Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a3a2f33332d3333203d3e20323732363336.roa
File:                     323830343a383635343a3a2f33332d3333203d3e20323732363336.roa (raw, json)
Hash identifier:          K1iwVlnw93Ax7Givq2S/5rqBCgtMUsGcj7ijGvhjook=
Subject key identifier:   47:F2:F6:D9:F3:5E:78:23:FB:AB:AF:54:7D:D4:B9:49:55:80:CE:DE
Certificate issuer:       /CN=68FD0235B3CB797681390860BD7AFE8B6E96F9F4
Certificate serial:       266A1B633A0DB395FCEAE45C0B6ABF764A4638B3
Authority key identifier: 68:FD:02:35:B3:CB:79:76:81:39:08:60:BD:7A:FE:8B:6E:96:F9:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a3a2f33332d3333203d3e20323732363336.roa
Signing time:             Fri 01 Nov 2024 18:25:58 +0000
ROA not before:           Fri 01 Nov 2024 18:20:58 +0000
ROA not after:            Fri 31 Oct 2025 18:25:58 +0000
asID:                     272636
IP address blocks:        2804:8654::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.crl
                          rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6a:1b:63:3a:0d:b3:95:fc:ea:e4:5c:0b:6a:bf:76:4a:46:38:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68FD0235B3CB797681390860BD7AFE8B6E96F9F4
        Validity
            Not Before: Nov  1 18:20:58 2024 GMT
            Not After : Oct 31 18:25:58 2025 GMT
        Subject: CN=47F2F6D9F35E7823FBABAF547DD4B9495580CEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:b3:bf:42:ae:03:f1:45:2c:23:97:e1:eb:
                    51:9d:0d:72:95:47:91:33:10:76:fd:3b:5f:3e:d2:
                    14:24:13:2d:7f:85:c3:7f:9d:f5:a0:ff:a5:93:69:
                    3e:4d:f9:1d:d8:ea:89:bb:1d:ac:d9:88:b4:76:7f:
                    9b:92:a0:cd:49:39:20:28:96:73:1c:0a:27:4b:28:
                    da:f1:3c:58:e3:fb:0e:1d:0b:eb:1a:ac:49:99:cf:
                    94:17:d5:dd:d4:5f:8c:63:89:ab:13:4b:95:76:c2:
                    20:ad:05:25:6d:dd:f2:98:50:73:57:f9:1b:9b:a8:
                    b6:2e:9f:8c:25:79:d4:04:90:85:46:1d:71:65:99:
                    9f:22:15:5a:07:2a:57:2f:50:d0:ca:bb:cc:20:42:
                    b7:cf:51:4e:a7:90:fa:a0:cf:5d:52:35:ed:ff:5b:
                    aa:6c:9a:8e:92:fa:ee:70:e5:77:6a:d9:ea:22:36:
                    d0:58:d1:e5:b0:04:d4:ed:10:87:47:c6:f4:fc:b2:
                    65:37:34:19:de:c9:1d:1c:45:da:4c:f9:98:16:6e:
                    79:bb:75:af:3e:e9:b3:e5:44:34:d9:41:40:a1:d0:
                    03:8c:ad:20:35:9f:87:8f:d0:b1:d4:e4:0c:90:17:
                    b1:3c:38:f0:49:38:66:de:ac:30:e6:f6:b9:0a:c3:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F2:F6:D9:F3:5E:78:23:FB:AB:AF:54:7D:D4:B9:49:55:80:CE:DE
            X509v3 Authority Key Identifier:
                keyid:68:FD:02:35:B3:CB:79:76:81:39:08:60:BD:7A:FE:8B:6E:96:F9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68FD0235B3CB797681390860BD7AFE8B6E96F9F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a3a2f33332d3333203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8654::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:f1:fe:d5:4f:63:d7:6f:9e:2d:c4:99:38:c3:59:31:cf:fd:
         d2:55:1d:03:2b:7d:b8:af:2e:54:5a:dd:ae:6c:f9:7c:1b:b8:
         fc:f6:11:27:ea:ec:41:0f:dd:cf:cb:00:f0:d2:a0:e3:ce:f1:
         e5:a8:1f:4e:f4:77:7f:bc:d7:a5:53:fd:f9:0e:c1:89:03:1d:
         b3:3a:b1:3f:2f:23:36:59:42:76:02:d6:df:42:10:c0:13:6d:
         78:e7:7a:04:2e:30:e7:7c:98:1f:e9:ae:3e:0e:0a:c0:df:d7:
         a7:7b:89:35:8f:95:85:1d:c1:34:16:f7:59:91:62:a1:c0:14:
         4d:f4:c4:40:d6:55:59:3c:be:96:76:24:b1:0d:9b:07:31:b1:
         d9:6c:02:0b:5c:e0:6f:f4:75:88:fe:0d:0a:33:0a:3d:99:a9:
         b7:dc:93:53:d8:d1:8e:fa:7f:ef:83:a9:13:84:03:12:ce:77:
         e3:c9:95:d6:ae:dd:9d:d9:64:9d:31:c1:88:79:24:4f:06:eb:
         cf:b8:a5:75:ac:1f:be:df:fe:f5:2f:d9:9e:89:5c:97:27:af:
         f1:d3:3a:56:b2:ee:05:65:de:ad:ab:34:96:35:6d:e2:ef:6f:
         b1:ab:51:f2:6e:df:88:8b:63:34:6d:32:40:14:83:3a:de:9f:
         29:e5:3c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:29 2024 by rpki-client on console-ams.rpki-client.org