Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/323830343a333538343a3a2f33322d3334203d3e20323636323931.roa
File:                     323830343a333538343a3a2f33322d3334203d3e20323636323931.roa (raw, json)
Hash identifier:          B+j+LgSk77NhHa6avvtoSmyIKd2Hvi+87SyOzSY9QFU=
Subject key identifier:   71:D7:F4:25:5D:00:71:84:FD:DE:8B:E1:89:B6:1A:0E:ED:46:A7:F0
Certificate issuer:       /CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
Certificate serial:       13C7B3CA1242A705C0DE00FD942831091FEB7175
Authority key identifier: F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/323830343a333538343a3a2f33322d3334203d3e20323636323931.roa
Signing time:             Mon 08 Jul 2024 11:57:11 +0000
ROA not before:           Mon 08 Jul 2024 11:52:11 +0000
ROA not after:            Mon 07 Jul 2025 11:57:11 +0000
asID:                     266291
IP address blocks:        2804:3584::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl
                          rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c7:b3:ca:12:42:a7:05:c0:de:00:fd:94:28:31:09:1f:eb:71:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
        Validity
            Not Before: Jul  8 11:52:11 2024 GMT
            Not After : Jul  7 11:57:11 2025 GMT
        Subject: CN=71D7F4255D007184FDDE8BE189B61A0EED46A7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:20:54:50:15:5f:74:da:65:60:74:db:2f:
                    f5:35:5d:ae:a9:8d:79:8e:f3:c5:e2:23:18:9c:23:
                    d9:7e:78:7b:da:b8:aa:a1:ef:71:a6:6d:90:29:63:
                    e7:ba:d3:d0:cd:3e:b5:b3:79:6b:dc:89:0a:be:9d:
                    6a:d4:ba:1c:92:d6:67:2e:24:f2:1f:e3:c4:bc:35:
                    c3:2c:e1:4b:6b:e2:4d:58:d8:93:10:0f:ff:e7:19:
                    0b:c4:d6:11:7d:98:68:72:35:d9:90:ad:c2:5e:a3:
                    ac:64:41:2b:96:c8:37:cd:b3:c0:df:9c:c0:85:2b:
                    4f:47:ee:71:18:dd:dd:2d:61:78:ea:90:a5:9a:30:
                    0c:f2:ce:29:13:02:07:3f:e0:bd:79:4a:05:68:d7:
                    1b:ee:d8:fa:d5:e2:f5:94:f7:79:b6:78:be:3a:c2:
                    fd:68:f4:53:18:a5:74:d1:15:9e:b5:66:07:60:c0:
                    c2:df:bc:b4:59:6f:55:1e:c4:65:fd:80:80:06:13:
                    f7:53:f8:a0:cf:70:1b:a9:f0:30:c3:ab:5e:0f:a0:
                    84:93:a1:c5:8f:9c:36:0c:ab:5b:27:cd:24:e8:2b:
                    f2:4b:f1:eb:32:33:73:e0:b8:c5:e8:7c:46:d4:47:
                    4a:7a:eb:a3:72:82:1f:db:a1:49:ce:20:ae:fc:16:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D7:F4:25:5D:00:71:84:FD:DE:8B:E1:89:B6:1A:0E:ED:46:A7:F0
            X509v3 Authority Key Identifier:
                keyid:F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/323830343a333538343a3a2f33322d3334203d3e20323636323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3584::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:68:f1:be:e2:00:85:29:f6:51:4b:54:d0:27:d8:a0:1f:
         bb:02:29:fe:40:f3:7d:1f:df:63:96:15:67:bd:94:0a:e9:f8:
         fb:29:a7:a2:c4:2b:fa:ea:ce:ec:2f:27:e6:0c:41:3e:0a:b3:
         6c:39:57:1f:b5:ab:74:c8:c9:ae:cd:0c:fd:a4:c3:7a:68:46:
         08:44:98:c2:2e:ba:ed:31:28:b1:c3:83:fb:d2:50:8f:83:20:
         6f:73:6e:d5:9c:b2:6d:af:ea:12:0a:f1:11:87:62:ca:5d:03:
         d5:73:e2:eb:c1:6b:9f:40:af:0b:49:ae:8c:5d:e4:f7:37:a1:
         68:b9:f1:f5:c7:3b:8f:25:82:8c:41:4a:3d:5b:98:ea:de:68:
         b8:06:15:fe:e4:12:d4:b0:e3:ed:3a:4e:de:c1:ec:cc:6d:2e:
         5a:f7:32:40:1d:72:c4:90:8d:f1:f2:44:53:99:40:bb:cc:c1:
         01:ef:0b:7a:ad:41:13:ca:03:3c:e2:03:ba:69:eb:17:12:12:
         54:e9:6c:ba:b1:e2:21:d3:6b:56:b2:92:99:89:dd:13:26:d0:
         b3:dc:a3:ab:39:2c:e8:15:0b:63:56:88:26:0f:08:1c:0c:18:
         18:d4:14:f8:a8:d0:65:27:b3:66:12:74:42:2c:47:e7:e9:b4:
         e3:fa:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:09 2024 by rpki-client on console-ams.rpki-client.org