Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a3a2f33322d3336203d3e20323637393333.roa
File:                     323830343a353536383a3a2f33322d3336203d3e20323637393333.roa (raw, json)
Hash identifier:          E2fw+Lmm5uW1OVt801Iksu0wWqfoyAK21yC05cNehF4=
Subject key identifier:   2B:A0:6A:72:00:37:06:C2:F5:9B:CD:07:E9:C2:C7:54:F0:C7:BB:1A
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       160C710BFC6AB772A3E84AF22EEE55FEFF76F8AB
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a3a2f33322d3336203d3e20323637393333.roa
Signing time:             Tue 05 Nov 2024 20:54:28 +0000
ROA not before:           Tue 05 Nov 2024 20:49:28 +0000
ROA not after:            Tue 04 Nov 2025 20:54:28 +0000
asID:                     267933
IP address blocks:        2804:5568::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl
                          rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0c:71:0b:fc:6a:b7:72:a3:e8:4a:f2:2e:ee:55:fe:ff:76:f8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Nov  5 20:49:28 2024 GMT
            Not After : Nov  4 20:54:28 2025 GMT
        Subject: CN=2BA06A72003706C2F59BCD07E9C2C754F0C7BB1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:57:27:c7:92:ec:10:e7:3d:1f:51:f4:4c:
                    ca:3e:7d:ed:5c:c7:88:4a:ae:46:5b:8e:bd:3f:14:
                    26:77:d1:73:41:50:75:98:75:b2:c6:a0:52:b0:41:
                    48:02:96:76:f4:7b:0d:8d:ba:5c:17:aa:da:d5:4a:
                    00:ff:c9:27:e0:bf:70:a3:bd:5f:a3:f4:d2:b8:f7:
                    65:57:da:e4:24:3c:0f:13:de:cc:6d:41:18:39:1c:
                    2d:cb:68:63:73:2b:83:f4:43:ba:3d:cb:3e:1d:1d:
                    88:f0:a4:35:20:31:d9:bf:21:8f:c1:5f:8d:3d:b6:
                    65:18:83:d5:1d:8d:73:e5:db:4a:38:9c:fc:9f:6f:
                    8b:d3:04:c1:56:f4:a1:a5:fe:97:9c:a8:c2:81:e1:
                    ee:e5:47:39:9c:a9:51:78:1a:5b:04:be:04:04:c0:
                    a3:8f:52:fb:76:d5:40:10:cd:57:62:7a:6f:50:a8:
                    5e:87:72:93:8f:e3:61:b7:bb:be:04:ef:69:66:1f:
                    93:69:8c:43:71:8b:3f:2f:bc:30:3b:00:d6:41:36:
                    11:4b:a7:e6:1f:f5:a9:7c:0d:8e:44:ba:cf:20:89:
                    fc:98:a8:d1:c1:6f:04:f8:a4:ca:c9:dd:f0:d5:83:
                    86:e6:56:47:0b:e2:e4:e3:09:9d:44:3a:d6:a8:05:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:6A:72:00:37:06:C2:F5:9B:CD:07:E9:C2:C7:54:F0:C7:BB:1A
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a3a2f33322d3336203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5568::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:30:09:d7:e4:19:04:b5:d0:da:9d:42:c0:ae:f5:95:06:36:
         ff:7a:1c:28:7a:a8:ea:b0:c9:da:75:29:97:bb:9d:bf:3b:6e:
         76:ba:14:85:5d:a4:06:6e:89:65:73:73:1e:a7:9a:12:eb:b1:
         96:7f:06:1f:75:ab:4a:77:f4:30:bb:03:0f:70:a6:1a:c5:9e:
         b5:39:cc:87:3a:3a:71:82:f4:df:60:51:89:b5:65:ad:68:16:
         5c:3f:80:19:38:5c:ef:84:90:78:2b:5d:ef:b2:ba:db:90:98:
         15:1b:95:af:df:ea:a1:19:6f:e2:a0:a5:ff:be:c0:f8:83:44:
         0a:ab:58:93:55:46:ad:90:77:a4:82:64:7d:b3:cb:9d:2d:e6:
         32:88:a3:3b:7e:c2:cf:12:9a:8e:94:c8:03:1a:51:65:fc:4c:
         ba:22:4f:ff:08:31:81:20:56:55:ae:95:62:11:09:95:07:1d:
         d8:e7:ae:de:ab:f4:a7:97:fa:ff:19:2d:3d:e3:8e:a6:dc:9b:
         7f:e3:96:d6:72:04:fc:5e:cd:d7:db:c5:cc:cb:05:eb:af:dc:
         4a:34:e0:9c:53:24:70:50:ff:c7:b0:32:e8:3c:06:d3:09:da:
         79:b8:d1:6b:f3:06:11:73:0e:32:fc:81:22:b3:de:8a:c0:a0:
         8c:34:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:13 2024 by rpki-client on console-fra.rpki-client.org