Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/323830343a373366383a3a2f33322d3332203d3e20323730393439.roa
File:                     323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (raw, json)
Hash identifier:          Gd0X1kQB5Pz/yZJgcS/vQl3m19nigoBi3S7EayQtz4Q=
Subject key identifier:   95:58:D3:F8:5D:DF:7D:87:92:D7:94:96:08:50:3B:F0:C0:68:3C:8C
Certificate issuer:       /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial:       580E4D1EA73C934BBBC04C610B38D06E69497F84
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/323830343a373366383a3a2f33322d3332203d3e20323730393439.roa
Signing time:             Thu 04 Apr 2024 02:00:45 +0000
ROA not before:           Thu 04 Apr 2024 01:55:45 +0000
ROA not after:            Thu 03 Apr 2025 02:00:45 +0000
asID:                     270949
IP address blocks:        2804:73f8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
                          rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0e:4d:1e:a7:3c:93:4b:bb:c0:4c:61:0b:38:d0:6e:69:49:7f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Validity
            Not Before: Apr  4 01:55:45 2024 GMT
            Not After : Apr  3 02:00:45 2025 GMT
        Subject: CN=9558D3F85DDF7D8792D7949608503BF0C0683C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:f4:96:9f:b9:af:46:4b:39:54:43:3a:c9:
                    49:04:25:8d:e0:37:02:0d:19:8e:45:66:ad:1b:73:
                    5c:51:1f:8f:53:ba:27:10:07:3f:32:16:8f:82:96:
                    d1:6a:8b:b9:40:ea:9b:1b:e2:21:ae:05:76:13:13:
                    f9:dd:4b:1a:5f:c9:44:99:b9:17:31:5a:bf:ef:a5:
                    b2:49:80:38:7b:f9:94:29:7f:a9:91:33:11:58:dd:
                    73:7b:50:55:d0:23:07:30:c7:31:2a:eb:7d:22:80:
                    2e:8a:87:32:9b:18:2d:2b:01:9e:df:92:bb:70:d0:
                    d6:84:23:3a:9d:d0:61:cc:5f:f6:bc:1d:b3:45:9a:
                    0b:52:66:6b:6c:4f:54:83:c0:90:54:8c:80:57:84:
                    e7:c9:48:a8:a7:c6:40:32:93:de:d9:2c:1b:1b:5a:
                    b3:56:2a:23:42:ea:33:bb:90:81:bb:0f:a8:53:14:
                    e8:8f:bf:a4:df:1a:6a:63:14:2d:10:26:32:c1:25:
                    a4:28:93:85:35:35:db:d4:85:e2:78:33:7f:04:e8:
                    b9:dd:fc:d1:74:da:45:7b:b9:0d:f8:df:70:45:11:
                    4d:6e:d4:a7:06:f8:3c:3a:85:6d:40:1d:06:52:2c:
                    38:32:7a:b8:a3:f4:c1:7e:65:a8:de:0f:29:4f:90:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:D3:F8:5D:DF:7D:87:92:D7:94:96:08:50:3B:F0:C0:68:3C:8C
            X509v3 Authority Key Identifier:
                keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/323830343a373366383a3a2f33322d3332203d3e20323730393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:11:c7:ba:64:cf:24:61:48:af:52:f8:4c:be:f0:6c:55:8f:
         20:54:2d:7b:0a:34:d7:3f:96:e1:32:f4:09:98:f3:8e:ab:d9:
         68:43:96:89:81:ab:62:33:6e:b5:2d:05:32:4f:b2:c0:05:2c:
         5f:d4:27:cd:69:54:7b:fc:a8:6e:6b:55:1c:2a:e4:e9:04:a5:
         b7:5e:66:a6:d4:3e:2e:c5:53:d8:42:bf:b7:4d:46:28:b1:65:
         70:b6:dc:5b:79:5a:da:5f:29:44:00:2d:b8:a7:cf:55:b3:70:
         20:7e:46:bb:20:88:9d:5d:aa:0b:0f:89:0f:51:58:53:c0:34:
         05:2c:ad:b4:c3:f5:e3:b6:e6:22:11:2b:e9:70:9c:ad:90:4c:
         b8:9a:d8:4e:bf:17:47:0a:08:40:c2:03:18:85:23:4e:20:6a:
         e6:fc:80:69:a8:e4:91:ee:d1:a9:3d:93:f0:c0:a7:e1:66:c9:
         e6:18:07:57:2c:71:d8:a6:2e:97:c6:e7:1a:df:1d:60:ed:eb:
         62:4b:a4:31:f1:5e:b4:53:91:1f:9d:2d:08:70:59:9c:4f:d8:
         fe:1f:ab:a9:85:77:c3:2b:74:b5:47:14:39:85:90:fa:44:0c:
         c5:07:38:d0:1a:b7:11:7d:88:d5:7f:f2:6e:30:4c:c8:19:45:
         a1:e1:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org