Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a383030303a3a2f33332d3333203d3e203238313235.roa
File:                     323830343a313438383a383030303a3a2f33332d3333203d3e203238313235.roa (raw, json)
Hash identifier:          vQ8mdDg7yVeDju+i8zYoP1jJAbN2ACYAzAseGzaCPww=
Subject key identifier:   62:EA:C6:6F:61:10:05:CE:BD:86:13:D8:84:25:67:92:A4:2D:B5:4C
Certificate issuer:       /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial:       6A6F4E0A9C545357CD9E66D4E6FC457AA9741034
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a383030303a3a2f33332d3333203d3e203238313235.roa
Signing time:             Wed 03 Apr 2024 20:20:50 +0000
ROA not before:           Wed 03 Apr 2024 20:15:50 +0000
ROA not after:            Wed 02 Apr 2025 20:20:50 +0000
asID:                     28125
IP address blocks:        2804:1488:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl
                          rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6f:4e:0a:9c:54:53:57:cd:9e:66:d4:e6:fc:45:7a:a9:74:10:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
        Validity
            Not Before: Apr  3 20:15:50 2024 GMT
            Not After : Apr  2 20:20:50 2025 GMT
        Subject: CN=62EAC66F611005CEBD8613D884256792A42DB54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:68:f1:9d:55:e1:8d:7b:d2:cc:b0:27:54:
                    8b:11:9e:5b:7c:ce:58:e1:55:b9:cb:c1:b6:26:f0:
                    eb:0a:3b:60:4e:77:9f:bc:0d:e4:47:cf:f7:91:cd:
                    c3:92:b3:cc:45:ac:0a:13:36:48:85:fd:50:88:3c:
                    aa:a4:ce:75:0b:0a:40:bc:2a:a4:be:1e:08:ff:1f:
                    24:54:00:66:fd:80:b9:99:3c:f0:31:67:bc:40:57:
                    50:a1:fb:cc:57:db:1d:d6:32:3a:c5:5e:5f:4d:59:
                    c8:de:a4:83:ac:e0:42:a6:25:0f:e1:63:4e:5b:3a:
                    57:df:81:37:16:70:1e:8f:5a:d7:dd:30:32:d3:b4:
                    b0:b0:be:a8:85:e7:9d:b3:00:81:9c:bb:ff:e0:60:
                    45:c4:77:ce:76:2a:75:80:03:5f:ff:93:e9:37:44:
                    94:b1:89:db:6c:ae:31:ef:78:87:65:cf:35:64:95:
                    fa:08:a6:c8:76:95:6e:6d:1b:81:6c:51:7d:5a:c1:
                    4c:b8:0c:22:a1:9d:78:b3:e1:c9:a4:e7:ec:10:c4:
                    55:d0:8c:3f:94:9c:3a:1c:14:ca:76:21:67:22:07:
                    5a:fb:53:ea:32:17:f5:eb:a0:ba:fb:50:46:b7:11:
                    0e:08:67:37:1e:17:c4:25:03:c9:b2:94:57:12:be:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EA:C6:6F:61:10:05:CE:BD:86:13:D8:84:25:67:92:A4:2D:B5:4C
            X509v3 Authority Key Identifier:
                keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a383030303a3a2f33332d3333203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:4e:49:0b:c1:70:33:c1:fe:25:e0:d3:2f:ae:bd:68:86:19:
         8c:1b:3b:96:60:ab:06:e3:81:ed:f4:d8:40:1e:bb:d6:17:11:
         3c:74:d9:60:48:99:86:3d:32:38:5f:4e:c3:c5:e6:a3:3e:a4:
         f8:ef:13:c9:03:2b:e5:8d:09:dc:78:c2:42:66:1a:ad:31:21:
         27:b8:0e:51:6b:53:b5:76:0a:d2:b5:60:2e:22:08:56:f8:fe:
         da:ae:75:2a:26:f8:9c:a4:27:ca:8b:1a:01:02:65:c8:94:b8:
         d4:de:69:57:a8:16:12:b5:2b:32:12:d9:eb:dd:a7:b3:8a:82:
         e6:33:59:17:1f:06:a2:de:b8:76:42:6e:70:74:ca:4e:de:ab:
         8f:5c:dc:39:f8:6b:d3:5c:5f:04:b2:7a:1f:15:e9:f5:bd:0d:
         04:b3:d7:d0:b1:af:b8:f5:c4:43:22:20:ea:ab:e4:c8:54:26:
         cf:27:ea:40:f2:14:aa:69:41:86:4f:21:d0:00:3e:64:8c:a8:
         5a:df:fb:e3:12:28:01:80:96:39:ef:9f:6a:6f:78:b6:98:68:
         1f:15:d4:10:8f:cd:30:e7:bc:71:0b:db:e1:f8:13:75:a5:dd:
         e9:f0:b9:ac:b9:1f:78:0b:6e:04:ea:10:63:85:ff:a1:75:35:
         40:00:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:33 2024 by rpki-client on console-ams.rpki-client.org