Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a343030303a3a2f33342d3334203d3e20323632363432.roa
File:                     323830343a326561383a343030303a3a2f33342d3334203d3e20323632363432.roa (raw, json)
Hash identifier:          X2BKcju0+WvDb+AFRNffk18at5plyRNFPtVt5ageSak=
Subject key identifier:   AC:9D:EE:0A:C0:09:CF:4C:BB:36:A1:D0:F4:6B:2D:F9:28:FF:55:7C
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       18ED532F9023038746AAD8E6EA6216396EF986B1
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a343030303a3a2f33342d3334203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:10 +0000
ROA not before:           Thu 04 Apr 2024 03:19:10 +0000
ROA not after:            Thu 03 Apr 2025 03:24:10 +0000
asID:                     262642
IP address blocks:        2804:2ea8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ed:53:2f:90:23:03:87:46:aa:d8:e6:ea:62:16:39:6e:f9:86:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:10 2024 GMT
            Not After : Apr  3 03:24:10 2025 GMT
        Subject: CN=AC9DEE0AC009CF4CBB36A1D0F46B2DF928FF557C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:2b:e7:ad:3d:b7:3c:e8:7b:16:ca:d5:ad:
                    79:f2:b7:b1:ab:82:7e:ea:a9:39:9b:36:a7:35:5b:
                    76:41:56:e9:c1:d4:e3:bf:87:ee:3b:61:f4:68:58:
                    67:d6:dd:90:07:94:2a:da:64:86:e7:70:1a:82:41:
                    03:e6:63:43:fe:cb:ad:7f:ed:f9:f1:61:58:47:a2:
                    87:ed:c0:aa:59:70:c2:5e:1b:de:0f:42:a5:8f:19:
                    1c:ab:fe:84:91:64:98:b6:66:1b:1e:bc:9a:f6:f5:
                    40:4d:d2:9d:8c:fa:44:72:bf:85:05:de:30:5f:38:
                    5f:f1:74:8e:22:d5:a1:c8:d4:50:9b:10:d5:e8:e1:
                    1a:4f:f3:ef:03:cc:86:4e:eb:16:9d:88:c5:91:a9:
                    a9:a4:b1:6e:0e:ba:c1:02:e0:bc:cc:2c:6c:11:d1:
                    1c:24:54:02:0b:03:ef:95:dc:e2:7a:5a:03:a3:d9:
                    3d:c3:a2:e8:46:2e:12:a5:8c:16:6c:4a:0c:a2:a5:
                    4d:98:16:29:4b:d5:e6:73:e9:87:88:9c:8c:58:84:
                    5b:b0:5c:2d:06:14:71:36:d9:98:69:29:02:d5:5a:
                    de:7b:43:16:fd:13:6b:4d:82:aa:c9:5a:00:f9:15:
                    e0:55:67:5d:78:8c:30:d9:e4:5d:64:11:0b:75:9f:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:EE:0A:C0:09:CF:4C:BB:36:A1:D0:F4:6B:2D:F9:28:FF:55:7C
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a343030303a3a2f33342d3334203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:7a:e5:59:8b:40:40:31:80:b1:67:67:7e:3c:36:dd:7f:06:
         d4:c7:cf:c3:2e:07:70:22:1a:7e:3b:4d:c7:54:25:e4:95:a8:
         9a:03:fb:fa:1c:16:74:65:73:da:0e:54:a0:84:09:bd:66:58:
         27:fc:2d:b0:76:50:f4:b8:ac:d2:01:f6:10:4d:85:b2:9b:c0:
         c1:54:2f:79:b8:99:27:fb:93:a4:2d:be:51:fc:ca:13:c6:9f:
         7d:eb:61:a0:03:81:c2:32:b6:36:ed:8e:2a:93:78:b9:d7:a1:
         1a:e6:3d:37:37:db:5a:9a:f4:19:3c:98:95:d0:25:18:a0:16:
         58:65:67:0a:cb:78:33:b7:22:f5:e3:2b:fa:eb:98:f9:88:0d:
         05:be:5a:ca:bb:22:00:27:ff:f5:bf:2f:79:5b:36:6e:fd:38:
         d3:52:4e:16:95:1a:05:fd:7e:30:4a:62:10:52:45:f4:44:3c:
         65:28:e4:08:48:6f:0b:73:d4:f5:88:8c:c5:0e:5b:fa:6e:1c:
         c8:61:fc:77:93:42:cd:71:23:de:d7:ba:9e:17:c4:de:3a:45:
         13:e1:d7:59:db:66:a0:df:76:a8:2b:c3:d0:42:30:e7:55:17:
         63:b7:0c:ba:20:62:94:0d:52:91:84:9b:ab:80:a8:85:b2:b4:
         be:6f:7c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org