Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/323830343a326665383a3a2f33322d313238203d3e20323634393230.roa
File:                     323830343a326665383a3a2f33322d313238203d3e20323634393230.roa (raw, json)
Hash identifier:          ntDv+pVzq7OOUmHhg5jYfMuk21bQTnFvqXra+p1YoRo=
Subject key identifier:   0C:1B:76:1F:0A:37:0F:E9:A7:8F:A0:C2:D5:E2:11:86:90:51:01:00
Certificate issuer:       /CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
Certificate serial:       5A92AD22C072427C5C5D8EA99C52AF9BA9F35CD7
Authority key identifier: EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/323830343a326665383a3a2f33322d313238203d3e20323634393230.roa
Signing time:             Thu 04 Apr 2024 06:05:32 +0000
ROA not before:           Thu 04 Apr 2024 06:00:32 +0000
ROA not after:            Thu 03 Apr 2025 06:05:32 +0000
asID:                     264920
IP address blocks:        2804:2fe8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl
                          rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:92:ad:22:c0:72:42:7c:5c:5d:8e:a9:9c:52:af:9b:a9:f3:5c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
        Validity
            Not Before: Apr  4 06:00:32 2024 GMT
            Not After : Apr  3 06:05:32 2025 GMT
        Subject: CN=0C1B761F0A370FE9A78FA0C2D5E2118690510100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:fe:28:09:bb:06:c9:62:4a:e6:2b:be:71:
                    f9:5a:e4:85:7c:17:a1:cc:6b:86:80:40:2f:eb:80:
                    82:7e:aa:cd:5f:04:49:a1:8d:25:42:a4:0a:a1:db:
                    8d:fa:4a:b1:3f:cb:a4:15:13:21:b8:e2:77:c6:83:
                    9e:e8:85:e0:90:d2:80:f5:6a:fa:66:91:a2:65:59:
                    36:07:32:66:3e:2b:f6:27:94:42:62:f6:bb:54:ed:
                    80:59:71:5c:98:f5:65:16:e0:d0:e8:dc:82:7a:af:
                    e9:a9:93:62:70:b1:a9:f9:1a:a3:52:8a:ed:2d:2e:
                    63:a9:1a:87:e9:53:e1:63:04:da:03:13:0f:53:ae:
                    29:19:ba:8f:29:97:39:e1:ec:2d:c1:44:27:7c:ee:
                    d1:bc:b5:89:55:b8:3c:cb:8d:0e:48:e1:d1:f2:a7:
                    c4:1c:b3:a4:b5:91:95:6c:89:fa:1a:4a:43:28:ea:
                    77:0a:2e:65:a5:d9:35:fa:19:e2:7b:f8:33:90:93:
                    cb:b1:2e:8d:77:5e:21:28:cf:f2:43:ff:a0:c5:46:
                    a6:93:62:54:ce:62:8f:c4:33:b6:f4:87:75:29:45:
                    5f:dc:56:2a:f9:04:57:dd:d5:fc:68:ad:5e:27:9a:
                    09:eb:93:f4:04:51:cc:10:7e:c7:44:dd:2c:c3:23:
                    6a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:76:1F:0A:37:0F:E9:A7:8F:A0:C2:D5:E2:11:86:90:51:01:00
            X509v3 Authority Key Identifier:
                keyid:EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/323830343a326665383a3a2f33322d313238203d3e20323634393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:51:73:33:97:ab:4a:19:3b:42:4c:a6:75:11:50:fd:ef:3d:
         65:32:11:2e:ab:8c:75:6f:c9:4a:25:dc:5e:6f:62:74:04:ac:
         ff:9e:bd:64:74:6e:fd:56:b7:4c:f2:55:80:1e:e7:cf:31:f8:
         cd:c3:0f:21:b8:6b:30:1d:10:7f:30:0d:5c:53:10:bf:d5:fb:
         7f:41:f7:97:7d:b6:ea:76:51:9e:55:ab:31:3d:d2:7d:5c:09:
         3e:67:90:f1:d3:7e:b8:69:4f:05:d5:97:98:5e:9b:84:3d:5a:
         96:29:23:87:75:57:7f:a6:0b:7d:5a:c6:f9:55:5a:2c:a1:a8:
         c8:0e:99:e3:01:fe:28:b5:50:c0:b5:7f:be:a7:32:8c:22:92:
         35:7d:81:3d:d2:98:6d:6b:c9:14:1a:bc:2e:37:9d:14:ad:63:
         01:00:80:9d:b8:68:f0:b2:2a:5f:fb:53:e7:fa:bc:de:82:34:
         f9:63:93:02:6a:3e:27:60:1b:f9:8c:ff:58:94:8a:a8:ad:04:
         ec:7f:4e:0e:b0:f1:e6:27:8b:b2:66:d4:92:52:1e:b5:b4:81:
         23:09:88:57:9a:b4:8f:a5:86:b0:de:5a:2d:b1:62:be:50:3b:
         db:0d:33:37:18:8a:40:ae:46:a7:d3:b1:0e:9c:0a:9b:5e:75:
         3e:de:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:37 2024 by rpki-client on console-ams.rpki-client.org