Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a313030303a3a2f34322d3432203d3e20323635313036.roa
File:                     323830343a333266303a313030303a3a2f34322d3432203d3e20323635313036.roa (raw, json)
Hash identifier:          xbnNQfzrtpYbVK4xrZRBkGYOwMGNXiZSBrAitw88+9Q=
Subject key identifier:   F7:0B:EA:5C:47:56:B3:A6:63:C5:82:ED:4A:AC:A7:EE:98:39:16:C9
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       7BAAA4F65C1F0C00C22AD77520B892CF09278FAD
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a313030303a3a2f34322d3432203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:38 +0000
ROA not before:           Tue 30 Apr 2024 13:07:38 +0000
ROA not after:            Tue 29 Apr 2025 13:12:38 +0000
asID:                     265106
IP address blocks:        2804:32f0:1000::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:aa:a4:f6:5c:1f:0c:00:c2:2a:d7:75:20:b8:92:cf:09:27:8f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:38 2024 GMT
            Not After : Apr 29 13:12:38 2025 GMT
        Subject: CN=F70BEA5C4756B3A663C582ED4AACA7EE983916C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:85:25:a8:8b:0e:10:d5:c9:fe:ec:f7:5a:
                    16:4b:9a:13:bf:69:b9:2d:1c:1c:b5:26:31:d2:15:
                    c5:79:8a:0c:d0:0c:15:4a:46:e8:18:55:f7:b9:b6:
                    72:11:58:bb:bf:ef:df:40:00:aa:ff:8f:4e:f2:6a:
                    56:cb:3a:29:48:99:b0:a8:c1:87:8d:8f:16:86:fb:
                    67:b8:3a:91:ca:ee:82:62:c6:31:37:c9:1d:66:1a:
                    1f:43:82:36:9e:e5:68:e8:53:a5:cc:bb:c2:72:2a:
                    3b:c2:ca:22:1a:9b:4e:fb:a7:8a:b4:20:8b:d3:5b:
                    4d:56:55:83:26:f7:11:74:62:cc:eb:ec:6e:6a:79:
                    2c:55:c1:76:da:7a:eb:58:ca:08:2e:e9:52:66:1f:
                    5f:d1:c0:b4:a0:9f:9d:de:97:06:59:22:58:b5:fa:
                    f3:70:cb:79:cf:16:45:f0:d4:da:57:51:9b:11:7d:
                    fe:38:93:df:fb:6c:3e:cd:6c:88:04:42:37:e9:bc:
                    a4:bb:4c:80:84:eb:d4:66:81:80:f3:12:f9:fd:ff:
                    e1:65:aa:37:68:5c:47:02:06:0a:53:1f:0b:38:1b:
                    61:72:d4:48:25:20:1a:5c:b4:df:7c:b1:50:5b:8b:
                    f9:bb:a1:23:5a:2e:ab:d2:9f:3c:d7:30:ab:86:4b:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0B:EA:5C:47:56:B3:A6:63:C5:82:ED:4A:AC:A7:EE:98:39:16:C9
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a313030303a3a2f34322d3432203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32f0:1000::/42

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:41:fa:c8:28:e6:fc:09:a2:30:bf:81:e9:e0:f2:04:d3:
         66:39:21:bb:81:e3:7e:d0:0f:ee:4c:0c:8a:24:74:f5:86:ec:
         04:5d:69:a2:5d:7b:c8:b8:12:78:d4:c5:99:02:52:cc:cd:d5:
         29:74:a3:fd:74:12:c8:91:5f:9d:7f:98:be:bb:69:e0:37:c7:
         43:06:b6:c7:29:5b:d6:13:db:93:a6:ef:98:73:73:0b:6f:b9:
         d0:25:52:52:e7:6b:6e:8b:01:cf:3a:a1:3b:a7:ed:7e:69:f1:
         ab:81:6b:b9:75:dd:d4:dd:e1:12:d1:b6:e3:f6:ee:37:70:77:
         4c:a1:b2:a2:32:de:df:a7:b9:f2:f3:b6:db:a5:3c:a3:af:ab:
         39:6a:f9:68:4c:09:6c:f8:12:be:d7:ef:70:e0:6f:c7:10:e2:
         64:04:b7:ba:47:8c:1e:11:a7:0d:b8:b8:21:56:db:0a:51:3e:
         3f:01:a3:7b:e0:da:3b:12:1f:e6:ab:79:4a:a8:07:d7:94:ff:
         b1:3e:df:ef:21:ba:c4:9f:af:f5:51:60:ff:63:cb:3f:04:12:
         f3:36:ed:c0:eb:43:af:a5:2d:65:80:e5:40:c3:ae:d2:d8:94:
         19:2b:a4:99:84:73:8b:4d:9c:f7:26:b2:9e:74:40:4e:30:07:
         dd:2a:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org