Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d313238203d3e20323733343331.roa
File:                     323830343a386538343a3a2f33322d313238203d3e20323733343331.roa (raw, json)
Hash identifier:          AvVcTCA+lyIraklGxLPxL94UnxVE9Ct0Fzl5yeIwNOQ=
Subject key identifier:   0E:82:F7:16:ED:87:6A:EE:C6:9A:59:B4:C2:46:93:94:09:35:70:61
Certificate issuer:       /CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6
Certificate serial:       7DF231C9BEFB8EADDD7F23EB5F81C105480AC57C
Authority key identifier: 7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d313238203d3e20323733343331.roa
Signing time:             Mon 11 Nov 2024 20:32:57 +0000
ROA not before:           Mon 11 Nov 2024 20:27:57 +0000
ROA not after:            Mon 10 Nov 2025 20:32:57 +0000
asID:                     273431
IP address blocks:        2804:8e84::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl
                          rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f2:31:c9:be:fb:8e:ad:dd:7f:23:eb:5f:81:c1:05:48:0a:c5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6
        Validity
            Not Before: Nov 11 20:27:57 2024 GMT
            Not After : Nov 10 20:32:57 2025 GMT
        Subject: CN=0E82F716ED876AEEC69A59B4C246939409357061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:90:33:48:45:80:11:92:7f:90:11:74:51:
                    b0:b5:bb:4f:4d:a6:0e:28:47:88:0e:bf:a3:63:9d:
                    ef:f2:d5:44:95:de:27:38:1e:d2:19:11:c8:ee:5d:
                    77:4f:f9:7f:1c:19:46:9f:41:3a:c5:36:34:35:7d:
                    8a:f7:f7:ee:e7:80:29:d1:dd:45:ae:29:15:ec:5d:
                    8f:e9:7f:86:85:15:19:6b:cb:58:5e:57:ab:38:7b:
                    7b:61:b2:e9:78:24:25:fb:19:f4:7a:14:18:6d:e3:
                    00:d6:b4:6c:2c:68:dd:30:9f:91:08:ee:04:f8:2e:
                    85:75:a4:2d:7c:b9:6b:b6:5f:a1:cf:89:e0:5e:e4:
                    dd:b4:1e:de:13:41:02:6d:f9:63:fe:f1:9d:f0:1f:
                    17:64:0f:75:b3:9c:d1:89:50:cc:c8:bb:af:3f:c4:
                    c2:4c:e5:3c:2b:47:c8:0e:3c:9c:94:26:36:e9:6c:
                    b2:9d:b9:4e:14:74:a8:b6:af:01:c7:60:1c:4b:92:
                    ae:6d:86:f5:67:31:bf:12:8c:49:df:20:33:2f:9a:
                    7a:67:5f:6d:ba:19:f2:a1:2d:a2:c4:19:e1:b0:71:
                    03:35:cf:29:e8:eb:ed:c6:dd:4a:da:73:d7:76:4c:
                    cf:0e:fc:91:eb:65:b4:2f:ce:7a:4a:48:dd:72:d1:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:82:F7:16:ED:87:6A:EE:C6:9A:59:B4:C2:46:93:94:09:35:70:61
            X509v3 Authority Key Identifier:
                keyid:7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d313238203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e84::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:1f:c2:92:6c:cf:cb:ce:c6:c2:60:4b:fa:17:a2:91:d8:e5:
         c6:45:3e:c3:e1:c2:1e:72:b3:d3:20:71:3a:4b:be:bd:79:93:
         26:77:5c:02:4a:5e:c1:9b:2e:b4:f8:25:2e:54:a7:01:0b:ab:
         84:ad:87:85:dd:46:e6:d6:84:b2:20:41:ae:ed:c1:41:20:c4:
         74:e3:8e:2e:58:e1:7c:9f:05:ab:0c:84:ff:4a:e7:df:08:6d:
         31:a8:e5:6e:ef:88:5a:5d:80:c9:80:34:6a:c0:d5:32:d5:92:
         a1:c4:30:42:cb:66:87:08:b8:b8:39:26:c3:88:ca:95:f7:2e:
         36:62:15:82:13:40:23:27:25:0e:72:00:02:92:23:a8:77:b0:
         c3:9a:1a:4f:e4:99:0c:1a:ff:78:05:1a:1a:e8:d0:45:a0:82:
         6c:81:e2:cb:36:99:03:4e:73:d1:6e:48:30:4b:b3:c9:ef:c6:
         3d:86:37:0d:53:18:e2:b3:c2:37:ca:f4:1d:81:d5:9a:a4:34:
         be:94:fe:e5:b3:e7:25:13:35:e9:1f:8d:a1:fe:35:ba:6f:82:
         0a:71:87:bb:64:91:35:4b:f0:7f:49:ad:ca:ed:bd:71:1a:11:
         3e:72:99:ba:53:98:c4:3f:26:39:98:eb:06:f8:be:c2:d4:62:
         de:90:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:31 2024 by rpki-client on console-fra.rpki-client.org