Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/323830343a333764633a3a2f33322d313238203d3e20323636343430.roa
File:                     323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (raw, json)
Hash identifier:          qNAnNxMLf23lX/Toa0RnHfzZ1GHt/QjrCvGeOjqM+AY=
Subject key identifier:   31:83:EF:F0:84:2C:84:03:35:63:AF:4A:B6:FE:D5:B6:3C:CE:38:15
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       77A37B7A88CC7919D2A83D0D32228E84F1759622
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/323830343a333764633a3a2f33322d313238203d3e20323636343430.roa
Signing time:             Thu 21 Nov 2024 20:28:17 +0000
ROA not before:           Thu 21 Nov 2024 20:23:17 +0000
ROA not after:            Thu 20 Nov 2025 20:28:17 +0000
asID:                     266440
IP address blocks:        2804:37dc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a3:7b:7a:88:cc:79:19:d2:a8:3d:0d:32:22:8e:84:f1:75:96:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Nov 21 20:23:17 2024 GMT
            Not After : Nov 20 20:28:17 2025 GMT
        Subject: CN=3183EFF0842C84033563AF4AB6FED5B63CCE3815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d9:64:6e:84:b2:6b:1e:dc:ec:05:7b:f2:54:
                    9c:9d:f0:69:f2:f8:b3:f0:ba:0e:e1:24:99:11:62:
                    74:cb:2f:f1:4e:98:ed:1e:d1:4b:df:82:13:60:1b:
                    1f:b7:46:24:2a:6f:a6:aa:cf:0d:2d:c8:80:5f:8f:
                    35:c5:3b:c1:f2:e4:cc:7f:6f:a6:85:af:0a:2b:93:
                    71:88:b3:25:98:26:ab:82:4a:5c:86:da:54:d2:c3:
                    43:4e:9a:3b:71:c3:5d:72:97:a8:62:87:88:31:26:
                    4d:69:50:69:e5:b0:e4:e7:5b:d3:30:1e:04:50:c1:
                    6e:7c:81:20:ee:25:d5:2a:9f:6f:cb:2e:f7:fd:d9:
                    77:0e:41:12:1f:5a:90:40:be:12:ab:0f:b4:fb:da:
                    4d:b0:d3:61:55:13:9d:63:fc:d1:01:03:df:aa:c1:
                    14:ef:b0:30:05:f9:c6:a9:b8:11:08:8e:4b:87:08:
                    50:20:f2:8e:e1:1d:ef:d7:0b:a5:d9:68:6a:e2:57:
                    68:19:09:69:46:dc:b1:23:75:04:8e:30:b1:e5:ec:
                    ec:c8:47:03:35:09:ba:a7:f2:d1:5e:6a:c7:09:db:
                    a4:da:04:2d:b2:ea:14:de:5d:ed:54:d2:46:02:0c:
                    a2:ed:e2:9e:41:71:1a:9a:87:28:24:12:44:c6:58:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:83:EF:F0:84:2C:84:03:35:63:AF:4A:B6:FE:D5:B6:3C:CE:38:15
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/323830343a333764633a3a2f33322d313238203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:39:d1:4d:37:95:fb:70:79:ab:12:73:2c:cd:7d:7b:8e:
         90:7c:c1:44:62:72:3e:1c:76:d7:0a:1e:11:07:42:03:18:51:
         10:aa:db:ee:98:9c:69:53:64:aa:e9:6c:a3:7e:0b:65:dc:a9:
         17:c4:c9:a7:27:e3:a1:b9:89:8c:53:6c:ec:5e:ef:fd:ff:d6:
         d6:3a:82:99:ea:d8:29:2a:1f:84:ad:10:fb:2e:1c:7e:74:23:
         35:dc:f5:e8:77:7c:67:77:e9:60:f0:9c:d0:5b:95:9d:3a:3e:
         16:46:ad:47:95:da:e5:ce:b7:76:57:ce:0b:db:88:0f:08:45:
         60:90:0f:8a:48:b5:dd:0d:09:32:c4:59:64:77:7e:f6:2c:24:
         43:50:f2:ea:ff:b1:7f:77:57:c7:8f:35:f5:b0:21:5a:a5:5a:
         df:3e:81:88:97:ee:ea:b7:c2:38:f8:eb:6f:b7:02:f4:30:4f:
         62:0a:e2:ef:93:1a:df:e7:e2:0b:fe:7f:6e:c0:59:06:24:11:
         38:71:b2:ed:ec:6f:17:29:6b:40:3a:0e:86:45:d5:2a:1e:fa:
         4d:44:33:ed:c4:f7:78:18:60:6f:8e:7d:2c:f3:92:2c:7c:b1:
         79:60:3c:9f:02:e9:7b:44:f0:e8:97:3c:6a:54:08:4c:bc:c7:
         81:30:09:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org