Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/323830343a323265303a3a2f33322d3333203d3e20323634313238.roa
File:                     323830343a323265303a3a2f33322d3333203d3e20323634313238.roa (raw, json)
Hash identifier:          7n+kRhhd2ONgVBK1foCdDkMtCiwZOZi8fxZRzsnvGWQ=
Subject key identifier:   E6:9E:62:B1:F7:A4:1D:4F:1A:7C:A6:5B:37:8B:DD:EE:D0:94:DF:49
Certificate issuer:       /CN=E3C11484C8B4CD3F766170F9E324672A733D9604
Certificate serial:       7A7B7547DBCF56AA518D62D71E9F2DC972BE07D7
Authority key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/323830343a323265303a3a2f33322d3333203d3e20323634313238.roa
Signing time:             Thu 04 Apr 2024 10:20:23 +0000
ROA not before:           Thu 04 Apr 2024 10:15:23 +0000
ROA not after:            Thu 03 Apr 2025 10:20:23 +0000
asID:                     264128
IP address blocks:        2804:22e0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl
                          rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7b:75:47:db:cf:56:aa:51:8d:62:d7:1e:9f:2d:c9:72:be:07:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Validity
            Not Before: Apr  4 10:15:23 2024 GMT
            Not After : Apr  3 10:20:23 2025 GMT
        Subject: CN=E69E62B1F7A41D4F1A7CA65B378BDDEED094DF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:13:9c:a8:d6:c2:bb:51:05:15:18:70:ae:
                    07:a6:88:33:41:f4:f4:55:97:28:67:7d:a9:4d:04:
                    28:8c:2d:e4:b4:2a:ac:ed:4f:3f:75:7d:41:b5:1c:
                    e5:66:15:70:5c:40:12:22:b5:5a:0c:51:bc:0e:7f:
                    df:7f:5b:5f:58:6f:25:94:93:a6:63:e4:0f:2b:62:
                    76:0a:09:a9:7d:2a:0b:c4:88:7e:f7:43:fe:ff:31:
                    87:ee:1a:64:11:94:c5:8f:cc:5d:c9:52:5a:70:10:
                    35:a1:67:1b:9c:09:de:8f:0f:1d:d6:25:71:6b:3b:
                    b9:68:d6:a6:11:f2:33:5e:1b:e9:79:b2:91:72:e1:
                    17:69:8c:35:24:93:6d:ad:60:52:86:5c:25:df:8a:
                    40:0b:5e:ba:22:1c:7e:9a:7e:72:67:2b:c1:77:26:
                    ba:53:6e:da:05:cb:2b:0e:ee:97:03:3a:1f:b8:81:
                    36:28:d8:e3:46:ef:aa:74:ae:32:9f:60:8f:40:3d:
                    ad:c1:a3:19:93:ee:dd:52:57:38:aa:ef:43:a6:c4:
                    a2:9c:b2:c6:1d:18:80:0c:30:2a:c1:3e:3b:1d:a0:
                    cf:f7:ae:e8:c4:06:80:1b:9c:7b:fa:c5:6a:aa:eb:
                    ca:4b:dc:7a:a1:5c:fd:d5:9d:37:e7:53:09:57:c5:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9E:62:B1:F7:A4:1D:4F:1A:7C:A6:5B:37:8B:DD:EE:D0:94:DF:49
            X509v3 Authority Key Identifier:
                keyid:E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/323830343a323265303a3a2f33322d3333203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:02:24:99:44:49:7a:7a:a4:c2:8c:3f:56:9c:8e:e5:bb:02:
         28:2e:fe:d7:35:e9:c9:3f:10:ca:14:a4:56:e1:ff:10:23:a0:
         9b:c6:dc:14:36:9b:40:9b:88:ab:a3:1f:31:8e:e9:e3:4c:84:
         9a:9d:bc:db:26:08:8b:9d:6a:c1:9c:19:eb:72:60:df:73:ad:
         af:1c:b2:34:54:cd:aa:10:1a:36:5c:fb:b5:dd:9d:24:ab:b1:
         f7:f2:a4:23:dd:64:4d:5a:2d:75:c8:46:54:15:d1:7b:24:f2:
         ef:70:b7:2b:65:2e:ff:ac:a6:96:65:26:b5:fb:c2:62:32:38:
         51:02:21:b0:cd:fb:11:b7:8a:1d:ad:3b:c1:88:ae:81:17:e6:
         71:93:96:02:6a:7a:b7:e5:59:8d:c9:0d:e7:f9:dd:bc:6a:e2:
         18:be:82:8f:cb:9a:57:d6:48:a8:37:68:09:80:9a:80:ff:ec:
         37:b3:77:4d:b3:7d:82:02:75:63:a6:71:f4:e6:c3:26:2a:e2:
         29:dd:c4:15:ab:55:51:c7:5a:e4:08:b4:c4:c8:27:af:1e:15:
         30:69:cb:03:92:06:3d:d1:06:e9:05:d0:4f:f5:e1:7f:e2:53:
         a5:d6:14:86:c2:6f:49:ee:f3:e7:39:65:68:36:2f:6e:51:d9:
         2a:5b:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org