Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031313a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383031313a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          nMByKq6OcgiruW0W03IIAAyhvGMpUGeclGzUCh/i7s4=
Subject key identifier:   86:DA:36:CE:38:A7:DB:A2:BE:4E:5B:22:72:4D:A4:33:0C:5B:58:48
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       121A1B2B6631A22E6D9D5DC5D9B98B05339B0C1D
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031313a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:31:29 +0000
ROA not before:           Mon 23 Sep 2024 19:26:29 +0000
ROA not after:            Mon 22 Sep 2025 19:31:29 +0000
asID:                     272218
IP address blocks:        2804:83c4:8011::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:1b:2b:66:31:a2:2e:6d:9d:5d:c5:d9:b9:8b:05:33:9b:0c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:26:29 2024 GMT
            Not After : Sep 22 19:31:29 2025 GMT
        Subject: CN=86DA36CE38A7DBA2BE4E5B22724DA4330C5B5848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:6c:87:d4:31:9c:b7:2e:1a:8b:4d:0c:4f:
                    45:38:45:e3:cb:73:7c:4d:5b:4a:4f:68:c7:6f:82:
                    15:3c:45:91:37:d9:ed:37:8d:90:8a:af:f4:49:17:
                    b5:c8:90:0a:22:09:2f:fc:0c:e5:bb:39:f9:71:fa:
                    c6:8c:4f:e9:da:2a:e1:9d:01:a5:4e:2f:08:b4:cd:
                    92:f0:87:fb:17:34:1b:f0:e5:ac:8e:58:1d:64:be:
                    6e:9d:03:9c:2d:d6:4b:ba:b2:5f:90:e3:fe:03:9a:
                    15:76:e9:16:cb:5d:5b:6b:31:7d:a8:78:d8:71:2f:
                    a5:45:14:23:e4:71:0e:3f:9e:c8:c9:9b:f9:ab:e9:
                    ff:79:fb:f7:ab:c8:b8:1f:82:a1:5a:c4:94:17:7f:
                    7d:b9:b5:9d:cb:7f:59:26:56:cb:52:a3:ed:10:ba:
                    d0:e8:86:59:1a:67:de:a3:7e:83:e8:49:e5:ec:88:
                    dd:a3:bb:68:0c:83:47:19:cd:ab:f1:68:1e:30:95:
                    a0:0c:76:52:f1:c6:88:fa:fb:10:00:2c:7e:75:06:
                    2d:7d:3f:88:7c:4e:ca:72:da:fd:90:9f:c6:49:de:
                    98:fc:b5:cc:6b:8f:ba:29:2e:46:35:fe:f4:63:16:
                    dc:48:65:bd:f0:e2:be:40:ae:8c:4c:c6:0a:df:18:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DA:36:CE:38:A7:DB:A2:BE:4E:5B:22:72:4D:A4:33:0C:5B:58:48
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031313a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8011::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:a9:8b:87:d6:8c:da:46:1e:c3:2d:fc:68:11:fc:c4:e1:9c:
         9e:8f:bf:bc:1c:fd:18:3f:7f:8c:0b:54:ba:c0:ca:35:d0:b5:
         46:89:94:ac:d5:72:30:11:b5:08:ce:44:c3:49:0b:9d:3a:a0:
         46:3c:02:82:1d:7b:7f:4e:63:f6:f3:56:39:b5:67:79:04:10:
         33:13:5c:fc:bc:ee:d3:fe:71:4d:f4:16:3e:da:31:3d:4e:a7:
         ce:93:8a:bd:8a:43:3d:1a:f6:0b:ab:e9:f9:8e:82:27:68:f3:
         6e:7e:45:02:64:88:6d:b4:19:49:35:ff:35:85:b7:7b:1e:78:
         3d:cf:c5:8b:5a:aa:70:85:69:00:8a:96:e9:73:2c:de:e7:a2:
         67:31:48:41:02:63:92:f7:c1:0e:80:89:4b:9f:58:82:35:3f:
         87:0f:b5:a0:01:3c:05:61:d0:cc:f8:e8:5b:8c:1e:0f:d7:ae:
         8c:2a:a8:f7:a3:05:e7:6f:d6:28:9e:5a:6d:91:63:b4:36:38:
         8d:09:72:38:02:3c:95:9c:84:cf:fe:34:7d:e3:53:84:0b:95:
         d5:e4:60:8a:b7:68:01:73:4c:51:fa:12:f3:94:37:33:52:4c:
         43:1a:36:7a:3e:2b:1f:03:b8:3e:72:7d:61:6c:66:3d:ee:f1:
         6f:dd:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:16 2024 by rpki-client on console-fra.rpki-client.org