Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a3a2f33322d3332203d3e20323635313036.roa
File:                     323830343a333266303a3a2f33322d3332203d3e20323635313036.roa (raw, json)
Hash identifier:          FABCZFpJm0JF/1Vica2JU4uWmjwOZxveCjlphQ5EHkM=
Subject key identifier:   36:E7:DC:2D:37:C7:B1:48:28:37:C1:09:8F:36:04:F1:B4:8B:78:CD
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       4844DFA41690B1387D1679F13DAC04187EACE300
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a3a2f33322d3332203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:37 +0000
ROA not before:           Tue 30 Apr 2024 13:07:37 +0000
ROA not after:            Tue 29 Apr 2025 13:12:37 +0000
asID:                     265106
IP address blocks:        2804:32f0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:44:df:a4:16:90:b1:38:7d:16:79:f1:3d:ac:04:18:7e:ac:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:37 2024 GMT
            Not After : Apr 29 13:12:37 2025 GMT
        Subject: CN=36E7DC2D37C7B1482837C1098F3604F1B48B78CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2b:0f:c7:04:3a:1f:5e:42:7f:c2:6a:82:bb:
                    d6:39:cf:06:0c:96:91:1e:56:4f:4f:bc:c6:08:2f:
                    6c:91:a4:e0:50:47:7f:1b:cb:da:09:a9:47:c2:5a:
                    92:8c:5f:4c:d7:8e:5f:0b:5c:62:94:d8:4b:2a:04:
                    db:be:ff:e8:14:56:1b:a7:9c:93:59:87:13:be:1e:
                    b3:e4:77:7f:39:49:fc:a3:1f:a3:f3:91:97:42:d7:
                    21:37:00:03:ee:77:2f:28:35:c2:1c:26:99:a8:1f:
                    59:5e:0c:71:a1:8f:dc:24:ef:c0:f3:e5:70:42:b0:
                    a9:2a:f1:68:c8:72:60:b1:a0:c9:be:8d:0f:bd:58:
                    43:52:ac:5a:77:a0:10:65:6f:a8:3f:01:c8:4f:0a:
                    7a:a4:b5:2a:1a:69:16:6d:1b:56:ea:ee:82:a2:1e:
                    d9:f5:13:d1:5c:d3:4b:fd:4a:29:95:3e:8a:36:ec:
                    07:3a:5d:cc:1a:4f:c3:bf:04:d0:0d:eb:a2:1d:f2:
                    a1:82:4d:c8:ab:56:75:1a:38:42:90:1f:84:3d:17:
                    bb:b3:80:96:9e:ac:8e:ce:27:c3:cc:1b:c4:e9:39:
                    e6:4f:fa:9d:d4:1c:ec:91:f9:e4:af:8e:4d:8b:c4:
                    2f:ab:14:8a:0c:97:04:8c:bc:a9:e7:ae:c4:75:42:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:DC:2D:37:C7:B1:48:28:37:C1:09:8F:36:04:F1:B4:8B:78:CD
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a3a2f33322d3332203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:7b:20:73:47:bc:bd:dd:0a:c3:18:66:84:45:1c:6b:1e:
         51:49:f8:02:7e:e5:5b:0b:98:dd:f6:b6:a2:22:44:2e:3f:86:
         ad:6e:33:02:64:ef:7a:ee:3c:60:10:96:af:9f:c4:51:09:ca:
         57:fe:bc:cf:f0:a5:83:54:3b:6f:69:94:6f:e5:03:c3:ea:74:
         17:03:db:6e:e1:eb:6c:fb:77:ac:40:62:05:6e:22:2b:85:68:
         2d:10:63:cc:78:a6:88:3d:04:18:26:ad:79:34:58:dc:5a:f1:
         c1:59:d5:ad:8c:14:c6:c8:4c:97:5c:89:06:f3:14:79:8b:bd:
         dc:27:c9:60:b6:9b:c5:79:2f:ad:cc:e8:46:27:d9:f2:68:f7:
         f5:f0:60:34:03:ae:ee:cc:8a:1a:76:e8:e2:6d:3f:fe:b0:d1:
         ed:53:34:64:fa:8c:1b:dd:a3:27:ce:31:2b:14:3f:bd:3d:cd:
         1a:9d:e6:9b:90:20:49:93:0b:c6:aa:e9:0d:74:d3:02:51:db:
         41:34:67:23:9a:4f:d3:c9:d4:bb:32:f9:3c:8d:c9:71:76:d1:
         1a:a6:7d:7c:80:2d:56:5c:0d:5e:c3:25:b4:5a:c2:dc:bb:14:
         73:3d:d0:4b:9b:d4:87:c0:59:e1:5d:82:46:50:f6:86:7e:26:
         2e:92:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org