Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/323830343a316139343a3a2f33322d3438203d3e203631383639.roa
File:                     323830343a316139343a3a2f33322d3438203d3e203631383639.roa (raw, json)
Hash identifier:          Cv8u809sp/4gq1nHXMXbFb2RHwBG8CJOBh1FsRwkj3A=
Subject key identifier:   30:F5:A1:9E:07:AA:FC:17:56:EF:1E:A5:0C:EF:C0:BF:DF:80:0B:02
Certificate issuer:       /CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Certificate serial:       586418227123C83892EA077131E6DCE04955F482
Authority key identifier: E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/323830343a316139343a3a2f33322d3438203d3e203631383639.roa
Signing time:             Thu 04 Apr 2024 18:43:29 +0000
ROA not before:           Thu 04 Apr 2024 18:38:29 +0000
ROA not after:            Thu 03 Apr 2025 18:43:29 +0000
asID:                     61869
IP address blocks:        2804:1a94::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl
                          rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:64:18:22:71:23:c8:38:92:ea:07:71:31:e6:dc:e0:49:55:f4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
        Validity
            Not Before: Apr  4 18:38:29 2024 GMT
            Not After : Apr  3 18:43:29 2025 GMT
        Subject: CN=30F5A19E07AAFC1756EF1EA50CEFC0BFDF800B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:b1:9e:02:30:37:2b:c8:98:72:78:5e:97:
                    27:68:cd:fe:6b:21:32:22:ad:1b:2f:ab:ce:b0:4b:
                    64:3b:e8:3e:c2:83:ea:9e:f9:0e:39:47:e8:6f:55:
                    b8:19:f8:b9:b7:3a:38:17:3f:cb:5a:c5:60:1d:fa:
                    d5:36:0b:08:c2:44:30:6e:ee:39:7c:23:6e:df:fa:
                    8a:eb:e7:8c:67:e1:84:85:29:ad:5e:de:20:91:a9:
                    a2:e4:eb:b1:91:c4:64:20:e3:8f:de:d2:ca:ee:e6:
                    a9:71:42:24:c4:03:eb:a7:e9:a4:b3:87:c4:9d:3d:
                    b7:f9:5c:f2:ce:9b:59:6f:d0:23:b0:68:6e:19:06:
                    c7:db:da:a5:e4:21:59:12:c9:a0:a5:e9:8c:52:57:
                    8c:be:44:b0:81:42:bd:81:51:7c:29:2f:5d:2b:93:
                    a1:47:8c:54:8c:07:8d:f6:cf:e6:93:ab:ea:35:c8:
                    5b:74:16:72:35:32:8e:61:04:98:5c:97:32:b9:fa:
                    40:7f:0d:78:58:15:62:87:24:3c:a1:6b:7a:b9:8c:
                    50:e1:29:ee:fd:27:95:51:dd:a0:50:7c:e9:57:59:
                    2b:65:fb:18:95:65:12:4d:0d:2c:db:66:90:ba:7f:
                    f2:db:53:0c:0b:89:7c:47:27:bf:74:07:c5:b7:af:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F5:A1:9E:07:AA:FC:17:56:EF:1E:A5:0C:EF:C0:BF:DF:80:0B:02
            X509v3 Authority Key Identifier:
                keyid:E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/323830343a316139343a3a2f33322d3438203d3e203631383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a94::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:88:35:e1:08:1f:a3:25:60:f1:61:a9:89:95:12:d8:1f:
         1e:5d:10:73:62:f0:52:71:ab:c5:0b:8f:db:3c:cc:cd:f4:ee:
         70:fd:f7:60:5f:0e:f6:2e:ca:42:a8:65:0f:8c:b5:d8:5d:48:
         c1:b1:1d:bc:bd:61:c7:c7:37:58:2a:bd:97:3e:82:cb:14:e4:
         a2:fe:d0:a0:91:81:5f:d2:f5:9c:a6:9e:b9:40:81:a6:4f:37:
         53:7f:5e:da:ad:1b:22:77:09:4b:f7:0c:06:12:66:fa:e7:22:
         61:a0:87:62:6e:83:8d:91:ce:35:a0:47:92:e9:41:11:f9:2a:
         8f:8b:d5:8a:47:5c:b7:7e:3b:59:d4:84:40:9f:31:ca:3c:cc:
         9a:fe:a9:d8:a7:a3:af:c7:26:f5:77:d3:bc:0f:b5:e3:a4:a4:
         f2:2d:61:fa:6b:78:89:a3:d9:3d:9b:3f:ca:37:43:0c:17:36:
         74:29:00:2b:51:9e:92:e3:93:f1:36:9f:ab:6d:c7:cf:54:f6:
         88:af:fe:db:e8:07:01:23:2b:7a:d4:ce:37:74:8c:43:84:c6:
         c7:c4:5f:09:de:47:8f:f2:3f:20:98:e7:8a:78:d7:61:7d:77:
         12:2b:a4:20:c1:14:33:ec:e4:f6:e1:d7:06:0c:23:e5:7c:52:
         0e:65:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:03 2024 by rpki-client on console-ams.rpki-client.org