Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa
File:                     323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa (raw, json)
Hash identifier:          RnIeg5z6m/EtFI4SdlsAI/3aJVRf7rC0F4VjJfUV3ks=
Subject key identifier:   08:DC:C1:D6:E4:D9:10:EE:D4:FF:DA:A9:92:2C:66:5A:D3:99:9F:AC
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       16A31215553EBDAF7D9B37CBD12B0602D6A7DE5D
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa
Signing time:             Thu 04 Apr 2024 02:31:17 +0000
ROA not before:           Thu 04 Apr 2024 02:26:17 +0000
ROA not after:            Thu 03 Apr 2025 02:31:17 +0000
asID:                     267455
IP address blocks:        2804:41c4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a3:12:15:55:3e:bd:af:7d:9b:37:cb:d1:2b:06:02:d6:a7:de:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: Apr  4 02:26:17 2024 GMT
            Not After : Apr  3 02:31:17 2025 GMT
        Subject: CN=08DCC1D6E4D910EED4FFDAA9922C665AD3999FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:90:8a:98:84:ad:6f:c3:70:7a:67:d0:5a:
                    03:8e:57:85:3a:d1:4e:f7:2e:bb:44:71:36:c6:de:
                    29:0b:ac:03:3f:ad:d8:2b:ff:14:5f:1a:30:31:0b:
                    b6:49:1f:0e:25:72:d4:c5:56:1d:1b:43:bc:2c:58:
                    e8:ae:fe:a6:bc:ff:25:e2:60:ad:63:d3:d4:32:a7:
                    bc:ef:90:2f:fd:ca:a0:31:3a:89:7a:a1:4f:0c:5c:
                    f7:5b:f1:97:9a:3d:aa:16:67:44:b7:89:cb:53:68:
                    64:7c:6f:91:c7:c0:49:b8:39:8e:b2:62:17:8a:23:
                    e4:ee:d0:85:05:46:7b:ff:ad:6f:a1:cd:27:68:29:
                    c7:0c:3f:dd:47:59:4e:7b:d2:14:68:ad:3b:e6:68:
                    74:d8:e9:88:4c:54:a4:10:ff:64:9a:ce:8c:1e:fb:
                    c1:d6:b6:3c:e8:8a:06:86:f8:30:f2:f0:97:a5:f8:
                    bb:ad:02:25:24:9a:3f:ff:82:53:59:88:eb:d9:2c:
                    dc:61:00:ea:b2:da:a5:9c:6a:6a:93:0d:45:ad:b6:
                    b0:ef:bb:0d:ac:ea:13:51:b4:bd:0b:3f:59:f3:15:
                    b4:36:61:dd:b3:4e:70:32:1a:23:55:3d:7d:7a:8a:
                    3f:08:2d:78:9e:53:1f:fd:fe:fd:de:29:e0:78:09:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DC:C1:D6:E4:D9:10:EE:D4:FF:DA:A9:92:2C:66:5A:D3:99:9F:AC
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a9:5c:5c:95:c5:12:84:ca:f0:de:6d:ae:16:91:e5:64:c7:bc:
         cf:31:8a:7e:38:77:1d:65:15:56:ea:d3:a2:04:aa:9f:5c:b4:
         01:e8:11:19:d8:63:e0:a8:3d:87:56:4b:25:a1:c4:ab:aa:09:
         f8:c3:0b:45:a3:49:3a:22:c6:13:b6:08:c3:14:62:68:fb:8a:
         e8:71:c0:d4:98:1d:d4:b2:5b:72:cd:a8:51:ac:d4:7f:c7:a3:
         c9:b7:77:7d:9e:73:a5:52:ad:d9:09:9f:3a:75:46:83:21:c4:
         77:75:16:85:bc:01:8a:7b:a3:06:ac:e9:1e:04:f9:66:5a:50:
         8e:9f:9c:fb:10:05:82:d5:bc:30:a0:3d:64:73:34:e3:88:37:
         68:1b:02:9e:41:20:38:48:6d:43:dd:09:01:c9:33:30:e6:5f:
         f1:b6:4c:5a:a1:27:e7:71:ad:5f:70:99:0f:22:8c:0e:a9:52:
         b4:36:66:a3:88:96:c4:74:d8:95:36:a5:6b:5c:af:53:a4:e6:
         18:e7:a9:85:70:bd:5e:46:ed:ba:aa:96:88:fc:fb:b4:2d:22:
         8f:89:9f:fc:bd:7d:02:af:c4:6a:77:89:b0:80:94:da:a4:a3:
         cb:cf:c8:e9:ae:dc:75:fe:f9:3b:03:d3:f4:48:46:26:ee:33:
         04:01:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:50 2024 by rpki-client on console-fra.rpki-client.org