Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa
File:                     323830343a323431383a3a2f33322d313238203d3e20323634323031.roa (raw, json)
Hash identifier:          0LJLvfUO389TJDAZ9ZFuEH8y0WIchdo/vtLP7ryWglM=
Subject key identifier:   39:8A:7B:55:F6:98:C9:9D:D5:B7:38:08:58:52:A5:23:C0:B6:63:03
Certificate issuer:       /CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
Certificate serial:       6DB8BCD903A489CA34086B76C70A5B1385265BF6
Authority key identifier: 8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     264201
IP address blocks:        2804:2418::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl
                          rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b8:bc:d9:03:a4:89:ca:34:08:6b:76:c7:0a:5b:13:85:26:5b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:92:e0:84:18:12:cc:73:51:2f:47:fe:27:
                    ce:7e:f5:b3:12:aa:12:9a:b0:71:21:f2:fd:36:82:
                    92:0d:b4:d6:1c:12:f1:13:71:64:e2:c0:9a:03:c9:
                    d1:7e:6a:57:ac:f2:d4:18:cf:4b:b6:93:13:b6:54:
                    6d:ed:7c:d7:e0:09:44:85:18:31:0c:53:c6:c5:d1:
                    2f:c6:f5:6e:1f:07:63:9f:70:22:d3:09:f3:6f:a6:
                    67:f1:43:f6:70:da:a3:90:e6:00:27:4c:6e:ef:f1:
                    f1:fe:3e:cc:8b:7c:89:3a:00:9f:e8:11:c0:63:10:
                    6e:be:5b:5e:5d:87:51:32:6d:9f:54:50:60:0c:44:
                    56:1d:02:ea:55:3b:44:0c:3a:68:fe:10:98:75:c9:
                    7e:56:09:ae:d0:a1:af:4f:b7:bb:5a:d8:1f:8f:87:
                    cf:ee:dc:1f:60:d0:b4:3f:66:88:d3:f9:bb:fc:f3:
                    4a:32:1a:73:8e:f0:ae:e7:a7:2e:d9:82:73:bc:24:
                    ae:17:83:93:a8:0f:d0:bb:41:2d:2c:2d:6a:8e:55:
                    98:98:29:03:e2:f1:e5:a5:81:5d:86:d0:c5:fe:99:
                    a9:19:1c:53:68:11:66:2c:53:72:da:b0:22:8d:e6:
                    20:01:1e:a8:a4:81:80:d2:43:c9:ad:9d:c1:c4:a8:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8A:7B:55:F6:98:C9:9D:D5:B7:38:08:58:52:A5:23:C0:B6:63:03
            X509v3 Authority Key Identifier:
                keyid:8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2418::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:a9:61:2f:2f:0d:70:12:a0:58:c0:56:df:5c:97:c8:4f:
         f1:95:09:9d:6a:50:ef:b1:5c:bc:92:e6:86:6e:b4:93:0f:f2:
         a8:50:62:19:46:17:e7:23:c3:37:5e:ef:7b:e6:f4:23:de:c7:
         d4:69:fb:75:cb:7e:53:e5:85:89:48:a0:f2:f1:79:16:06:55:
         3a:53:87:b1:79:a1:11:9a:63:0e:8c:61:52:f4:a1:cf:43:5d:
         af:7a:1f:65:3f:df:97:82:dd:a8:51:4c:c8:e9:6b:68:bf:8a:
         cc:3d:af:7f:6c:ad:25:75:f4:77:c5:b8:0f:12:ad:81:d4:ea:
         66:8d:c4:2c:da:50:b1:ef:6b:2c:3b:81:83:2c:74:68:0c:05:
         54:f0:aa:f5:f7:97:a7:38:0a:d7:54:a8:5b:6e:18:17:ec:5c:
         64:a4:53:ed:d5:05:ae:a3:a1:b0:49:55:56:3d:84:30:a6:19:
         77:25:9d:36:17:4e:fa:9c:1a:80:db:5d:33:9c:e3:25:b3:a5:
         a3:4a:3d:ef:5c:6f:91:2f:9e:df:43:4f:4a:c4:11:3d:57:91:
         75:0e:6d:a9:61:90:57:fa:4a:94:0d:fb:93:50:ed:4a:ee:eb:
         18:7b:ca:4b:e9:0c:0c:fe:4a:55:73:f7:6f:58:6b:f5:e8:81:
         15:9b:8d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:26 2024 by rpki-client on console-ams.rpki-client.org