Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031353a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383031353a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          efUXakIjtKnclIMvoLNab/V/W3LNrlTwMJwaLZ3dtxA=
Subject key identifier:   43:23:7E:8F:F6:48:9E:70:99:7B:3C:3E:23:51:18:2B:1B:F5:10:DC
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       79B27346122C4B8A55E58185D18FB38634FAD3BF
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031353a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:31:34 +0000
ROA not before:           Mon 23 Sep 2024 19:26:34 +0000
ROA not after:            Mon 22 Sep 2025 19:31:34 +0000
asID:                     272218
IP address blocks:        2804:83c4:8015::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b2:73:46:12:2c:4b:8a:55:e5:81:85:d1:8f:b3:86:34:fa:d3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:26:34 2024 GMT
            Not After : Sep 22 19:31:34 2025 GMT
        Subject: CN=43237E8FF6489E70997B3C3E2351182B1BF510DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:52:2d:6a:8a:4f:d2:22:21:c7:bb:81:0e:
                    a5:6c:8b:b8:22:b0:47:00:90:82:bf:f3:db:f3:6e:
                    b7:23:eb:88:d6:1a:7e:99:86:2c:6d:91:bc:08:7c:
                    2e:78:70:a5:7d:3d:ce:53:48:3b:bb:e1:c1:a8:7a:
                    7b:a1:47:1f:41:cd:7d:d0:e5:1d:94:a3:9a:17:d2:
                    a3:76:ee:65:0b:07:35:5a:5f:1b:04:f2:ce:e8:f0:
                    72:30:01:2c:31:c8:4e:91:1b:67:ae:16:77:12:53:
                    0b:f9:b4:6e:ad:63:c9:93:bd:12:3b:25:62:46:b7:
                    f9:a0:7a:73:c5:f2:84:d5:08:f2:1e:25:8e:86:56:
                    fe:f3:63:cb:b0:bb:0b:4a:21:e3:21:35:dc:09:5c:
                    4c:92:7e:43:3c:93:83:d9:5a:29:ad:9b:b6:10:b5:
                    3c:e1:7a:6d:9f:1b:d1:97:ba:36:91:81:0d:20:9c:
                    ba:f3:00:5b:a7:6f:80:33:32:b0:85:85:d1:30:7b:
                    3f:95:dc:97:94:35:9a:16:26:62:d4:7d:46:8c:e1:
                    3e:27:46:47:75:2f:23:ea:be:3b:0b:32:8e:6d:98:
                    14:5b:25:ef:ab:ab:58:c3:25:da:1e:d0:7c:97:9d:
                    c4:fb:e6:43:37:16:34:5e:38:a7:87:68:fe:d5:ea:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:23:7E:8F:F6:48:9E:70:99:7B:3C:3E:23:51:18:2B:1B:F5:10:DC
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031353a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8015::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:01:60:ec:80:2a:93:4c:79:1c:ae:d4:ab:33:ba:f1:5f:68:
         51:c1:24:3e:6f:cd:fa:fb:23:e0:6f:2b:fc:59:ea:e2:e3:00:
         4d:08:e9:13:a5:63:24:25:15:40:c6:a1:85:af:17:b6:76:7f:
         b3:43:bf:05:ed:f0:b4:5c:d1:70:f9:ba:f9:81:3c:11:53:ee:
         92:2d:7d:73:78:92:f0:eb:04:45:79:cc:06:35:0e:d6:35:cb:
         bf:82:6f:f6:f7:88:37:83:3b:52:f4:97:aa:fa:5c:06:ab:ff:
         a7:49:2e:42:f1:16:8b:b1:81:42:74:13:bb:c3:41:51:f3:6c:
         d7:a5:29:66:c7:eb:f5:7d:34:99:50:e0:6e:c5:13:cf:9c:b9:
         d0:c8:4f:3a:67:c1:4b:19:8d:a8:bf:6b:d5:60:e0:45:d6:a4:
         04:c5:f7:53:7f:95:73:f8:ec:68:bf:6b:21:7f:75:97:33:bb:
         fe:fe:8a:fa:51:39:42:d2:af:64:33:4e:cf:15:20:bc:dc:17:
         3c:b3:eb:be:69:5b:65:c1:fa:d9:e9:ea:50:21:b8:3d:a6:9c:
         ab:6b:52:00:a6:07:d8:05:64:ba:f6:2d:5e:f7:91:35:75:4b:
         fe:f6:76:5f:71:17:99:c1:ad:18:f6:6a:a6:4d:97:1a:08:56:
         e3:57:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:16 2024 by rpki-client on console-fra.rpki-client.org