Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/323830343a343465303a3a2f33322d3332203d3e203631353836.roa
File:                     323830343a343465303a3a2f33322d3332203d3e203631353836.roa (raw, json)
Hash identifier:          l+ThGq+dsWV5jyqMBE0bi78BXb0fUPV830dLk8YHpvY=
Subject key identifier:   F3:D2:F1:8E:06:FD:50:84:3B:99:81:26:B5:FB:8F:53:E0:25:08:77
Certificate issuer:       /CN=3A3398830EBEBFCD5E65D35E79C3EC00B72A1942
Certificate serial:       0280D260CE5F3EDEF39583A5E2BBC5B1FB885A00
Authority key identifier: 3A:33:98:83:0E:BE:BF:CD:5E:65:D3:5E:79:C3:EC:00:B7:2A:19:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/323830343a343465303a3a2f33322d3332203d3e203631353836.roa
Signing time:             Fri 05 Apr 2024 04:55:53 +0000
ROA not before:           Fri 05 Apr 2024 04:50:53 +0000
ROA not after:            Fri 04 Apr 2025 04:55:53 +0000
asID:                     61586
IP address blocks:        2804:44e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.crl
                          rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:80:d2:60:ce:5f:3e:de:f3:95:83:a5:e2:bb:c5:b1:fb:88:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3398830EBEBFCD5E65D35E79C3EC00B72A1942
        Validity
            Not Before: Apr  5 04:50:53 2024 GMT
            Not After : Apr  4 04:55:53 2025 GMT
        Subject: CN=F3D2F18E06FD50843B998126B5FB8F53E0250877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:78:00:1a:fa:75:ba:4e:ba:61:08:3f:b4:
                    cb:0f:43:3e:ac:e4:bd:66:3b:b6:8e:b6:09:fb:71:
                    4e:4e:49:a7:cc:eb:63:a1:92:37:2a:9a:c4:80:d6:
                    97:f8:29:4b:d6:3a:6e:2f:4e:73:d0:20:4b:e5:52:
                    e3:e1:91:39:37:9e:a0:21:57:e8:90:70:ac:4b:7d:
                    f8:d2:16:31:87:e9:0c:5d:6c:35:59:f0:27:75:35:
                    00:1c:0d:bc:9f:5b:a9:e9:3a:d8:6f:ff:4d:f2:ae:
                    a8:56:1e:45:c7:f4:bf:81:b6:d7:bd:0e:5a:a6:61:
                    0f:20:3e:41:ee:f4:0b:ec:6d:7c:a1:c9:b0:72:75:
                    af:19:47:6e:0f:c7:97:93:64:30:b4:8d:6d:08:f4:
                    ad:12:df:ee:58:36:16:97:6b:2c:f4:3e:22:c9:1a:
                    dc:da:62:28:de:f6:4b:ed:56:47:5a:f5:69:52:a7:
                    9f:0b:7e:92:07:3e:59:a2:d8:48:3b:d7:c3:43:01:
                    4b:17:f1:51:ea:b6:80:8d:e1:0f:5a:fc:c9:e1:23:
                    83:8f:43:94:86:46:4e:a6:73:38:01:72:a7:ae:1d:
                    0c:e4:73:ef:03:8b:e5:8a:b8:f1:26:ea:2a:6d:da:
                    9c:92:07:a6:b0:61:9f:f9:0b:20:1f:bb:8b:73:6d:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D2:F1:8E:06:FD:50:84:3B:99:81:26:B5:FB:8F:53:E0:25:08:77
            X509v3 Authority Key Identifier:
                keyid:3A:33:98:83:0E:BE:BF:CD:5E:65:D3:5E:79:C3:EC:00:B7:2A:19:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/323830343a343465303a3a2f33322d3332203d3e203631353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:0a:db:8f:29:be:09:82:66:33:ff:b9:e7:4e:29:d1:8b:ed:
         70:bf:20:7e:a9:71:e3:c2:b8:d9:ac:9a:8f:d8:ff:58:b6:bc:
         c9:46:d2:a7:ad:ec:70:fc:e8:3b:90:e7:30:e8:71:e8:6e:41:
         fc:18:3f:90:54:f6:e4:a8:16:6f:4b:df:08:36:eb:82:65:41:
         81:1a:09:68:65:55:95:10:58:d8:b3:24:67:c6:26:6e:5d:95:
         af:41:b2:32:c8:5e:f7:3b:0a:ed:8e:c6:59:c5:0c:77:26:a9:
         34:bc:15:58:95:d2:1d:5d:46:a2:eb:68:76:f9:2e:2c:97:38:
         ba:81:ee:3a:d6:6b:91:23:9c:20:1e:1a:b9:d7:89:92:1c:8d:
         5e:63:40:9c:9c:19:21:24:82:4a:88:bd:33:c5:34:b7:86:65:
         68:10:f9:a2:e5:3e:93:e0:3a:7a:94:c8:31:fe:5e:fc:bc:a3:
         89:96:a1:61:e8:70:11:d8:d2:10:79:3b:16:fb:af:05:16:2c:
         0e:42:ed:08:9c:41:75:f7:41:a2:7a:00:81:cf:38:51:d5:11:
         b9:67:1e:78:4b:73:4d:e7:ef:2f:25:9b:cf:2b:95:1f:1f:01:
         4a:ed:74:a0:c1:e5:fe:ce:a0:6c:9e:c4:ea:cb:c2:9a:86:d5:
         d5:56:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:23 2024 by rpki-client on console-ams.rpki-client.org