Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a3a2f33322d3334203d3e20323635383934.roa
File:                     323830343a336637383a3a2f33322d3334203d3e20323635383934.roa (raw, json)
Hash identifier:          L35ZBUpJee7y0an8UOVvVEFYhh9tw1griW5lXEx673Y=
Subject key identifier:   91:EF:FA:DC:FA:5E:72:49:81:76:90:79:45:CC:BA:2C:A0:8C:E1:C7
Certificate issuer:       /CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
Certificate serial:       292AF0ED0DF5B5244C83024D8A94A6C044B1DB59
Authority key identifier: 4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a3a2f33322d3334203d3e20323635383934.roa
Signing time:             Tue 21 May 2024 20:14:42 +0000
ROA not before:           Tue 21 May 2024 20:09:42 +0000
ROA not after:            Tue 20 May 2025 20:14:42 +0000
asID:                     265894
IP address blocks:        2804:3f78::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl
                          rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2a:f0:ed:0d:f5:b5:24:4c:83:02:4d:8a:94:a6:c0:44:b1:db:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
        Validity
            Not Before: May 21 20:09:42 2024 GMT
            Not After : May 20 20:14:42 2025 GMT
        Subject: CN=91EFFADCFA5E72498176907945CCBA2CA08CE1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:81:7f:4f:83:2e:84:86:05:6d:56:58:4d:
                    74:42:49:79:e9:59:f8:a7:0c:22:6c:d3:95:ec:2a:
                    a6:91:0e:29:77:29:76:84:01:ae:b5:b6:db:87:97:
                    b5:ef:41:a3:24:e1:bd:da:d3:83:12:cc:26:52:a1:
                    84:64:2f:e1:21:e1:ac:57:94:86:8d:cc:3d:5b:10:
                    a7:34:b0:4d:17:1a:c4:61:ed:f6:8a:41:08:44:d8:
                    1a:26:8d:ac:6f:b7:9a:20:52:81:28:a6:45:53:82:
                    90:b7:ee:9e:c6:ed:03:86:ab:ef:e5:79:8e:cb:79:
                    12:ce:51:35:1f:bb:eb:d1:50:0d:6c:90:97:bc:77:
                    31:0e:67:f2:3c:32:6f:40:74:ec:44:5c:89:65:a8:
                    a7:e6:cc:87:f3:0f:48:ad:98:75:0a:26:97:1f:fc:
                    42:5d:ec:b5:17:72:d1:9e:7f:ce:ff:30:1f:19:72:
                    82:14:b8:f1:8c:19:34:bd:9c:eb:a5:93:5c:3c:f9:
                    74:7f:01:54:44:5f:67:7c:b9:1c:c6:0a:35:c4:9e:
                    5d:e0:c8:a7:1e:90:49:a3:dc:36:3d:06:87:8e:6b:
                    3d:36:ce:07:9d:2c:b9:11:c7:d5:2d:43:62:56:64:
                    db:af:27:80:36:8f:f2:10:e7:9a:88:f4:02:91:ea:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:FA:DC:FA:5E:72:49:81:76:90:79:45:CC:BA:2C:A0:8C:E1:C7
            X509v3 Authority Key Identifier:
                keyid:4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a3a2f33322d3334203d3e20323635383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:06:a0:89:1f:b4:df:dc:1b:82:c2:80:b6:00:32:3e:a0:
         44:e5:55:6f:dc:47:1b:7e:ca:ce:ef:ea:82:85:cf:79:be:92:
         42:ad:3c:83:3a:a5:66:2d:94:47:8c:3d:c2:59:44:3b:66:49:
         aa:ee:e0:4c:f6:2d:70:7a:bc:34:75:fc:d8:0d:a5:aa:e4:c8:
         71:69:39:21:ba:d4:1a:e4:67:de:1a:ba:9c:50:36:d2:e6:9e:
         ec:00:48:56:5e:5b:af:55:06:7f:a4:3b:c3:0c:e1:a2:45:d9:
         9b:8e:a7:17:b0:c6:f2:eb:0e:32:30:ad:66:4e:95:d5:82:73:
         ca:00:53:b7:5c:d7:36:b2:4d:4b:80:c1:21:3b:88:0f:2e:0f:
         2e:fc:37:bb:f6:59:db:e6:6a:ae:d6:e9:d2:ad:97:22:f0:57:
         85:21:17:ce:ba:9d:0d:7c:a2:eb:4d:7c:b3:1a:0e:f9:e1:5f:
         b7:13:9b:b2:52:54:6b:66:e2:40:ed:7d:ed:3f:46:2e:61:e9:
         05:aa:2e:dc:99:8c:4c:7e:a7:a2:52:57:6a:86:1a:79:2f:aa:
         72:88:34:7f:57:02:a7:c8:70:95:d9:0d:0b:e1:b0:fd:5c:b9:
         c7:75:ad:e6:5c:41:f1:fe:ac:0a:65:53:bb:90:b3:d3:af:6d:
         54:75:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:32 2024 by rpki-client on console-ams.rpki-client.org