Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa
File:                     323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          eW6rCFEmso0Az7hT1sdqD54rbXh4xhhfibqwIXCwOxk=
Subject key identifier:   AE:98:08:E2:73:3A:97:70:5D:BD:92:4C:F7:5E:27:CA:F1:8C:19:34
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       43488A98EE98BC9A744AF11F2A29D753A79C4A5E
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa
Signing time:             Thu 04 Apr 2024 15:50:30 +0000
ROA not before:           Thu 04 Apr 2024 15:45:30 +0000
ROA not after:            Thu 03 Apr 2025 15:50:30 +0000
asID:                     263280
IP address blocks:        2804:164c:fac::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:48:8a:98:ee:98:bc:9a:74:4a:f1:1f:2a:29:d7:53:a7:9c:4a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Apr  4 15:45:30 2024 GMT
            Not After : Apr  3 15:50:30 2025 GMT
        Subject: CN=AE9808E2733A97705DBD924CF75E27CAF18C1934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:2e:f8:a2:9d:d7:ff:38:5a:ca:61:97:ea:
                    f6:42:c8:53:9b:f5:5d:7e:90:e1:8d:df:dd:58:d0:
                    21:b7:2b:49:2a:8c:85:86:d1:47:b8:57:c6:2c:3e:
                    b4:2e:2f:63:d2:43:1b:cd:1f:c3:a7:6f:e8:b2:39:
                    8f:be:96:06:e1:65:9b:7a:fd:00:45:64:9a:34:ed:
                    76:6d:de:b0:60:89:aa:53:1b:cd:8d:9b:35:f1:df:
                    9f:eb:ea:a3:cf:2a:51:f0:f3:b6:7b:cc:2d:f7:38:
                    63:c9:0b:b9:36:ce:66:98:46:17:82:99:a8:43:76:
                    8e:1b:dd:02:55:24:8e:d0:2f:55:93:0c:d4:d2:7c:
                    6e:26:95:9c:70:87:75:ac:35:c7:e3:d8:d9:b2:34:
                    8c:7f:79:51:81:5d:d5:17:c7:c0:12:4e:e9:32:3e:
                    81:0e:5b:3d:81:0e:f9:df:ef:99:16:ac:66:01:3c:
                    9f:a2:5b:1b:a1:ea:8e:01:54:1a:35:3b:1e:82:ef:
                    3d:b6:ff:c5:cc:00:2d:a6:10:84:d6:6a:ca:48:4e:
                    fa:43:ee:61:7e:a0:5f:8c:29:23:67:7b:26:12:f2:
                    dd:1f:a8:67:91:26:57:06:8f:f5:98:ab:69:e0:8b:
                    83:04:60:63:34:aa:95:e2:4e:b3:22:2a:da:49:ad:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:98:08:E2:73:3A:97:70:5D:BD:92:4C:F7:5E:27:CA:F1:8C:19:34
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c:fac::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:4a:9d:5f:88:7f:2f:ec:40:8e:88:30:a9:a5:18:cb:64:6e:
         fb:01:7f:38:cb:68:93:ff:33:e2:26:ff:be:55:ac:df:05:f1:
         02:78:6b:c3:4f:c6:e4:7d:2a:0c:ee:28:03:ee:f9:ab:c3:f9:
         b1:51:7f:32:79:83:b0:02:1f:08:d9:55:df:3b:b5:10:5c:d1:
         18:9e:f5:df:59:ec:26:39:ef:80:8e:75:ee:58:7a:f6:6e:79:
         91:67:84:92:62:37:a4:06:78:98:41:3f:fa:8c:2e:5b:4c:1f:
         f0:e4:d1:5f:48:69:7f:3b:26:b4:e2:9b:01:c3:3a:06:38:c9:
         02:81:84:ff:52:30:f2:7d:6b:68:c5:f6:3e:ed:24:a6:b0:a2:
         e4:6a:5b:28:07:81:45:55:3e:ca:9b:e6:9c:d9:a5:0f:04:bf:
         2e:5d:d5:16:a7:a5:2b:cb:5c:57:d3:bf:b8:20:b9:65:f1:46:
         b4:fd:b8:09:d3:df:61:51:a2:61:53:aa:19:a1:7a:35:da:4a:
         13:6c:f9:ee:3d:d7:d2:09:54:d7:71:96:1d:a9:2f:38:c0:46:
         11:31:3b:dc:c9:69:7e:a2:27:c5:7a:08:a5:9b:1e:55:9d:a5:
         8f:61:23:58:bd:50:ea:f4:bf:ea:04:f8:74:50:78:0e:5e:02:
         ab:b2:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org