Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/323830343a336263303a3a2f33322d3634203d3e20323632353736.roa
File:                     323830343a336263303a3a2f33322d3634203d3e20323632353736.roa (raw, json)
Hash identifier:          0KQzgI4GAo84y30DirH3kB/uAt1QlbUsjEIHHD2Zrn4=
Subject key identifier:   3B:66:A3:9C:4D:52:34:7C:59:FE:59:32:29:6B:74:AF:2E:2D:89:4F
Certificate issuer:       /CN=2D705BCC553145DBCFA9975A12AA67D82D6813A8
Certificate serial:       4BE32E45F73656EBB5B6F6DD28AF4EF7D110D553
Authority key identifier: 2D:70:5B:CC:55:31:45:DB:CF:A9:97:5A:12:AA:67:D8:2D:68:13:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D705BCC553145DBCFA9975A12AA67D82D6813A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/323830343a336263303a3a2f33322d3634203d3e20323632353736.roa
Signing time:             Thu 04 Apr 2024 17:42:34 +0000
ROA not before:           Thu 04 Apr 2024 17:37:34 +0000
ROA not after:            Thu 03 Apr 2025 17:42:34 +0000
asID:                     262576
IP address blocks:        2804:3bc0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.crl
                          rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D705BCC553145DBCFA9975A12AA67D82D6813A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e3:2e:45:f7:36:56:eb:b5:b6:f6:dd:28:af:4e:f7:d1:10:d5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D705BCC553145DBCFA9975A12AA67D82D6813A8
        Validity
            Not Before: Apr  4 17:37:34 2024 GMT
            Not After : Apr  3 17:42:34 2025 GMT
        Subject: CN=3B66A39C4D52347C59FE5932296B74AF2E2D894F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:44:36:6d:71:e5:45:93:00:9d:90:74:f8:
                    79:5c:75:8d:41:fc:6c:50:83:19:46:16:c2:f2:c7:
                    e4:4e:af:a9:19:57:09:3e:65:ea:de:9b:f5:85:22:
                    db:d5:72:bb:86:1a:ee:ce:53:d6:a8:33:a9:cb:43:
                    35:14:3b:21:11:cd:63:bf:16:90:42:9a:f7:7d:33:
                    4c:7f:01:99:89:b1:0c:cc:54:26:db:f6:31:60:51:
                    96:bd:bd:2f:6a:b0:e3:79:67:9b:4e:d9:60:f0:d9:
                    54:b6:5a:77:79:28:e4:d3:7e:e3:a0:54:aa:3d:e9:
                    e8:e6:b1:49:d1:57:b4:5b:c4:cc:b6:4a:20:56:61:
                    81:e0:f9:17:11:b2:bc:64:40:a7:1e:e7:e0:79:50:
                    31:de:25:11:b9:47:1b:cc:7f:79:e4:00:81:9e:9a:
                    92:73:a9:a5:cd:3c:80:2f:a0:99:96:6b:9c:fd:e9:
                    f4:ea:f9:0b:84:5d:8b:57:0b:de:94:7a:77:67:11:
                    04:22:9a:6c:8a:6a:43:0a:26:77:1d:1d:d5:5a:ab:
                    28:0c:b6:c4:3f:ee:7f:34:df:fd:0c:49:b2:5b:60:
                    b4:ec:7e:00:0b:93:8d:9d:7f:42:ce:a3:ca:be:c8:
                    39:2e:b9:49:f3:04:e4:e5:ca:64:d2:b9:da:3b:6e:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:66:A3:9C:4D:52:34:7C:59:FE:59:32:29:6B:74:AF:2E:2D:89:4F
            X509v3 Authority Key Identifier:
                keyid:2D:70:5B:CC:55:31:45:DB:CF:A9:97:5A:12:AA:67:D8:2D:68:13:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/2D705BCC553145DBCFA9975A12AA67D82D6813A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D705BCC553145DBCFA9975A12AA67D82D6813A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/2/323830343a336263303a3a2f33322d3634203d3e20323632353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:b1:59:3a:25:64:91:08:d4:5a:ac:c0:92:89:09:9b:1c:a8:
         71:9f:7f:84:e2:7b:a8:b0:32:f8:97:75:5e:0f:ee:aa:7e:5c:
         df:ae:1b:cc:32:67:09:4c:7b:83:1c:33:8c:a6:2e:b6:54:27:
         54:fa:98:f5:17:a4:16:c4:e4:67:fa:ef:ad:84:75:24:65:cf:
         45:d6:e1:e1:dc:80:df:09:68:5a:1f:26:8c:7e:35:f1:55:e8:
         2d:36:5a:5d:58:27:2a:1e:03:cb:97:94:7c:8e:0b:58:83:76:
         76:62:aa:bb:8f:16:c6:78:d7:31:33:e4:94:f7:69:42:d1:b4:
         50:4c:6e:64:ab:a5:d8:43:93:4f:f1:66:ec:19:73:a5:9d:e5:
         58:e6:7f:3e:89:81:b5:b5:02:3c:53:dc:3b:a1:72:13:2b:5c:
         a1:ab:fb:04:f8:76:47:cb:29:8d:91:c8:2c:4e:3a:ce:03:f9:
         4b:cf:10:17:9b:d4:d4:da:0d:62:79:f8:bb:52:64:37:a3:f0:
         bc:6b:47:6d:a3:e7:40:33:a1:66:1d:8b:85:ee:24:c5:7c:19:
         3d:3d:e8:ce:32:71:9d:ec:a9:5e:1c:e6:a0:3d:cb:be:8a:46:
         12:ca:e6:8f:31:3e:60:5f:f0:00:d2:6a:9f:dd:53:f8:92:dc:
         65:28:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:16 2024 by rpki-client on console-fra.rpki-client.org