Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa
File:                     323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa (raw, json)
Hash identifier:          EGrZSXQW8yb8x1wXQY8yXKDe9zmFJ/fNVNMcK9RZfjU=
Subject key identifier:   27:05:06:79:83:27:99:4B:29:6D:36:CC:EF:8C:30:8A:A7:0B:CA:AC
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       40280C9EA34CD3A81E85BBCFDDFFE3175A239C41
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa
Signing time:             Thu 04 Apr 2024 01:36:17 +0000
ROA not before:           Thu 04 Apr 2024 01:31:17 +0000
ROA not after:            Thu 03 Apr 2025 01:36:17 +0000
asID:                     268424
IP address blocks:        2804:5100:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:28:0c:9e:a3:4c:d3:a8:1e:85:bb:cf:dd:ff:e3:17:5a:23:9c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Apr  4 01:31:17 2024 GMT
            Not After : Apr  3 01:36:17 2025 GMT
        Subject: CN=270506798327994B296D36CCEF8C308AA70BCAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:b4:9c:92:0e:61:8e:93:29:18:39:64:74:
                    0a:42:90:f0:32:35:0a:3b:5b:17:f9:ae:18:a9:cc:
                    e1:d8:d6:0f:cb:65:fb:5d:1b:c7:a1:d6:bb:b8:9d:
                    71:be:66:8a:40:e7:d8:bd:74:ee:bb:70:f0:b8:b9:
                    9b:97:9d:20:9d:e3:ed:a7:fd:b1:92:86:0c:5f:06:
                    9a:fb:0a:8e:bd:87:ca:cf:11:5a:9f:76:ba:c2:5a:
                    85:ca:ba:f5:53:35:48:52:a9:48:6c:00:b8:bf:f8:
                    17:57:e2:68:79:ef:f0:6f:de:8d:54:e1:cc:d2:de:
                    49:14:f9:1b:5e:65:40:44:88:80:f7:d6:c7:c9:ed:
                    73:ce:b9:f0:e4:f8:68:5b:35:93:4a:8d:7f:e6:bf:
                    53:47:9c:61:74:5c:17:01:d9:3b:bd:d0:5e:b7:a9:
                    cd:97:7d:09:4a:7a:03:76:9f:f8:e8:37:b9:e9:0b:
                    75:b7:0e:f2:7b:a5:f6:a4:5f:26:06:6a:08:6c:1e:
                    4d:e4:f7:85:6e:cb:2a:e8:ed:dd:1f:b0:55:b4:ab:
                    cb:7e:07:1a:13:8e:b4:80:70:ac:5b:a9:80:8c:2d:
                    58:fa:a1:c1:80:81:90:22:7f:46:f2:99:06:2e:1a:
                    cf:98:31:f2:bf:ce:b6:4b:17:53:d9:61:47:d5:10:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:06:79:83:27:99:4B:29:6D:36:CC:EF:8C:30:8A:A7:0B:CA:AC
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:65:9d:f5:88:43:01:f1:18:a9:4b:97:01:af:4d:1f:e4:98:
         a0:08:fa:aa:1e:a7:83:c8:fd:3a:e6:e7:7a:1e:12:67:d9:6a:
         be:50:03:8e:4d:c2:74:55:d6:48:32:79:45:6e:e3:cb:3d:12:
         96:53:9d:62:b9:4e:03:fd:06:b9:c9:91:04:6f:1f:52:3a:56:
         65:4a:3d:fd:47:0e:d4:d2:be:0e:4a:f8:a2:d6:6c:75:b3:f2:
         4a:02:ad:60:1f:a1:2d:5e:4d:0b:12:0f:2b:2f:ec:76:e5:f0:
         1c:0a:32:af:ec:ac:fd:04:b0:9e:40:e6:8b:fa:87:20:43:27:
         a2:aa:66:eb:00:de:2e:2b:04:c1:8b:d6:4e:ff:38:1b:6f:35:
         90:ee:05:ab:41:f8:fc:04:59:05:cf:e5:37:82:a5:4e:f3:44:
         39:d7:79:bb:3d:ff:e6:30:66:89:00:75:65:a9:10:9e:15:17:
         70:cc:0f:67:4a:67:51:eb:2a:8f:eb:37:c9:7c:6b:72:f6:06:
         59:1c:1e:41:28:1e:37:14:57:e4:93:b5:f9:70:06:13:69:74:
         f7:a2:38:16:12:22:93:91:be:d0:08:e3:b5:95:ab:a4:30:4d:
         bb:e3:52:7b:76:ae:ef:40:24:37:f5:e9:ed:37:e2:be:40:5d:
         20:b8:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:34 2024 by rpki-client on console-ams.rpki-client.org