Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3438203d3e20323634353636.roa
File:                     323830343a323161633a3a2f33322d3438203d3e20323634353636.roa (raw, json)
Hash identifier:          0Wy9AMwh49cuYbR5R+iwnZL/5SBceR62wI1dHgjGk7U=
Subject key identifier:   42:A8:25:7A:CA:50:AC:26:2D:CE:66:26:20:61:19:4C:86:DB:95:F3
Certificate issuer:       /CN=E1DD14E8495BF2D38A907AB140A4657BB4715587
Certificate serial:       35A467B9677CF2CFDEDAA76F12B734F4E28EE50A
Authority key identifier: E1:DD:14:E8:49:5B:F2:D3:8A:90:7A:B1:40:A4:65:7B:B4:71:55:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3438203d3e20323634353636.roa
Signing time:             Wed 23 Oct 2024 17:56:09 +0000
ROA not before:           Wed 23 Oct 2024 17:51:09 +0000
ROA not after:            Wed 22 Oct 2025 17:56:09 +0000
asID:                     264566
IP address blocks:        2804:21ac::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.crl
                          rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a4:67:b9:67:7c:f2:cf:de:da:a7:6f:12:b7:34:f4:e2:8e:e5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DD14E8495BF2D38A907AB140A4657BB4715587
        Validity
            Not Before: Oct 23 17:51:09 2024 GMT
            Not After : Oct 22 17:56:09 2025 GMT
        Subject: CN=42A8257ACA50AC262DCE66262061194C86DB95F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:7c:83:72:6c:db:a8:8a:86:20:d8:d6:90:
                    3b:28:d9:15:11:27:1d:03:c3:11:c6:fb:e1:23:2f:
                    df:19:fe:7c:97:b2:15:10:38:00:92:e8:3b:17:c0:
                    20:58:96:54:45:73:d6:c0:57:39:0f:d2:e2:90:a9:
                    ed:37:9c:3a:1a:72:4d:d8:0e:10:c2:a5:1f:e3:fe:
                    71:9c:69:26:a9:1b:c7:f1:6b:b2:97:f8:50:a7:14:
                    32:d1:a2:94:26:c0:a7:5f:9c:f5:1e:b6:1c:1f:6b:
                    e7:15:82:89:fa:ce:00:4c:a1:d4:92:9e:a2:9e:61:
                    c7:ae:4e:01:d0:14:ef:77:60:92:eb:ea:e2:21:b5:
                    62:91:f5:37:67:35:29:34:90:4e:ee:33:d6:dc:c7:
                    f0:bd:55:14:d6:2f:6c:5b:3a:51:5d:34:03:5a:67:
                    36:18:51:06:3d:5e:e2:33:7a:03:32:ab:2a:99:81:
                    19:bc:22:12:cd:6e:71:c4:1a:93:de:bf:e8:4b:08:
                    c3:50:70:74:1b:11:e5:9d:14:ad:a2:ae:21:ca:01:
                    89:9c:a0:3c:80:1a:e7:bd:df:5b:d1:86:e9:1b:1b:
                    eb:28:d1:de:8e:3d:fd:ee:e0:ca:99:68:ff:8e:ea:
                    5b:25:1d:7a:f6:70:95:6b:7d:21:85:65:ea:c0:42:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A8:25:7A:CA:50:AC:26:2D:CE:66:26:20:61:19:4C:86:DB:95:F3
            X509v3 Authority Key Identifier:
                keyid:E1:DD:14:E8:49:5B:F2:D3:8A:90:7A:B1:40:A4:65:7B:B4:71:55:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/323830343a323161633a3a2f33322d3438203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:48:b9:a0:4e:b1:44:cf:b1:9c:8d:0c:81:38:7e:f3:ea:
         cd:d2:d7:32:07:26:d5:87:81:e8:c8:51:6e:e2:bf:8e:2c:5a:
         aa:dc:7d:03:48:d1:29:e9:2f:18:ae:e7:e7:cb:24:ee:3e:4d:
         88:22:ac:0f:1d:27:56:49:bc:0b:f1:26:38:c7:79:36:de:23:
         f2:9f:d7:a9:d9:9c:3e:42:80:d6:34:92:12:4e:ba:53:8e:c6:
         00:b6:27:e5:14:d2:2b:2d:6e:a3:9a:78:c6:db:2e:39:40:c5:
         68:1c:9d:70:da:d4:99:d3:bc:80:dd:fb:9b:6b:9a:a7:2c:4a:
         b9:fd:cd:18:2e:30:e0:e1:0e:e9:81:e5:07:c6:08:7b:cf:57:
         d9:aa:8e:85:49:28:db:78:32:d3:88:c8:5d:e4:f1:94:72:8b:
         01:aa:59:a6:09:46:a9:5e:da:d3:b9:39:a9:18:49:09:10:3c:
         98:1d:68:fb:77:12:df:db:ec:1a:94:33:f9:c2:2a:e9:03:c6:
         82:45:c3:37:c5:8f:4e:c8:f5:45:59:eb:e1:c1:d6:8b:47:8b:
         5c:0d:fb:d5:1d:28:09:e6:ac:d2:07:98:95:e1:04:ce:57:0f:
         6d:01:bd:69:dc:01:c1:41:3a:87:bc:be:6d:a4:d5:2b:bf:78:
         fc:ce:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:23 2024 by rpki-client on console-fra.rpki-client.org