Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/323830343a366533303a3a2f33322d313238203d3e20323730353831.roa
File:                     323830343a366533303a3a2f33322d313238203d3e20323730353831.roa (raw, json)
Hash identifier:          CLHp3/V4UpNcL5wBM25IldSTZMf8BpWchR3crj4bIlU=
Subject key identifier:   4F:DC:3D:7E:BE:BF:8C:57:59:9C:FD:58:5B:63:39:43:D4:EA:48:EE
Certificate issuer:       /CN=793843AE7EAE08FD5A902A5679C194A4E02D2781
Certificate serial:       63B8EDAC49F224A6E34687462741B1313CA48742
Authority key identifier: 79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/323830343a366533303a3a2f33322d313238203d3e20323730353831.roa
Signing time:             Thu 05 Sep 2024 14:13:08 +0000
ROA not before:           Thu 05 Sep 2024 14:08:08 +0000
ROA not after:            Thu 04 Sep 2025 14:13:08 +0000
asID:                     270581
IP address blocks:        2804:6e30::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl
                          rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b8:ed:ac:49:f2:24:a6:e3:46:87:46:27:41:b1:31:3c:a4:87:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793843AE7EAE08FD5A902A5679C194A4E02D2781
        Validity
            Not Before: Sep  5 14:08:08 2024 GMT
            Not After : Sep  4 14:13:08 2025 GMT
        Subject: CN=4FDC3D7EBEBF8C57599CFD585B633943D4EA48EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:08:20:4e:d0:a1:3c:bb:5f:1c:f8:8a:87:
                    8c:f3:9a:1b:31:82:09:37:c1:67:f1:f2:47:53:39:
                    94:b3:31:3b:92:51:1e:d9:b1:e4:dd:37:ac:25:7a:
                    b2:be:68:91:b3:a4:11:37:ea:2f:fe:bf:ec:cf:9e:
                    aa:9f:ea:5b:e1:87:e3:5c:1f:21:f0:85:a8:c4:87:
                    36:d3:b5:83:5f:9a:ea:e2:71:0c:c7:b5:8b:36:a5:
                    10:48:9b:79:47:75:31:87:fb:3e:fb:4c:4a:81:07:
                    60:03:d3:8c:09:74:8c:82:66:da:13:ab:31:68:d2:
                    7d:5b:a3:76:aa:cc:38:de:cc:81:2d:bc:2d:d2:17:
                    da:c0:7f:07:7a:b8:7a:85:30:b3:51:7b:12:83:83:
                    59:e5:cf:95:b7:7e:7f:fb:23:9a:d8:f4:70:a5:a6:
                    27:ce:f1:3b:30:c4:fb:59:c4:7e:0d:f0:f9:ca:51:
                    55:04:cd:40:67:9f:35:75:c4:ec:d5:0f:78:d4:ad:
                    2a:cd:67:11:75:b9:15:2d:c4:d9:60:c1:42:b0:f6:
                    54:94:8a:fe:d9:8d:e2:74:7e:0d:cc:64:df:6e:65:
                    c3:b3:88:bd:01:18:2a:a1:64:8d:3e:2b:a6:5c:1b:
                    6d:e5:82:06:70:7d:66:cd:23:b3:e5:c0:26:bb:1f:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DC:3D:7E:BE:BF:8C:57:59:9C:FD:58:5B:63:39:43:D4:EA:48:EE
            X509v3 Authority Key Identifier:
                keyid:79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/323830343a366533303a3a2f33322d313238203d3e20323730353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e30::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:1a:b1:ef:51:8e:0b:da:d3:e4:6f:c0:c5:d7:1c:4f:2d:a4:
         f7:aa:bd:df:0c:cb:36:36:74:31:17:94:7d:1f:99:a2:03:fd:
         26:bf:10:f7:38:04:ff:3f:14:43:1f:7f:3f:32:af:51:1a:d6:
         40:e8:e2:18:d8:87:f4:fc:52:5f:e8:c6:8d:cb:a1:a3:36:f9:
         8d:fb:7c:da:05:0d:b2:09:6d:7c:0f:55:da:73:b7:4d:3d:12:
         e0:8a:04:ee:3c:81:d8:83:f9:e6:21:70:d2:ba:58:09:2b:84:
         9c:f8:a2:52:01:9e:10:96:b6:ec:62:3f:7d:6d:b2:3b:5a:dd:
         6d:18:3c:28:ec:6b:e6:a2:5a:9b:a7:12:4e:12:47:de:b1:1b:
         10:94:21:35:59:d2:54:c0:03:c2:df:ff:a9:e0:f4:80:d3:f2:
         a1:9c:45:7f:af:b2:56:fc:c9:33:7a:4e:fc:fa:2b:8d:c0:f6:
         06:a6:da:dd:9e:1e:1e:df:1a:d0:f4:1e:b3:22:82:98:22:3f:
         29:fe:40:aa:fd:70:35:a2:49:f6:99:2a:87:fe:ed:3a:9c:db:
         44:a3:b0:ec:97:52:2b:7c:a9:38:50:55:38:68:95:d5:0a:3f:
         de:25:c3:8f:0d:be:a5:10:a0:71:12:96:3f:f1:d1:96:9d:51:
         5f:9a:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:38 2024 by rpki-client on console-ams.rpki-client.org