Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323732323138.roa
File:                     323830343a383363343a316538303a3a2f34312d3431203d3e20323732323138.roa (raw, json)
Hash identifier:          lx5Td45qzTc55SCXXZB528YQS9K8UyIZ9FJn4OXmGCs=
Subject key identifier:   1B:52:BB:CF:8B:49:29:59:13:CE:05:7E:75:21:EA:CF:18:80:FC:7C
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       2C6160BCC9A05C57199C1899BF1290250133B4EE
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:30:56 +0000
ROA not before:           Mon 23 Sep 2024 19:25:56 +0000
ROA not after:            Mon 22 Sep 2025 19:30:56 +0000
asID:                     272218
IP address blocks:        2804:83c4:1e80::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:61:60:bc:c9:a0:5c:57:19:9c:18:99:bf:12:90:25:01:33:b4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:25:56 2024 GMT
            Not After : Sep 22 19:30:56 2025 GMT
        Subject: CN=1B52BBCF8B49295913CE057E7521EACF1880FC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:f0:1a:f2:c2:f0:f0:55:bd:08:60:0f:1c:
                    94:db:90:fd:c2:b7:67:71:50:a2:aa:00:df:19:86:
                    6d:b5:87:c9:54:31:b1:9b:18:45:8f:69:40:bd:8c:
                    24:cb:38:b8:d3:01:68:9b:b5:8a:77:4e:95:fe:68:
                    96:99:53:a3:ca:1f:b3:62:b1:4c:49:8f:85:e1:60:
                    5f:af:e1:de:32:d4:c1:1e:fe:a6:43:c0:4f:da:ee:
                    0c:61:cc:41:e5:1a:46:db:5f:a7:9a:43:22:fd:22:
                    01:df:8e:e4:0d:c0:de:08:d6:f6:42:a3:3b:5f:5a:
                    40:17:f3:87:97:51:96:40:2d:b0:2f:74:af:fd:ff:
                    56:cd:6b:45:34:49:25:d2:30:ad:56:4b:25:ea:ba:
                    1d:39:55:1b:bb:4c:47:39:87:a0:03:3a:e2:dd:41:
                    f7:1d:9a:d1:49:cc:8b:5e:1e:39:4b:a4:be:1a:01:
                    41:ef:b9:19:c1:0e:b8:06:e1:43:e8:a0:81:02:f3:
                    15:ad:88:c3:b4:15:e7:31:fd:45:9c:c0:db:bd:f7:
                    62:fe:f2:5a:55:59:40:91:f6:b8:b3:d2:f5:b7:8e:
                    cb:aa:a6:72:cb:e8:7d:9f:f3:bd:ec:0b:de:b0:42:
                    f0:47:36:ce:8a:9c:e5:e8:ea:b8:25:7f:6b:c1:62:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:BB:CF:8B:49:29:59:13:CE:05:7E:75:21:EA:CF:18:80:FC:7C
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:1e80::/41

    Signature Algorithm: sha256WithRSAEncryption
         c4:83:14:1b:e9:a0:14:83:75:56:37:7a:57:e8:ef:60:a9:24:
         43:6f:9c:01:da:1a:8c:05:14:5d:86:be:52:02:3f:2c:56:cf:
         e1:85:b7:6f:34:3d:0e:84:cd:20:2e:44:f5:b0:bb:05:9e:0c:
         b9:e0:d7:87:a4:9d:89:72:a5:3f:1e:02:31:ce:b7:c5:f6:da:
         d7:ed:ef:ba:14:ff:fd:5f:ee:15:f2:ee:ad:cb:a6:01:52:e4:
         63:1f:84:50:f9:0c:32:cc:0f:78:50:c3:6a:a3:c9:54:d6:34:
         3a:0a:95:6e:6e:7c:ba:8b:82:1f:4d:f0:31:ae:95:a1:fa:4d:
         67:f1:25:ab:0e:33:f9:5e:36:c3:24:3a:6d:27:b3:95:d0:7f:
         e5:6e:e2:c8:1c:b0:ed:b2:b8:0c:2c:e0:b1:31:65:c9:b1:ef:
         c1:40:df:47:89:92:ce:16:8a:d7:32:b7:18:57:32:84:dd:3e:
         99:e6:cf:e7:77:0b:4d:d9:33:58:15:36:79:b8:59:53:43:40:
         78:24:44:ac:39:05:16:2c:ef:da:1d:7a:25:1c:b7:0b:86:d4:
         2a:f1:b3:71:9c:b6:1a:33:31:61:1a:f5:cc:e1:c8:9a:76:a0:
         1a:fe:08:9d:ed:1e:fb:d6:c6:ab:29:a0:69:84:59:e6:05:c2:
         e4:2d:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:16 2024 by rpki-client on console-fra.rpki-client.org