Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a3a2f33322d3332203d3e20323634353236.roa
File:                     323830343a323130303a3a2f33322d3332203d3e20323634353236.roa (raw, json)
Hash identifier:          3RHG9ejv7p5igIS/XdKgO5tQO5MXXK01vVXTto1c9uI=
Subject key identifier:   87:35:1F:92:AC:AA:D3:78:B7:3C:F1:37:72:1F:73:52:0F:86:72:04
Certificate issuer:       /CN=19A2D735A2781E2328C1A88E2EF28E5EC6D93182
Certificate serial:       3A5C7B66ADF95BA07B6B8E1BE2C4AC3169EF9651
Authority key identifier: 19:A2:D7:35:A2:78:1E:23:28:C1:A8:8E:2E:F2:8E:5E:C6:D9:31:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A2D735A2781E2328C1A88E2EF28E5EC6D93182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a3a2f33322d3332203d3e20323634353236.roa
Signing time:             Mon 01 Jul 2024 14:32:22 +0000
ROA not before:           Mon 01 Jul 2024 14:27:22 +0000
ROA not after:            Mon 30 Jun 2025 14:32:22 +0000
asID:                     264526
IP address blocks:        2804:2100::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/19A2D735A2781E2328C1A88E2EF28E5EC6D93182.crl
                          rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/19A2D735A2781E2328C1A88E2EF28E5EC6D93182.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A2D735A2781E2328C1A88E2EF28E5EC6D93182.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5c:7b:66:ad:f9:5b:a0:7b:6b:8e:1b:e2:c4:ac:31:69:ef:96:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A2D735A2781E2328C1A88E2EF28E5EC6D93182
        Validity
            Not Before: Jul  1 14:27:22 2024 GMT
            Not After : Jun 30 14:32:22 2025 GMT
        Subject: CN=87351F92ACAAD378B73CF137721F73520F867204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:ee:54:44:55:25:ae:45:41:c5:2c:5b:91:
                    9c:6c:ed:cb:fe:ee:18:13:e5:62:49:a7:4a:b4:9c:
                    15:5d:3f:a4:50:7f:2b:78:71:84:8b:d8:e4:9c:ac:
                    60:32:e8:68:0d:25:df:64:cf:57:24:20:b3:7e:45:
                    22:18:f1:7b:b5:9f:e4:a4:fd:bc:c4:f8:7b:eb:0e:
                    6f:97:58:5f:89:76:c8:c6:7f:d2:81:a0:20:cb:53:
                    45:ec:71:ed:7b:dc:16:9c:1a:4d:ba:61:7b:f2:a4:
                    38:99:ef:2e:7c:04:df:eb:33:b1:9c:f1:e2:c4:64:
                    7b:0b:3d:93:cb:45:6b:a3:99:9e:64:1d:fe:ed:c0:
                    e6:6d:04:fe:73:6d:f0:db:b3:a7:bb:67:54:15:32:
                    cf:be:de:14:fd:99:58:38:82:1e:ef:95:bb:0e:ea:
                    69:07:3e:93:77:e9:c5:d3:25:33:2d:7b:ca:b9:a1:
                    ea:a0:e7:19:24:06:fb:35:57:8a:8a:39:a3:b2:7e:
                    3a:b5:10:a6:f6:c7:9f:ce:74:46:f2:8e:83:f1:0d:
                    5e:3b:37:93:32:44:04:76:d9:b8:68:d8:18:1b:51:
                    81:d7:71:ec:aa:ba:1e:a8:09:ff:4a:ee:05:d8:9a:
                    55:df:f5:f8:79:ef:52:1a:c7:9f:da:86:36:86:1d:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:1F:92:AC:AA:D3:78:B7:3C:F1:37:72:1F:73:52:0F:86:72:04
            X509v3 Authority Key Identifier:
                keyid:19:A2:D7:35:A2:78:1E:23:28:C1:A8:8E:2E:F2:8E:5E:C6:D9:31:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/19A2D735A2781E2328C1A88E2EF28E5EC6D93182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A2D735A2781E2328C1A88E2EF28E5EC6D93182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a3a2f33322d3332203d3e20323634353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2100::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:da:d8:64:f6:76:3d:18:73:85:c0:a2:36:89:8c:49:6a:8f:
         f0:a5:f2:8d:1d:53:14:8a:de:ed:4a:10:6f:c5:b2:4b:5c:3c:
         da:80:31:bf:49:a1:fb:9f:00:98:8e:67:6f:74:15:09:57:d8:
         1f:ef:c7:64:05:80:46:8a:d1:d6:d6:2b:4f:b8:91:95:29:85:
         24:de:58:c0:a8:fb:44:08:02:2d:c7:e0:cb:f1:5a:9a:65:ed:
         59:4f:c4:7f:0e:a3:2c:9e:57:d1:99:f1:ec:59:da:b4:fb:4b:
         8f:78:71:77:35:3f:8e:08:7b:9d:79:01:8e:ac:ab:37:35:f4:
         06:af:e2:cc:0b:99:d7:25:34:f5:83:cb:0a:57:d4:ae:2e:26:
         9e:27:58:33:ec:ae:4b:5b:a5:6f:e2:51:ee:8d:39:9d:11:8a:
         6a:27:07:51:66:07:fc:fc:9d:9b:f4:c8:2f:f1:9f:73:27:e4:
         35:b1:87:b6:5b:7f:73:58:85:0b:46:3e:35:20:85:1c:19:04:
         0f:4b:d2:ee:81:a6:dc:f1:58:d7:d8:ba:b9:11:a5:0d:d7:40:
         94:da:6c:6c:73:04:37:30:31:fb:8c:ae:6a:4d:4d:e1:5a:16:
         50:93:2e:5f:ea:4f:7e:5a:92:f6:4e:c1:0f:f0:13:75:7a:52:
         aa:5f:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:42 2024 by rpki-client on console-ams.rpki-client.org