Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a3a2f33322d3335203d3e20323636393638.roa
File:                     323830343a343631383a3a2f33322d3335203d3e20323636393638.roa (raw, json)
Hash identifier:          in/D63qivA8H+AwMlAbS7FeTRGqlIlkE/0+sWik2z1s=
Subject key identifier:   2F:BD:48:67:3C:1D:A1:C4:2D:D7:96:9A:47:A1:E6:D9:E1:2E:A2:1C
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       2D9D8915FD5BE5029F758ED4A59018F11A6E37A1
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a3a2f33322d3335203d3e20323636393638.roa
Signing time:             Thu 04 Apr 2024 04:17:49 +0000
ROA not before:           Thu 04 Apr 2024 04:12:49 +0000
ROA not after:            Thu 03 Apr 2025 04:17:49 +0000
asID:                     266968
IP address blocks:        2804:4618::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9d:89:15:fd:5b:e5:02:9f:75:8e:d4:a5:90:18:f1:1a:6e:37:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Apr  4 04:12:49 2024 GMT
            Not After : Apr  3 04:17:49 2025 GMT
        Subject: CN=2FBD48673C1DA1C42DD7969A47A1E6D9E12EA21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4d:22:9c:02:96:86:56:1c:f1:5b:7a:5a:f4:
                    df:8a:f1:8e:de:f1:12:42:4b:90:b2:67:15:22:d2:
                    60:18:b7:2a:0a:ec:e0:5c:15:ff:4f:c1:af:0c:e9:
                    dc:86:ff:7d:13:d7:7a:f1:9d:62:6d:6c:ae:2e:a5:
                    a7:ba:3b:90:cf:01:09:5b:e2:69:69:f0:87:b7:f7:
                    1b:0b:29:a7:46:1f:b7:7b:7e:29:3f:6c:2d:7b:8f:
                    ea:a2:60:d5:89:2a:20:ac:a7:9b:8e:80:ce:02:59:
                    14:ed:5c:3f:0f:51:fb:cb:15:9c:eb:e7:91:cd:38:
                    79:98:27:d0:be:ce:aa:c2:c0:82:43:69:f2:75:0c:
                    d0:66:cf:a8:6f:77:d7:d9:d2:ee:c4:ba:74:ec:c1:
                    55:bd:51:eb:98:7e:e5:02:c4:a2:bf:aa:8a:10:dc:
                    9b:26:90:b9:b1:b4:8a:82:ac:8c:99:53:d0:20:31:
                    cd:7e:8e:80:cb:6c:55:38:23:21:2a:fe:f4:6d:53:
                    73:89:70:60:44:e8:2f:55:97:df:24:28:37:65:c0:
                    9f:9d:5a:a7:a6:73:71:8b:a6:41:ae:1f:58:85:ee:
                    00:18:ba:60:02:7d:e4:f5:82:ea:68:b9:4a:89:7e:
                    a0:52:29:74:2f:0e:1b:4e:4a:a0:dd:de:21:26:d2:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BD:48:67:3C:1D:A1:C4:2D:D7:96:9A:47:A1:E6:D9:E1:2E:A2:1C
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a3a2f33322d3335203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:81:ac:72:8e:fb:37:2a:68:e1:d6:92:36:c0:d2:d0:cd:
         16:8c:3f:a2:67:69:01:a8:5b:41:1d:23:8e:57:bd:c4:d5:2c:
         e9:b6:dd:4a:12:a6:a0:cf:de:6b:7e:4a:92:ce:f0:9b:5e:05:
         83:b6:75:54:44:2c:bf:08:86:74:41:64:e0:e3:9f:02:53:35:
         1b:32:98:b7:65:1a:59:ee:79:c0:7f:ca:46:cd:3b:34:a4:37:
         88:39:ec:f2:59:e7:1d:0c:e3:0a:b6:9a:20:69:e6:60:f9:ff:
         a9:5e:78:55:e3:fd:a3:11:8d:47:49:c4:93:c2:3e:4d:d4:d1:
         fc:78:37:f5:b8:70:92:7b:90:62:8e:77:dc:82:cc:0e:e4:63:
         b7:42:f0:00:c0:1c:16:07:25:a4:a6:a0:ce:8b:12:cb:76:aa:
         25:ae:15:59:34:31:13:58:ad:90:52:a2:ee:ed:4e:35:c6:d9:
         cc:3c:cc:12:26:62:6b:72:8c:5b:be:24:0d:3f:2b:43:ce:4d:
         f3:a0:80:3d:18:fa:c3:df:c9:f3:2c:ce:48:40:10:3b:fc:c2:
         2f:33:d5:1c:9b:9b:dc:d6:8a:a6:52:68:60:bc:2b:3b:98:fd:
         c2:dd:5e:68:57:6f:ee:64:55:5e:0e:f4:ab:f6:84:42:47:0f:
         01:c5:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org