Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33322d3332203d3e20323636333638.roa
File:                     323830343a333662633a3a2f33322d3332203d3e20323636333638.roa (raw, json)
Hash identifier:          ict6AIeY1K7+jXZ/zzHawWQig9s5Xl+ur7yBTpPm5Wo=
Subject key identifier:   EE:E9:31:35:0E:E8:DC:24:9B:62:64:C1:FB:F4:B0:14:01:A6:DD:CF
Certificate issuer:       /CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
Certificate serial:       663881A5FBE980DBE5D27A67C197D5EAC5D1AAF4
Authority key identifier: A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33322d3332203d3e20323636333638.roa
Signing time:             Tue 19 Nov 2024 15:52:33 +0000
ROA not before:           Tue 19 Nov 2024 15:47:33 +0000
ROA not after:            Tue 18 Nov 2025 15:52:33 +0000
asID:                     266368
IP address blocks:        2804:36bc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:38:81:a5:fb:e9:80:db:e5:d2:7a:67:c1:97:d5:ea:c5:d1:aa:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
        Validity
            Not Before: Nov 19 15:47:33 2024 GMT
            Not After : Nov 18 15:52:33 2025 GMT
        Subject: CN=EEE931350EE8DC249B6264C1FBF4B01401A6DDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:ac:3f:5c:ee:7b:11:f7:77:c4:3c:e8:5d:
                    2d:7e:d0:90:9a:b8:cc:08:c8:75:ce:31:77:63:ac:
                    a3:1f:88:04:7b:1a:0e:d3:d4:3c:6f:5a:66:b6:71:
                    19:1d:99:4a:da:7c:f9:67:a9:87:31:bc:62:f1:e2:
                    f6:09:2e:b5:dc:f8:e5:92:3e:08:b7:41:3d:b9:f9:
                    e3:75:89:e2:e6:a7:9b:fe:de:ae:b6:e7:aa:36:3f:
                    8d:86:9d:8a:a0:de:3a:1a:23:71:c6:18:d8:e3:bf:
                    ad:45:62:b6:39:25:e4:37:ec:92:19:f2:c6:b8:ed:
                    1e:ac:13:eb:6e:8e:5a:43:76:2b:4b:db:b9:52:ff:
                    0a:26:5e:4e:8b:07:28:f7:52:0b:9e:41:09:00:18:
                    53:71:c0:61:b9:92:74:25:96:8b:e0:38:13:a8:4f:
                    26:d4:fb:5a:a0:37:52:0c:43:e3:7b:40:00:3e:bc:
                    4d:cf:67:d6:1d:3e:d7:0f:2f:87:33:88:3c:64:4c:
                    95:1d:1b:24:47:0a:c9:37:2d:b4:02:24:46:51:74:
                    66:e1:dc:60:19:c2:cf:16:5a:4d:61:76:0a:78:80:
                    13:ae:ee:11:20:bd:45:3b:c5:17:62:cc:c0:2e:c8:
                    04:3d:02:a0:3f:31:94:51:3f:1b:ea:91:7a:64:39:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:31:35:0E:E8:DC:24:9B:62:64:C1:FB:F4:B0:14:01:A6:DD:CF
            X509v3 Authority Key Identifier:
                keyid:A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33322d3332203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:22:ec:55:a9:d7:00:f5:4a:01:cc:3a:d6:21:25:2c:2e:
         5a:c4:3e:9a:84:a9:84:e1:0f:62:d6:54:f5:b0:b7:6e:10:4c:
         d2:09:24:93:74:90:f0:1e:77:32:a3:97:1f:72:c8:d7:d3:c6:
         f9:a5:e4:76:4b:65:7c:ef:49:2a:25:7b:27:e9:cd:72:8c:c7:
         13:85:47:76:f0:5e:77:84:b7:70:87:31:1f:99:03:7e:4b:11:
         53:44:0c:38:d9:80:ec:a9:88:ae:be:10:21:22:8d:7c:45:3e:
         bc:69:f0:91:ef:92:45:e3:19:19:da:e3:93:e0:94:e5:94:d1:
         df:c0:f6:d0:a0:6a:44:2e:4c:4d:c2:a1:62:43:96:22:e0:58:
         9c:c3:03:84:8b:6d:c7:b1:08:dd:0e:26:76:52:5a:f8:b6:33:
         1e:06:2e:37:5f:3c:7f:d7:b5:80:b3:12:9c:4b:67:91:5e:35:
         2c:28:af:fe:ac:eb:7e:8d:48:c5:99:c8:95:65:5f:2c:0e:a5:
         83:3f:bd:2a:08:ee:6b:e8:75:f5:c7:97:c3:57:62:a1:09:ac:
         8f:0e:a2:bd:30:9d:73:ec:b4:fe:ca:8b:6c:e8:69:5d:ff:9b:
         b2:d8:50:1b:7e:f2:7f:44:62:88:ac:08:72:8c:e5:d4:a6:de:
         07:f8:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org