Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/323830343a326239343a3a2f33322d313238203d3e20323635313631.roa
File:                     323830343a326239343a3a2f33322d313238203d3e20323635313631.roa (raw, json)
Hash identifier:          RYD2V7r+R7EIheYrwu3bHGjiB4E8s96/D167dIA81DM=
Subject key identifier:   78:D3:15:CD:63:DB:54:12:5A:81:D8:F9:9A:2E:03:57:3D:28:E0:0A
Certificate issuer:       /CN=2504E16F52BD73EF878EA49008DBB404C890352F
Certificate serial:       339699BF2E5F6C2F260631C74F4B0BED88EB9976
Authority key identifier: 25:04:E1:6F:52:BD:73:EF:87:8E:A4:90:08:DB:B4:04:C8:90:35:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2504E16F52BD73EF878EA49008DBB404C890352F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/323830343a326239343a3a2f33322d313238203d3e20323635313631.roa
Signing time:             Wed 24 Apr 2024 18:17:53 +0000
ROA not before:           Wed 24 Apr 2024 18:12:53 +0000
ROA not after:            Wed 23 Apr 2025 18:17:53 +0000
asID:                     265161
IP address blocks:        2804:2b94::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/2504E16F52BD73EF878EA49008DBB404C890352F.crl
                          rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/2504E16F52BD73EF878EA49008DBB404C890352F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2504E16F52BD73EF878EA49008DBB404C890352F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:96:99:bf:2e:5f:6c:2f:26:06:31:c7:4f:4b:0b:ed:88:eb:99:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2504E16F52BD73EF878EA49008DBB404C890352F
        Validity
            Not Before: Apr 24 18:12:53 2024 GMT
            Not After : Apr 23 18:17:53 2025 GMT
        Subject: CN=78D315CD63DB54125A81D8F99A2E03573D28E00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:27:e1:61:74:cd:f2:71:db:4a:7b:98:b2:
                    fa:65:c0:9b:ee:70:19:c3:86:18:df:d0:d7:26:fd:
                    cd:d1:2c:f8:cd:de:f5:c4:44:32:71:a5:f9:45:a2:
                    30:9d:67:be:93:0e:1c:c8:9b:b0:8c:7b:25:de:97:
                    29:c0:73:2e:e4:56:5b:ba:95:13:1c:a1:ef:9a:4d:
                    55:97:12:4d:a7:bd:3f:d9:c1:3c:7d:e5:75:c6:82:
                    3e:dd:5c:cf:91:1d:99:4b:dd:35:5a:d7:5c:03:34:
                    23:26:df:b3:e7:61:a5:c1:a4:5d:3e:08:81:ed:b6:
                    37:74:8f:35:bc:62:13:0a:ac:0c:d9:0e:6b:a2:2d:
                    4c:9e:9f:f1:b3:17:fe:a8:88:1f:48:a9:15:a8:ff:
                    5e:d0:47:52:cb:6f:ba:c6:fb:ec:fc:b3:96:3f:d7:
                    94:13:c8:ec:d5:23:73:4b:b2:47:55:8c:8c:c4:ca:
                    b5:5f:9f:b2:74:f6:80:da:ba:06:fb:88:a6:73:0c:
                    59:b5:27:37:cb:15:89:1d:87:b9:19:24:97:2d:c9:
                    3d:8b:89:9f:71:35:4a:e1:7f:f5:a2:4f:bd:77:a6:
                    cc:9d:17:0e:16:11:fe:57:eb:e3:70:65:48:cc:91:
                    61:95:4d:4e:4d:99:06:81:49:c7:08:4e:3a:a3:07:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D3:15:CD:63:DB:54:12:5A:81:D8:F9:9A:2E:03:57:3D:28:E0:0A
            X509v3 Authority Key Identifier:
                keyid:25:04:E1:6F:52:BD:73:EF:87:8E:A4:90:08:DB:B4:04:C8:90:35:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/2504E16F52BD73EF878EA49008DBB404C890352F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2504E16F52BD73EF878EA49008DBB404C890352F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/323830343a326239343a3a2f33322d313238203d3e20323635313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b94::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:8a:22:1c:1a:f6:65:26:d3:ff:66:3b:48:0e:ad:17:58:
         31:b7:14:58:7e:7a:56:3b:60:31:62:38:84:47:82:8b:d0:16:
         77:6b:fe:6a:d1:a5:37:ad:e5:23:4b:85:3a:e5:28:24:38:7c:
         c6:7a:a9:8e:93:4a:f9:f6:60:13:f5:a2:c2:2d:37:7f:db:a4:
         c3:d7:03:94:fe:cc:84:67:4d:d9:14:43:b4:30:04:3c:7a:fc:
         f1:1d:17:b5:bd:09:42:39:d4:25:bc:0e:2b:f9:b3:94:15:21:
         93:02:ec:b9:4f:de:46:6b:c7:61:31:8e:ab:d6:ca:f3:1f:5c:
         60:4a:ee:54:00:de:a4:7b:91:7e:1d:33:ad:91:15:18:a4:0b:
         86:b5:39:09:4e:0f:fd:b2:05:e2:7a:8d:4d:eb:74:35:58:21:
         e9:19:b1:b5:3d:4a:1f:89:3e:d2:c8:f8:cd:8b:c6:70:07:04:
         65:c3:89:1d:9f:f5:bb:f3:fc:ac:23:5c:8d:dc:85:1a:89:e4:
         94:c0:7a:69:ec:98:db:9c:2a:2e:38:d5:2e:1a:17:24:09:c1:
         a4:4a:76:0c:e6:9d:94:93:7a:7c:33:2c:3e:e8:f8:39:de:7b:
         a9:9d:64:95:1e:89:7d:ef:8b:90:d6:40:df:ff:33:43:9a:e9:
         b0:f2:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:54:54 2024 by rpki-client on console-fra.rpki-client.org