Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa
File:                     323830343a313034343a3a2f33342d3334203d3e20323633363237.roa (raw, json)
Hash identifier:          6E4jTBmvZy+r2y/+cScFknmgJy4ELFPzwnIcNtaKwlE=
Subject key identifier:   32:09:85:7C:08:CF:7B:02:4D:DF:44:5A:AC:30:68:26:F7:8E:5F:AE
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       05E37C507E127DAE3ACE4A54AEB16DE485DF9198
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:40 +0000
ROA not before:           Tue 23 Apr 2024 19:08:40 +0000
ROA not after:            Tue 22 Apr 2025 19:13:40 +0000
asID:                     263627
IP address blocks:        2804:1044::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e3:7c:50:7e:12:7d:ae:3a:ce:4a:54:ae:b1:6d:e4:85:df:91:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:40 2024 GMT
            Not After : Apr 22 19:13:40 2025 GMT
        Subject: CN=3209857C08CF7B024DDF445AAC306826F78E5FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:68:2d:bc:24:3c:2d:ec:26:ce:d6:38:c4:
                    ce:f1:37:1d:b0:f2:1f:4b:53:67:da:1d:b1:5d:12:
                    27:06:d0:2c:e2:13:c4:36:d2:e9:bd:17:c3:6d:37:
                    fe:ca:a5:f1:e1:ba:96:f2:5e:42:0b:10:bb:24:ef:
                    35:7b:ce:29:79:02:a1:2c:c1:cd:f7:b9:1d:36:d8:
                    e0:bc:bd:3d:86:fb:43:14:07:5c:9c:cb:69:8b:ff:
                    2a:b6:2c:3a:b7:70:a9:d6:61:7d:53:a9:11:84:25:
                    8a:93:f1:45:e7:4f:13:6d:9e:18:9b:e3:c5:a5:70:
                    bb:32:b7:ee:a3:5d:22:6d:c3:6c:ae:25:2d:44:da:
                    60:5a:f4:9d:62:58:96:33:61:77:68:e6:f8:6a:bf:
                    e9:ab:88:25:d6:83:7e:90:de:e2:91:e7:6b:54:9c:
                    53:a6:77:bd:f9:50:45:fe:2a:45:75:36:28:ea:13:
                    3b:9f:76:27:cd:53:74:ac:71:1d:d8:c3:e5:a1:21:
                    67:dd:d1:83:5f:c8:58:7f:fd:9a:46:87:93:cb:81:
                    6d:31:26:f6:36:3e:14:34:60:7f:76:9a:fa:ec:d7:
                    3b:4a:e4:b0:2a:ad:20:f1:06:5e:d7:99:57:3a:b3:
                    2f:57:81:cc:bb:7c:76:db:15:cd:ad:0a:25:db:ca:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:09:85:7C:08:CF:7B:02:4D:DF:44:5A:AC:30:68:26:F7:8E:5F:AE
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:fe:26:25:dc:e4:e2:8a:47:66:3d:a1:be:6e:d7:aa:ca:
         ec:9c:bf:2c:48:79:5e:9e:38:55:3f:bd:d7:ac:3b:c6:fa:11:
         98:4b:95:33:15:22:90:5e:cb:e1:b7:10:98:d6:1f:95:a5:98:
         6d:77:40:c5:e8:2c:6a:3a:8a:07:49:32:77:de:c9:68:79:ca:
         76:70:f6:b6:95:9c:c4:11:43:9f:cd:10:db:14:c1:93:ec:93:
         ea:bc:9e:a2:86:50:93:85:f1:b0:77:d6:27:c3:cf:6f:fc:68:
         2a:92:60:33:9b:fb:12:d1:7a:9c:09:a7:ce:c3:89:c3:67:7d:
         d6:5e:cb:02:a3:56:be:a1:8a:0b:67:c5:94:31:f1:a9:b7:b4:
         52:68:84:28:74:76:c7:5b:f5:cb:14:38:bf:19:af:b7:f3:de:
         78:3d:c0:50:1f:2e:33:cc:d3:28:c5:b2:86:80:41:3e:3f:a2:
         48:98:27:0b:3b:c1:37:ac:9c:67:31:e6:70:31:85:5f:3b:fb:
         f3:d2:71:b7:42:e2:a5:24:52:f0:10:ba:55:95:29:77:00:83:
         37:02:33:8d:42:8c:99:10:d3:b9:b4:91:e1:cb:56:5e:84:b3:
         57:31:5f:7a:4f:4c:9a:0b:ca:b6:31:02:b4:a3:9e:7b:91:ae:
         fb:62:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:09 2024 by rpki-client on console-fra.rpki-client.org