Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a383030303a3a2f33332d3333203d3e20323634353737.roa
File:                     323830343a323164383a383030303a3a2f33332d3333203d3e20323634353737.roa (raw, json)
Hash identifier:          G2FyoRpZzNrWxRjOjy8Nyldnhkd0a4zmqANpVK8onps=
Subject key identifier:   19:E1:F3:E2:56:1D:7F:6C:F2:F8:B9:A7:26:D0:BC:22:BB:79:6B:79
Certificate issuer:       /CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
Certificate serial:       70D8F354373E39C55B582D1F282BC20B0CF4FFC4
Authority key identifier: BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a383030303a3a2f33332d3333203d3e20323634353737.roa
Signing time:             Thu 04 Jan 2024 19:01:21 +0000
ROA not before:           Thu 04 Jan 2024 18:56:21 +0000
ROA not after:            Thu 02 Jan 2025 19:01:21 +0000
asID:                     264577
IP address blocks:        2804:21d8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d8:f3:54:37:3e:39:c5:5b:58:2d:1f:28:2b:c2:0b:0c:f4:ff:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
        Validity
            Not Before: Jan  4 18:56:21 2024 GMT
            Not After : Jan  2 19:01:21 2025 GMT
        Subject: CN=19E1F3E2561D7F6CF2F8B9A726D0BC22BB796B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5b:11:14:6c:f3:17:9f:d3:57:1e:52:45:cc:
                    b2:cc:9d:00:08:b4:d0:6f:74:76:d9:60:00:8b:e4:
                    06:e7:e7:bd:32:b2:69:e7:13:67:65:14:d6:13:e8:
                    2d:89:dc:ae:05:d7:5d:bf:ff:13:88:82:57:96:cd:
                    ff:1b:b0:78:30:2b:fd:ed:3d:d3:a1:4c:1a:cb:3a:
                    96:a7:82:c4:1a:3b:2b:0b:7d:ab:9b:3f:91:a1:41:
                    a8:b6:21:03:c4:a6:52:73:7b:28:38:0c:e2:e1:47:
                    70:1d:a6:fd:80:51:3e:8a:42:7d:b2:da:8b:71:05:
                    7d:03:9f:bd:33:66:5d:70:72:13:67:be:87:78:83:
                    ed:62:a0:ac:4b:6f:c7:97:af:90:14:b1:e4:23:36:
                    e6:98:86:94:ed:77:23:73:c1:c4:91:89:a8:1b:a2:
                    53:71:de:06:32:eb:91:ba:70:8a:ba:ee:ff:30:86:
                    58:ea:7f:21:ed:a9:f2:21:59:4b:5c:f7:7c:17:13:
                    ee:71:46:c3:be:3b:5a:8f:04:2e:10:0e:07:78:78:
                    e8:c9:6d:97:89:52:6e:bc:d1:00:e1:79:23:83:7d:
                    3b:a2:ea:e1:ac:ae:2c:9c:32:e0:78:a5:25:c4:eb:
                    45:49:3d:23:90:2a:c2:e9:12:32:f2:ee:d0:06:fe:
                    30:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E1:F3:E2:56:1D:7F:6C:F2:F8:B9:A7:26:D0:BC:22:BB:79:6B:79
            X509v3 Authority Key Identifier:
                keyid:BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a383030303a3a2f33332d3333203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:a2:0c:11:b9:a1:b8:eb:61:f1:22:90:7e:0c:7b:1b:be:
         f9:21:47:ad:cb:09:48:59:1b:9f:ac:33:61:12:5c:dd:01:84:
         8c:92:ee:88:06:44:04:e8:1e:6b:2b:b9:a1:72:68:d4:d3:6a:
         d0:7c:19:1b:c5:ca:a7:10:3c:07:d5:fc:66:59:17:9e:29:62:
         6b:39:e1:db:b6:b2:73:f5:e0:6a:64:ea:cb:b9:73:a3:d2:d7:
         17:d1:2f:50:cf:af:05:a7:c9:11:62:e1:52:86:f0:ff:b2:93:
         56:59:bd:36:39:9a:e5:02:31:a7:e0:21:b8:38:a5:10:1e:0d:
         52:12:85:16:fe:ff:39:1a:ca:7a:d5:98:29:55:8a:68:bc:ac:
         e9:73:93:13:cc:34:50:be:68:2e:95:85:82:43:6e:20:21:3d:
         ae:e3:b9:db:06:f0:fd:87:45:b4:14:1c:eb:b3:4c:41:5b:c6:
         61:2b:d3:73:9c:fa:a3:3f:ea:5e:f2:f7:ff:67:33:ed:14:5d:
         b6:48:69:15:54:ba:5a:3c:8a:0b:89:6a:17:b9:2e:9c:21:42:
         74:f8:46:b5:81:0b:64:d0:c2:78:19:8d:a9:d3:45:41:72:d4:
         e4:cb:f3:40:6e:af:77:0a:bc:09:37:e1:6c:65:93:c9:f3:cc:
         31:6d:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:31 2024 by rpki-client on console.sobornost.net