Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33322d3438203d3e203631393336.roa
File:                     323830343a313838303a3a2f33322d3438203d3e203631393336.roa (raw, json)
Hash identifier:          N5oBNAFkfVN2z2rRgcdtrNCbotb6BKrCnlAyqn0Vgvk=
Subject key identifier:   22:37:CB:8A:FE:7D:33:84:EB:27:C1:CF:22:A7:8E:2E:31:0D:27:74
Certificate issuer:       /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial:       2EC09699E648508C7D536AF601DF7A55C7F6ECB9
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33322d3438203d3e203631393336.roa
Signing time:             Wed 05 Jun 2024 19:38:55 +0000
ROA not before:           Wed 05 Jun 2024 19:33:55 +0000
ROA not after:            Wed 04 Jun 2025 19:38:55 +0000
asID:                     61936
IP address blocks:        2804:1880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c0:96:99:e6:48:50:8c:7d:53:6a:f6:01:df:7a:55:c7:f6:ec:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
        Validity
            Not Before: Jun  5 19:33:55 2024 GMT
            Not After : Jun  4 19:38:55 2025 GMT
        Subject: CN=2237CB8AFE7D3384EB27C1CF22A78E2E310D2774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:46:af:15:29:88:11:43:6a:52:87:b4:c6:
                    26:d4:98:58:42:05:62:a3:30:a1:4c:cf:e0:28:14:
                    89:af:54:51:4d:ca:82:83:00:5f:4b:d9:5d:96:3b:
                    f5:df:b3:be:f3:d3:cc:c4:e3:41:0e:73:a7:07:23:
                    59:00:b5:45:5e:52:75:38:1c:a3:80:7f:ec:9b:0d:
                    e1:a9:e0:06:d8:b2:c1:f2:30:80:a8:37:45:a7:c1:
                    2f:19:c3:90:c0:f1:3a:1a:fb:ba:9b:3d:5d:60:84:
                    ec:68:8f:4a:ed:e6:0e:86:c3:8e:7c:d7:26:9b:20:
                    e5:9a:fc:d2:79:cc:56:33:a6:27:11:c9:18:9a:1e:
                    57:9f:68:7e:3a:bc:9f:19:14:4c:b2:9c:ee:9a:6c:
                    41:70:03:72:91:fc:8e:2c:79:49:46:98:6c:f0:f4:
                    57:2e:cd:cc:4b:36:45:66:dc:a9:e4:ea:8b:2f:2f:
                    f9:4a:42:01:bd:e7:43:03:67:62:72:1c:62:a2:7a:
                    96:18:97:a1:ac:01:5d:ab:8c:18:6f:9e:8d:0e:4b:
                    a6:75:22:22:60:fb:aa:0e:92:99:c5:7a:d0:fc:2c:
                    64:e1:47:51:e6:c7:b8:9a:37:6c:ce:28:50:95:f2:
                    52:47:81:57:6f:11:59:db:56:72:20:b0:e5:06:7f:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:CB:8A:FE:7D:33:84:EB:27:C1:CF:22:A7:8E:2E:31:0D:27:74
            X509v3 Authority Key Identifier:
                keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33322d3438203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1880::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:fd:c2:d7:33:b6:31:12:7c:93:e3:e8:cf:5e:31:d2:43:b8:
         9c:72:df:0a:b5:24:ed:10:9f:2d:95:ee:56:15:44:e6:57:5f:
         31:5d:a2:c9:9b:e3:69:61:84:3d:4b:27:ab:5a:5f:1a:f3:cc:
         eb:19:23:33:0a:92:22:db:5f:1f:f7:72:cb:33:3b:26:bb:c3:
         86:11:d9:15:94:b6:fc:31:ef:fd:ff:61:6e:77:6a:7a:84:d0:
         e0:bd:79:f4:f5:0d:6a:cd:5b:37:b4:92:f8:a6:ce:23:0e:c2:
         b8:2c:94:e9:22:aa:27:cf:d0:86:bf:ac:9a:3d:fc:4d:f6:24:
         16:33:5b:19:0d:73:46:eb:86:61:d9:7b:16:96:4c:8a:9b:60:
         10:56:fe:c8:98:df:9e:a7:5c:97:b9:d9:0b:1f:7b:63:31:45:
         25:c4:44:7f:f7:b8:b5:72:06:3a:c8:ce:57:7c:3c:15:6b:5c:
         98:11:fa:e8:cc:20:af:d2:1f:9e:e5:ad:86:6e:2a:48:41:6e:
         2a:c8:d9:82:a9:df:25:76:22:1f:cb:d4:87:0e:f8:aa:33:da:
         10:3d:1f:f5:e1:5c:74:45:06:b9:b8:12:f2:76:73:77:26:db:
         19:d4:ef:e6:27:2c:e1:b7:4e:1a:4a:19:ed:19:a4:3e:9d:57:
         d7:34:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:13 2024 by rpki-client on console-fra.rpki-client.org