:78:
         8f:aa:03:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org