Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031663a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383031663a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          ExW64heDa9j9WieG7QpgzH4PjfokNHh95hmMIo9tsc4=
Subject key identifier:   AD:CA:21:E7:29:D5:BA:39:79:56:B7:71:B3:59:EC:A1:4E:2A:D4:21
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       0F2F4D4E3BF7E3C8E9443704BF39077A37357F84
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031663a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:31:52 +0000
ROA not before:           Mon 23 Sep 2024 19:26:52 +0000
ROA not after:            Mon 22 Sep 2025 19:31:52 +0000
asID:                     272218
IP address blocks:        2804:83c4:801f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2f:4d:4e:3b:f7:e3:c8:e9:44:37:04:bf:39:07:7a:37:35:7f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:26:52 2024 GMT
            Not After : Sep 22 19:31:52 2025 GMT
        Subject: CN=ADCA21E729D5BA397956B771B359ECA14E2AD421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:ec:a2:9d:e0:dc:b5:44:2a:b1:25:6e:32:
                    62:f1:ab:5d:61:a4:0c:ee:d6:4b:2e:0b:48:64:3d:
                    18:49:77:20:6f:59:c3:be:5d:22:0d:35:5f:80:c6:
                    ac:b6:ee:c4:fb:d3:d1:05:be:1a:84:e7:c5:f2:9f:
                    85:07:c9:09:d0:7e:1e:74:1b:3f:49:d3:70:e1:ee:
                    0d:f2:9a:23:c5:19:97:e2:b3:19:34:a0:e4:db:56:
                    f0:98:bc:36:67:c6:a4:52:4e:72:ca:ea:16:09:61:
                    e9:14:ec:fc:25:9d:4c:5a:27:a0:37:8e:d9:69:dd:
                    98:21:79:31:51:72:bd:4a:3b:9a:a4:b6:88:b2:76:
                    f0:3d:0a:b6:4f:6b:e4:d4:7f:1d:83:97:ae:55:4b:
                    be:5e:ae:33:80:af:43:38:2d:f4:85:ed:ed:2f:82:
                    67:c7:0b:af:7b:c5:a6:d1:f1:0e:9c:25:34:c7:bb:
                    1a:ca:bf:99:3c:d6:a2:9a:92:9a:6a:5c:c2:a6:19:
                    15:98:07:84:00:28:c8:43:ea:56:d3:03:74:84:fe:
                    cc:3f:18:74:fe:12:bc:4c:31:28:94:e4:c6:56:14:
                    fc:c9:6f:01:7b:75:7a:c1:14:54:54:ae:6e:55:6e:
                    1c:01:13:32:8d:94:da:24:04:bd:09:7f:26:f1:01:
                    b1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CA:21:E7:29:D5:BA:39:79:56:B7:71:B3:59:EC:A1:4E:2A:D4:21
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031663a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:801f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:bb:0a:6f:91:cc:ee:c7:e0:d6:9c:e0:78:1a:39:47:04:
         28:05:f7:ca:27:e0:32:70:4e:0a:f3:4c:bf:0e:ad:d3:67:ff:
         df:77:08:02:10:ff:c1:09:64:85:c2:69:e9:43:d5:ab:37:57:
         04:fa:2f:04:1c:1f:2d:d0:85:33:80:80:b6:3a:23:05:64:36:
         76:35:0d:2f:91:b6:0d:cc:d8:35:75:dd:7a:24:a9:0f:18:fd:
         e0:91:34:e1:c8:32:80:f3:a0:31:31:b5:e8:3c:b4:b0:a7:26:
         64:0d:5e:dd:ea:68:37:fd:13:73:a5:a8:ce:e7:4e:7b:63:10:
         65:85:cc:4c:45:09:90:2a:10:f1:19:67:fd:f2:97:f6:83:f7:
         46:27:11:69:bf:02:58:e0:5d:39:7c:67:c3:0f:2a:1b:62:ba:
         4a:2b:29:9a:c9:f1:5d:04:9b:fe:43:ee:38:e3:af:a5:4f:b1:
         46:a2:b9:06:79:c0:62:e4:33:5d:cd:23:5d:1a:e0:ac:94:2c:
         51:f3:70:92:57:93:d9:9c:55:18:5d:62:56:c0:99:dd:b2:7a:
         44:ca:89:38:77:1f:0d:46:0c:ac:75:ba:08:e1:ff:91:7a:49:
         f2:b2:59:1c:a9:f0:3e:09:75:c2:28:e5:cf:a9:32:44:26:6e:
         4c:15:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:16 2024 by rpki-client on console-fra.rpki-client.org