Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323064303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323064303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          wqDVkOSfNp00pmFVVFoiWWvYjC2B8bAKtgDvPOzJIH4=
Subject key identifier:   05:78:0B:B5:EE:84:97:84:3C:E6:A6:C4:F0:86:71:97:4E:F2:8E:F8
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       4179D7735EC4296B7FE8ACA103B7E46BAC54B336
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323064303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:26 +0000
ROA not before:           Thu 16 May 2024 11:33:26 +0000
ROA not after:            Thu 15 May 2025 11:38:26 +0000
asID:                     263338
IP address blocks:        2804:1494:20d0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:79:d7:73:5e:c4:29:6b:7f:e8:ac:a1:03:b7:e4:6b:ac:54:b3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:26 2024 GMT
            Not After : May 15 11:38:26 2025 GMT
        Subject: CN=05780BB5EE8497843CE6A6C4F08671974EF28EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:15:70:01:b1:85:36:99:65:84:ab:fd:18:
                    5d:29:99:14:d9:54:62:ac:31:7f:9b:08:d1:9f:54:
                    9d:d0:b7:1b:18:eb:31:a2:f5:ca:04:ef:2f:be:ba:
                    94:47:a9:27:21:65:e3:f7:78:e3:7b:d8:45:a0:3c:
                    6a:16:c4:1a:c7:ec:26:0d:13:3a:9c:21:87:19:60:
                    9e:2e:ac:c3:e1:ed:2a:ec:36:a2:0e:8a:62:4d:2c:
                    9d:9d:84:a7:61:52:41:2d:dc:76:45:03:ee:e1:f5:
                    4d:53:69:28:62:c4:cb:42:33:5f:a0:2a:e8:ee:b6:
                    52:71:8f:5f:0d:72:64:58:93:d8:55:27:10:ce:63:
                    b3:3f:1b:af:2d:7b:cf:59:d4:e7:4e:b5:d4:db:14:
                    b1:6d:06:58:4d:9a:63:9a:7c:06:b9:2c:30:5d:bf:
                    2f:e5:8e:1c:e3:a0:20:ed:02:74:04:f0:37:9a:4f:
                    0d:cb:9f:71:06:4f:b1:e9:88:81:d5:7a:63:12:8c:
                    eb:41:8a:a6:08:f3:3e:fa:f1:fd:0b:55:a5:ae:91:
                    f1:3c:d0:df:67:c4:9f:b7:77:fe:42:5e:72:8c:55:
                    10:a2:aa:66:de:52:c9:31:63:94:4b:c3:93:fa:c8:
                    e4:db:b0:e5:cb:bc:d2:d6:44:87:aa:37:3f:a5:d7:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:78:0B:B5:EE:84:97:84:3C:E6:A6:C4:F0:86:71:97:4E:F2:8E:F8
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323064303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:20d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         8d:ce:5c:9d:83:f1:36:67:fb:4d:71:26:50:c3:a6:7d:a8:f0:
         8a:05:80:c8:04:70:31:8b:9a:c5:cf:a1:32:31:f9:94:e6:99:
         bb:c0:9c:91:7e:51:9e:fc:58:21:64:7c:7b:2e:37:9a:78:f5:
         88:91:75:f1:32:38:09:02:6f:12:81:51:4e:a9:1c:73:0c:04:
         ef:9f:db:56:5f:f2:f4:b4:c5:33:b9:29:a7:26:d5:bc:79:5b:
         f5:32:df:25:33:1b:f1:7f:00:8e:eb:4f:fa:3f:a4:73:b1:12:
         50:f6:f7:ea:2a:a7:ba:bd:2c:69:07:c2:5c:95:50:89:54:cc:
         62:b9:d3:5b:a5:3d:40:b5:bc:ec:fc:39:8e:13:c2:58:ce:2e:
         26:0c:57:34:94:dd:fb:cb:c4:56:b0:bb:6e:e1:29:a2:cc:53:
         4a:84:85:e6:2d:67:3b:8b:64:9e:55:fa:c7:20:45:6f:2b:c4:
         a6:1e:f0:b1:29:2b:bb:91:48:59:cd:f5:a0:72:0c:2d:11:44:
         c5:45:5b:06:9e:30:cf:e2:a2:a4:61:0a:1d:15:e8:27:24:fa:
         9a:ab:18:5f:c1:3b:cc:0f:b3:e9:f3:2b:3f:08:54:ad:8f:60:
         c0:18:99:62:0c:fc:41:04:e0:68:99:31:4c:90:69:3e:78:85:
         0c:87:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:31 2024 by rpki-client on console-ams.rpki-client.org