Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a313134303a3a2f34322d3432203d3e20323633303236.roa
File:                     323830343a6132383a313134303a3a2f34322d3432203d3e20323633303236.roa (raw, json)
Hash identifier:          HL6+djrZzpO/VIWsClVYJI5mwilLneuo+alUW56pp0Q=
Subject key identifier:   2C:36:4F:65:44:A9:6D:FA:3F:7D:26:E6:85:B1:1B:32:1D:11:40:4B
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       0232C718306D610457E6CADB4A32106D5C7A28EC
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a313134303a3a2f34322d3432203d3e20323633303236.roa
Signing time:             Sun 19 May 2024 02:59:28 +0000
ROA not before:           Sun 19 May 2024 02:54:28 +0000
ROA not after:            Sun 18 May 2025 02:59:28 +0000
asID:                     263026
IP address blocks:        2804:a28:1140::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 05:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:32:c7:18:30:6d:61:04:57:e6:ca:db:4a:32:10:6d:5c:7a:28:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: May 19 02:54:28 2024 GMT
            Not After : May 18 02:59:28 2025 GMT
        Subject: CN=2C364F6544A96DFA3F7D26E685B11B321D11404B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:55:63:4e:79:40:03:7a:04:4d:9d:cb:94:f1:
                    b8:2f:30:2f:81:92:21:34:73:df:af:c3:0d:69:5e:
                    40:f0:6b:24:df:71:9d:fa:7b:60:be:19:8a:02:e1:
                    4d:17:d0:fb:53:2d:26:3a:08:fe:53:29:aa:c6:2a:
                    57:98:45:be:25:20:64:e7:19:0e:07:49:2c:bc:90:
                    62:93:9b:7c:e5:32:a4:bd:56:d6:1f:29:07:33:4a:
                    48:e1:fb:c4:3c:c4:d5:c6:f4:91:ba:e9:25:f2:ec:
                    4a:6e:20:a7:d6:48:3b:df:e1:8b:f9:1e:66:4f:45:
                    00:5a:4b:0c:59:05:7b:4c:e7:48:ae:55:06:59:aa:
                    1c:31:76:d9:08:6d:df:35:60:37:5c:c5:c9:de:50:
                    ca:3c:c5:f9:9d:2e:5f:5b:5f:c5:35:e5:a4:e3:68:
                    58:f2:00:30:28:92:aa:51:c2:72:45:1b:ac:ea:d8:
                    af:fd:c5:0c:a6:d9:61:1e:a0:e2:1f:0b:60:d8:b9:
                    7a:9c:7f:f6:f3:f7:4c:50:f5:54:8d:60:29:59:91:
                    39:3c:d1:86:2f:d5:62:aa:0e:19:6b:33:83:d6:dd:
                    45:2b:8d:59:f0:77:38:6f:07:44:14:e6:fb:4a:d6:
                    ff:63:ec:64:67:c9:61:50:a2:14:c5:94:f9:0f:ce:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:36:4F:65:44:A9:6D:FA:3F:7D:26:E6:85:B1:1B:32:1D:11:40:4B
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a313134303a3a2f34322d3432203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:1140::/42

    Signature Algorithm: sha256WithRSAEncryption
         da:c5:1e:56:10:cf:b4:ae:02:fd:f5:a1:87:bf:88:e9:b7:a2:
         5e:3d:d3:6d:97:f7:ad:74:3a:2f:d0:c3:0b:61:1f:67:3e:bb:
         04:45:b5:0b:b1:7f:5c:b2:5c:d6:f7:74:7a:4d:b3:82:22:83:
         98:ae:a1:0d:8e:67:17:6e:a5:63:6f:60:4d:32:cb:40:6a:6f:
         19:37:7e:39:99:4f:19:32:b9:4d:ad:13:86:1c:89:ed:0e:a5:
         75:8f:08:3d:8e:89:38:2b:ed:1c:93:2a:34:7d:d0:45:35:68:
         8b:ed:92:29:bd:7d:37:2c:97:aa:84:22:41:ef:77:eb:9c:3b:
         af:74:17:e8:77:1e:e7:fb:9e:58:b6:1a:fe:de:ac:24:8a:db:
         5c:af:4f:52:68:05:d2:ca:a8:80:a2:aa:1b:6f:2e:2f:00:1e:
         b5:43:1a:27:7b:38:8d:fd:db:00:ba:d0:1a:a9:8b:b3:a3:e4:
         1d:d0:04:a5:66:e0:78:d0:dd:b2:3a:22:6d:34:e8:da:18:5a:
         15:6d:ac:5b:9e:f1:cc:50:79:92:bb:48:e5:33:51:ed:8c:c2:
         ca:fa:b1:5c:95:3f:dd:be:7f:f2:a5:51:4d:dd:dd:e9:ab:33:
         da:0e:56:ca:c5:16:4d:4f:de:2c:74:d2:dd:ce:78:35:08:05:
         f0:bb:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:08:09 2024 by rpki-client on console-fra.rpki-client.org