Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa
File:                     323830343a336233383a3a2f33322d3438203d3e20323636313336.roa (raw, json)
Hash identifier:          qyJW+yyZuPly0w+b1oDE0sTJPZvnb/M6yVp4PF4QTkw=
Subject key identifier:   A8:06:FC:18:43:FC:92:CB:80:16:90:26:49:62:8B:C2:19:CC:4D:FF
Certificate issuer:       /CN=43A7C7C2B310D67DE688F19B159433597525FE31
Certificate serial:       20EB7EEC7D8A02A4340EC7E37AA5D50C47F4B68F
Authority key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266136
IP address blocks:        2804:3b38::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl
                          rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:eb:7e:ec:7d:8a:02:a4:34:0e:c7:e3:7a:a5:d5:0c:47:f4:b6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A7C7C2B310D67DE688F19B159433597525FE31
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100BD585FACC71A49634C5B20770D2179A072663372B31608533EB0D5DBE8C9F20C7629B125423546D006239550FFBB04822BDEFD6BDB60B86285E494E1D63BE38901E142D4B177963943FCD9BC075A357E4CB4AD39E59DE98E0FA32525A1AC31CAF2CA850A488A6C913FFC70DC031EF17B350F5F1B2FB35DC6DA6665D7E28CB5672137BE96918D7E4E4B802C49025F4E5421AFCE02A3A1B5F8BDE77F2EC0D90B8BE24639C82B18F7B2F90FE73FB1B07D2BEFF318865EBF5BB74611D9EBE6A016B50E8DBFCE9ADF278262A5C10ADABDF185CF1F0D2F2FD0EBE9EAA8F75C4FD3A3A06F58577E3EC6F45FC5CF9C1540F8149A3858ABD439E8DFE5786B55B94F3FC7B30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:5f:ac:c7:1a:49:63:4c:5b:20:77:0d:21:
                    79:a0:72:66:33:72:b3:16:08:53:3e:b0:d5:db:e8:
                    c9:f2:0c:76:29:b1:25:42:35:46:d0:06:23:95:50:
                    ff:bb:04:82:2b:de:fd:6b:db:60:b8:62:85:e4:94:
                    e1:d6:3b:e3:89:01:e1:42:d4:b1:77:96:39:43:fc:
                    d9:bc:07:5a:35:7e:4c:b4:ad:39:e5:9d:e9:8e:0f:
                    a3:25:25:a1:ac:31:ca:f2:ca:85:0a:48:8a:6c:91:
                    3f:fc:70:dc:03:1e:f1:7b:35:0f:5f:1b:2f:b3:5d:
                    c6:da:66:65:d7:e2:8c:b5:67:21:37:be:96:91:8d:
                    7e:4e:4b:80:2c:49:02:5f:4e:54:21:af:ce:02:a3:
                    a1:b5:f8:bd:e7:7f:2e:c0:d9:0b:8b:e2:46:39:c8:
                    2b:18:f7:b2:f9:0f:e7:3f:b1:b0:7d:2b:ef:f3:18:
                    86:5e:bf:5b:b7:46:11:d9:eb:e6:a0:16:b5:0e:8d:
                    bf:ce:9a:df:27:82:62:a5:c1:0a:da:bd:f1:85:cf:
                    1f:0d:2f:2f:d0:eb:e9:ea:a8:f7:5c:4f:d3:a3:a0:
                    6f:58:57:7e:3e:c6:f4:5f:c5:cf:9c:15:40:f8:14:
                    9a:38:58:ab:d4:39:e8:df:e5:78:6b:55:b9:4f:3f:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:06:FC:18:43:FC:92:CB:80:16:90:26:49:62:8B:C2:19:CC:4D:FF
            X509v3 Authority Key Identifier:
                keyid:43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/323830343a336233383a3a2f33322d3438203d3e20323636313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:17:40:de:02:39:4c:b2:43:cb:d6:3e:a6:e6:da:7c:95:
         65:62:4d:cd:af:b8:c9:fd:15:e0:27:bb:35:0f:76:fb:e4:99:
         56:fc:31:7a:1d:6c:2f:48:23:0a:81:19:6c:d2:26:6b:5a:65:
         63:a5:9a:33:a9:48:a6:b9:c8:ad:bc:e3:e2:6c:19:c2:0d:ca:
         1e:71:b3:2d:33:22:4d:8a:67:26:67:79:d2:fe:d4:07:52:8e:
         9a:96:46:b1:93:bd:44:56:fa:d8:a3:d2:1f:f6:da:0f:35:e7:
         ae:2a:c3:77:84:18:fe:e2:59:70:e3:18:ce:85:99:76:ca:95:
         ad:0a:37:90:61:7f:3e:34:82:1a:87:78:87:52:16:e7:ea:ef:
         86:b0:c4:f0:4d:1b:3e:db:c5:23:d8:56:be:3a:a4:cd:91:44:
         2c:d0:8a:c2:da:be:6b:f4:f6:e7:d8:6d:63:65:ee:2f:ed:73:
         11:2b:6c:04:23:28:0b:fb:83:a2:06:12:3b:a2:89:30:ba:ac:
         9c:30:0b:a6:a4:3e:8a:6e:ea:7d:8a:7c:89:2e:c5:b5:3c:25:
         3c:d2:5e:38:0e:be:c4:aa:95:ab:66:3e:3e:42:7d:97:d4:87:
         77:db:79:fb:28:95:b5:c3:3d:bc:7c:22:14:1f:36:6e:b7:6c:
         bf:23:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org