Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa
File:                     323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa (raw, json)
Hash identifier:          Uffc30btGWWpM/PMlpDlO7BWDHwhN39kUWiHlvIt+K0=
Subject key identifier:   14:55:52:72:4D:96:61:64:4A:53:9E:7A:FA:30:AF:6F:A1:DC:AE:E6
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       42B10729589EB4575CC0E1EAA10E0A7912DD066A
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa
Signing time:             Thu 04 Apr 2024 03:00:14 +0000
ROA not before:           Thu 04 Apr 2024 02:55:14 +0000
ROA not after:            Thu 03 Apr 2025 03:00:14 +0000
asID:                     269373
IP address blocks:        2804:63a0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:07:29:58:9e:b4:57:5c:c0:e1:ea:a1:0e:0a:79:12:dd:06:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Apr  4 02:55:14 2024 GMT
            Not After : Apr  3 03:00:14 2025 GMT
        Subject: CN=145552724D9661644A539E7AFA30AF6FA1DCAEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:74:ba:33:57:78:82:3b:2f:0e:2c:f2:17:
                    3e:db:37:23:4c:dc:b8:f9:89:60:74:06:f8:03:c8:
                    32:e2:e2:8d:dc:19:59:73:f3:5b:10:6a:96:b9:a3:
                    8d:cb:2b:c8:d3:d8:8d:8a:f7:9c:98:44:b3:a6:43:
                    bc:71:66:ba:af:30:b0:7c:04:fe:2d:53:8b:30:cb:
                    e2:93:f3:c7:c1:e0:df:9c:a4:ae:45:90:3b:f8:c1:
                    f6:f3:7c:4c:01:74:0c:9b:c6:db:eb:00:e1:32:79:
                    b3:73:28:a6:35:eb:b6:c5:bd:6b:88:e2:f4:34:26:
                    68:c7:30:bd:10:98:0c:0e:7b:04:58:3b:f6:eb:98:
                    cd:a9:80:ad:a5:ce:09:8b:d2:f9:85:d8:92:a5:6b:
                    17:80:ce:89:f0:ee:5b:e1:27:0c:8f:32:06:0a:0f:
                    52:68:b1:32:bb:c3:3e:c8:83:4d:13:11:c6:43:09:
                    f8:f6:84:8c:09:6c:28:16:1c:4a:39:24:e8:cc:e1:
                    f3:5c:9b:30:8d:f1:7e:11:e1:84:af:c2:77:a0:0f:
                    fc:f3:e0:bf:dd:61:e5:31:56:c3:b6:64:e4:99:df:
                    f5:24:d4:a8:8c:90:50:57:50:a2:c8:c0:56:18:e1:
                    dd:79:b8:14:99:07:7e:b4:af:21:b9:62:ec:85:bf:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:55:52:72:4D:96:61:64:4A:53:9E:7A:FA:30:AF:6F:A1:DC:AE:E6
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63a0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:29:f8:79:fb:38:a8:0d:c1:98:90:c7:3f:d1:9d:b5:1b:
         57:24:f0:a8:60:89:7e:85:24:1f:13:b0:bd:5a:ab:30:8b:0b:
         05:20:be:1e:9f:bc:03:20:af:2f:93:a2:dd:88:68:68:cb:de:
         4a:cf:7d:52:c4:ea:46:1e:78:dc:81:82:ca:ba:65:42:f0:fb:
         46:37:6f:73:e1:e3:9d:e5:a0:32:d3:16:6d:49:aa:b3:8d:ca:
         a3:e6:df:df:fe:43:9e:57:03:ce:80:5b:1f:78:90:d7:9d:13:
         43:d3:a1:00:94:52:2b:7e:04:13:dd:07:d5:8e:c5:9f:74:be:
         70:34:65:ad:3a:75:dc:6c:da:77:e6:15:e0:9a:7a:2e:14:f3:
         8c:66:6a:d9:bb:97:87:53:e5:c2:1a:4f:9f:c7:a0:84:1f:6e:
         32:61:91:67:7e:77:81:a4:37:a8:64:33:2d:a1:65:e1:1b:c8:
         f8:db:86:72:cd:de:ec:bf:76:99:d8:df:f2:1e:49:db:67:2e:
         5e:22:e6:ca:27:59:e3:a6:07:7b:79:91:26:d8:29:cb:93:08:
         e4:6f:b7:43:5f:d0:a2:c1:1d:0a:0e:28:cc:9c:30:c3:1e:5f:
         ee:84:05:71:c5:f2:dc:25:2c:38:7b:38:91:56:3f:07:cf:0a:
         d9:6e:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org