Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/323830343a343465303a3a2f33322d3334203d3e203631353836.roa
File:                     323830343a343465303a3a2f33322d3334203d3e203631353836.roa (raw, json)
Hash identifier:          V4BY4+fir1nTH0EU2ATVnIBwllfxRJn9WqKaCKKq6no=
Subject key identifier:   01:23:B8:11:28:B1:F8:38:D7:32:EA:64:8B:1A:34:97:88:62:6A:3B
Certificate issuer:       /CN=3A3398830EBEBFCD5E65D35E79C3EC00B72A1942
Certificate serial:       3CC969E3D481B3D2FCBF8A0E61E2DB0D2EB8C0DA
Authority key identifier: 3A:33:98:83:0E:BE:BF:CD:5E:65:D3:5E:79:C3:EC:00:B7:2A:19:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/323830343a343465303a3a2f33322d3334203d3e203631353836.roa
Signing time:             Fri 05 Apr 2024 04:55:53 +0000
ROA not before:           Fri 05 Apr 2024 04:50:53 +0000
ROA not after:            Fri 04 Apr 2025 04:55:53 +0000
asID:                     61586
IP address blocks:        2804:44e0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.crl
                          rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c9:69:e3:d4:81:b3:d2:fc:bf:8a:0e:61:e2:db:0d:2e:b8:c0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3398830EBEBFCD5E65D35E79C3EC00B72A1942
        Validity
            Not Before: Apr  5 04:50:53 2024 GMT
            Not After : Apr  4 04:55:53 2025 GMT
        Subject: CN=0123B81128B1F838D732EA648B1A349788626A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:39:97:44:f7:f4:8e:23:6e:85:22:2b:b6:
                    f3:b3:a9:67:ac:4e:cf:d4:db:00:18:46:c9:c5:75:
                    5d:2c:54:55:04:f6:da:48:1e:79:8d:28:25:7a:65:
                    2b:3b:29:ca:2d:e6:41:36:9c:70:e0:8c:55:34:9d:
                    6e:b2:5f:2d:aa:0e:a7:d3:99:a9:e8:65:7e:c6:cf:
                    33:6d:1c:3d:65:79:ae:7a:59:b0:66:a9:0b:6f:f5:
                    5a:44:b7:7b:f1:2b:2b:57:c3:89:1c:43:6c:e7:47:
                    64:ab:34:9c:5a:37:39:a3:86:e6:bb:6d:b1:c6:ba:
                    38:a1:f7:7e:99:9b:27:c0:37:af:28:95:6e:12:66:
                    f1:05:0d:c4:3d:da:0d:aa:26:61:38:fa:db:91:be:
                    c5:cf:f8:ea:57:12:3e:00:cc:34:ef:c3:96:36:54:
                    d9:d4:fe:5d:b7:7c:f7:dd:53:c3:db:7b:c2:98:b3:
                    06:63:03:62:6e:20:ef:c6:da:32:64:37:e3:c9:e8:
                    39:51:df:c3:b2:ed:54:05:3b:a7:1a:b5:87:9b:1c:
                    c4:92:1e:f1:53:bb:b9:aa:3f:c0:20:38:69:cb:28:
                    aa:fd:b2:b3:c3:1c:7c:44:b2:c2:20:dc:89:eb:32:
                    28:ca:29:6e:b5:a8:f8:3f:ef:d7:b1:e2:71:74:6c:
                    0f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:B8:11:28:B1:F8:38:D7:32:EA:64:8B:1A:34:97:88:62:6A:3B
            X509v3 Authority Key Identifier:
                keyid:3A:33:98:83:0E:BE:BF:CD:5E:65:D3:5E:79:C3:EC:00:B7:2A:19:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/323830343a343465303a3a2f33322d3334203d3e203631353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:2f:9c:c7:ff:de:bc:08:e8:08:01:5a:53:0e:9a:93:c0:
         a3:c7:bd:3c:ee:3c:3d:a4:e1:ef:e5:db:68:4d:e3:50:df:ed:
         58:29:bb:3f:99:be:1c:94:e8:e5:ec:fc:3c:9c:cc:f8:5e:09:
         74:c6:0a:47:6b:61:be:31:99:17:c9:7d:ab:a2:ab:f8:69:b3:
         3a:4a:c1:f4:71:43:02:bc:5a:fb:e4:e5:44:ea:66:91:24:32:
         5e:2f:e3:08:47:b7:0a:b8:0d:ec:92:8a:d0:1a:74:68:63:18:
         fb:d2:f9:23:59:b5:f0:c2:ea:de:38:43:f4:99:c7:3c:c8:03:
         35:0a:3f:2b:08:fb:54:e5:ae:0b:5d:77:bf:3d:a5:39:76:8a:
         3b:19:ba:32:87:c5:1b:15:50:29:6c:6d:92:0e:33:c1:0f:3a:
         9f:aa:a7:8b:15:a8:0f:b7:93:bf:7f:72:e1:c6:4d:a4:37:39:
         ed:34:ad:dc:73:b2:94:d7:14:dc:e8:d6:14:ce:b3:2c:d1:2c:
         e5:e4:db:c1:65:98:ff:71:82:9c:c8:54:ba:cb:1d:88:45:42:
         bb:97:9f:f6:b6:3d:e2:20:4d:dc:ea:33:01:28:be:c2:f7:d2:
         09:9a:07:96:e2:59:2d:5f:4e:97:fb:57:79:64:92:8a:03:a9:
         d2:1c:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:58 2024 by rpki-client on console-fra.rpki-client.org