Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
File:                     323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (raw, json)
Hash identifier:          Txlf7JVshurNu76S2NytybCa3inr9JXB+UwSmTEe/Zg=
Subject key identifier:   02:01:9B:1A:0F:F5:E3:11:57:3D:81:99:65:DD:5F:37:14:16:04:89
Certificate issuer:       /CN=C3DFDF7A13BC37114857665CD0A069BD96BDC348
Certificate serial:       7D0DFEE88AFAEBAD73ADFE0E67A3E2C6A24F914C
Authority key identifier: C3:DF:DF:7A:13:BC:37:11:48:57:66:5C:D0:A0:69:BD:96:BD:C3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3DFDF7A13BC37114857665CD0A069BD96BDC348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
Signing time:             Wed 06 Nov 2024 20:17:11 +0000
ROA not before:           Wed 06 Nov 2024 20:12:11 +0000
ROA not after:            Wed 05 Nov 2025 20:17:11 +0000
asID:                     262769
IP address blocks:        2804:224c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/C3DFDF7A13BC37114857665CD0A069BD96BDC348.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/C3DFDF7A13BC37114857665CD0A069BD96BDC348.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3DFDF7A13BC37114857665CD0A069BD96BDC348.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0d:fe:e8:8a:fa:eb:ad:73:ad:fe:0e:67:a3:e2:c6:a2:4f:91:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3DFDF7A13BC37114857665CD0A069BD96BDC348
        Validity
            Not Before: Nov  6 20:12:11 2024 GMT
            Not After : Nov  5 20:17:11 2025 GMT
        Subject: CN=02019B1A0FF5E311573D819965DD5F3714160489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:4f:3b:b0:51:0a:f3:9d:1d:d7:df:c4:60:
                    90:70:73:f8:68:ed:4b:eb:57:e8:86:87:cd:fb:b4:
                    ab:b6:7c:3b:1a:43:94:11:24:6f:a4:6c:6b:c7:35:
                    54:0a:a0:90:92:30:b3:00:ba:d2:70:4b:ab:a9:99:
                    2e:b3:62:72:76:c0:a1:93:57:e5:3c:39:3d:cc:fb:
                    0a:f0:25:3d:20:f8:ed:18:83:82:52:b6:c0:77:e0:
                    56:f2:b6:56:3f:d8:14:f5:4c:2a:26:26:67:bb:ae:
                    63:76:94:21:e8:b0:b2:c1:c5:f0:b6:82:3c:d9:31:
                    59:c6:9c:5e:25:0b:4e:1f:6a:8d:0f:59:ac:79:ae:
                    cc:e9:83:ba:18:8a:6d:f8:10:73:23:70:37:97:3f:
                    6a:09:f6:60:5b:4c:ee:9b:a1:0f:65:50:a7:a8:b7:
                    9c:f7:96:a8:4c:33:7b:c1:c5:45:90:d3:95:26:12:
                    fd:9d:79:d2:3b:55:eb:93:c6:a6:4f:92:a6:52:2e:
                    d2:03:b6:25:c8:88:4e:ca:7a:13:5b:70:4c:ff:45:
                    03:cc:43:90:5e:84:ff:bd:45:fa:97:f1:ae:79:b9:
                    f4:31:0e:13:0c:f5:d7:ef:e2:fd:c9:64:6e:b3:bd:
                    45:50:cb:53:c9:12:4c:14:c0:59:19:45:34:ba:3c:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:01:9B:1A:0F:F5:E3:11:57:3D:81:99:65:DD:5F:37:14:16:04:89
            X509v3 Authority Key Identifier:
                keyid:C3:DF:DF:7A:13:BC:37:11:48:57:66:5C:D0:A0:69:BD:96:BD:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/C3DFDF7A13BC37114857665CD0A069BD96BDC348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3DFDF7A13BC37114857665CD0A069BD96BDC348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:224c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:ef:9d:a5:d8:73:b1:4f:9b:5e:c0:bb:ef:69:88:7f:d4:51:
         75:ee:4f:bb:75:3c:99:86:61:40:22:d7:88:59:9d:06:ac:fa:
         1e:51:8e:e2:3a:09:86:40:2e:08:60:98:36:6b:df:5a:4b:ee:
         db:61:84:40:c8:65:65:54:d7:c7:d7:35:5e:c5:07:a2:73:28:
         ba:0a:74:1d:5c:93:e3:a1:43:89:8b:b4:d9:e9:cf:dc:d4:0c:
         a0:80:bf:66:87:65:60:6b:3c:d7:10:63:5e:18:7b:70:68:75:
         7b:0e:01:56:f3:1f:a2:9b:43:fe:e9:eb:f1:69:8a:35:09:88:
         d9:80:9a:1f:b5:34:99:b0:c8:c8:77:18:dc:1e:7f:6d:85:28:
         24:8d:89:5a:59:02:96:c0:ed:13:71:47:50:3b:ef:ed:3e:e2:
         09:a2:05:1b:fd:ab:93:84:9d:42:db:96:7e:17:b0:62:98:d3:
         5c:8c:59:c3:04:99:6c:e1:97:c4:09:54:c4:6f:63:bb:1d:92:
         db:20:6d:78:fb:d1:39:d6:9c:05:ad:7c:7a:e6:77:73:d3:b8:
         8b:09:d5:6f:25:57:ec:3b:e8:a0:ad:12:30:21:5f:bf:fd:23:
         b5:99:b1:3e:c0:22:e6:34:ad:1f:80:c1:69:bb:72:04:8b:08:
         52:db:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:50 2024 by rpki-client on console-fra.rpki-client.org