Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/323830343a343632343a3a2f33322d3438203d3e20323636393731.roa
File:                     323830343a343632343a3a2f33322d3438203d3e20323636393731.roa (raw, json)
Hash identifier:          D73dVYuxZ/kEJAuHLTEhsf2an7rI0t3/z3Ra/OJdUks=
Subject key identifier:   35:6B:09:C8:96:4B:50:BC:A6:B3:03:01:06:BB:D2:10:AA:49:18:C6
Certificate issuer:       /CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
Certificate serial:       341546C5E97B049A729C0578C9DF28B04D6CA109
Authority key identifier: 24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/323830343a343632343a3a2f33322d3438203d3e20323636393731.roa
Signing time:             Wed 03 Apr 2024 21:00:44 +0000
ROA not before:           Wed 03 Apr 2024 20:55:44 +0000
ROA not after:            Wed 02 Apr 2025 21:00:44 +0000
asID:                     266971
IP address blocks:        2804:4624::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl
                          rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:15:46:c5:e9:7b:04:9a:72:9c:05:78:c9:df:28:b0:4d:6c:a1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
        Validity
            Not Before: Apr  3 20:55:44 2024 GMT
            Not After : Apr  2 21:00:44 2025 GMT
        Subject: CN=356B09C8964B50BCA6B3030106BBD210AA4918C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:ac:3b:b4:61:83:37:0c:c3:a3:9d:5b:e8:
                    f7:37:d5:5f:c8:d4:00:f5:0a:e8:3f:e1:9f:aa:28:
                    2d:34:39:a8:bb:c7:93:d5:05:8d:75:18:3d:28:59:
                    3e:d6:0f:49:ed:6b:c8:bc:02:72:51:1c:e7:51:6f:
                    6a:f4:8b:5a:0d:5f:53:ec:5d:87:a5:26:3a:fc:3b:
                    b0:97:3a:62:f8:0a:91:c9:87:7e:5b:5c:fd:92:5a:
                    2e:d7:c5:af:3e:9f:27:6a:c9:06:2f:fa:7a:70:b8:
                    8e:25:66:94:ec:8f:5d:cc:a1:75:96:ca:79:bb:c9:
                    b6:cd:e1:09:38:50:40:e6:32:71:81:ca:fd:33:df:
                    44:85:77:b1:61:62:e8:02:b2:f1:1e:9f:95:dc:1b:
                    96:ab:8a:ff:09:33:14:97:f7:9e:58:e2:e3:56:25:
                    3d:0a:ab:db:ff:1f:1d:ab:61:7f:bd:b3:22:c4:4f:
                    66:73:68:1b:55:3b:c6:82:26:71:80:64:94:c2:98:
                    65:7a:ea:00:a7:59:e2:9f:a6:e1:d9:34:7c:13:dd:
                    65:7f:12:2e:a2:28:29:ff:be:7e:f8:5e:af:3e:aa:
                    99:07:ac:6d:75:80:80:12:d2:9c:64:be:20:2d:69:
                    dc:e0:df:45:83:ee:8b:5b:9e:55:56:1f:2d:aa:b1:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6B:09:C8:96:4B:50:BC:A6:B3:03:01:06:BB:D2:10:AA:49:18:C6
            X509v3 Authority Key Identifier:
                keyid:24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/323830343a343632343a3a2f33322d3438203d3e20323636393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4624::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:0f:53:7d:9b:6f:c3:6c:db:1a:91:71:af:7a:25:c7:d1:01:
         a8:d4:38:be:01:8f:2d:22:73:b9:29:b6:48:95:40:2a:29:4b:
         30:af:7d:a3:0c:e9:da:d6:68:a8:3b:55:9e:8a:83:f1:cd:6a:
         e2:22:0d:c9:87:b7:53:0a:67:cd:a1:8b:a9:67:01:83:cf:ba:
         08:cd:40:c0:e9:62:9d:62:aa:62:1a:b3:bb:56:ff:9b:b8:fb:
         55:e8:a0:ff:c8:a7:94:2c:2d:a8:ea:18:25:23:59:d9:53:0d:
         66:d2:30:5d:fe:51:dc:f7:bf:04:3e:42:2e:35:ef:ac:6d:39:
         4b:ea:94:16:77:b9:34:7f:dc:1c:18:b1:1d:fd:0f:75:7f:e5:
         66:88:d4:51:13:c2:9e:82:9d:ff:6e:a5:9b:00:90:22:98:6a:
         a8:d9:55:4b:16:09:00:a7:5e:9e:87:f5:92:e2:94:4a:01:29:
         a0:55:55:cc:5f:ef:18:cf:80:53:86:8c:b6:ca:6a:86:f0:2f:
         21:b8:dc:df:e8:17:09:4b:ce:b0:91:21:87:7a:26:4a:b2:2d:
         73:0b:72:2a:cc:c5:99:6a:80:c0:fe:83:b5:cb:c4:2b:3b:f0:
         5b:d8:76:cb:97:4c:f8:e8:16:d1:4d:5f:65:33:54:b1:08:08:
         89:6d:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:57 2024 by rpki-client on console-ams.rpki-client.org