Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa
File:                     323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa (raw, json)
Hash identifier:          ssUYsM8zWQ+CM3ZnA0+rCPgKUoE5iKFL6SYUGn0Hxjc=
Subject key identifier:   D5:B7:39:5E:84:8C:F8:42:CA:DA:BE:A6:E8:6C:A6:7B:D5:38:AF:EB
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       37DEF607D032A5A90F63480F5C8E80F587942D7B
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa
Signing time:             Thu 04 Apr 2024 04:01:09 +0000
ROA not before:           Thu 04 Apr 2024 03:56:09 +0000
ROA not after:            Thu 03 Apr 2025 04:01:09 +0000
asID:                     267329
IP address blocks:        2804:4bc8:a00::/40 maxlen: 50

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:de:f6:07:d0:32:a5:a9:0f:63:48:0f:5c:8e:80:f5:87:94:2d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Apr  4 03:56:09 2024 GMT
            Not After : Apr  3 04:01:09 2025 GMT
        Subject: CN=D5B7395E848CF842CADABEA6E86CA67BD538AFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:60:62:a6:a0:63:70:55:cd:97:97:7d:3b:
                    e4:95:5b:b2:b6:c2:34:fb:17:5b:88:d7:02:16:89:
                    b2:6c:d5:73:40:61:b1:a5:d5:a2:dc:a4:92:31:ff:
                    e4:33:64:de:90:39:ef:6f:41:5c:03:f6:44:e1:fe:
                    07:d3:de:13:ab:0a:c6:21:c7:da:7d:dc:a3:ae:45:
                    87:ea:c1:cc:ae:19:26:1d:3c:00:cc:01:c4:66:f0:
                    78:cc:03:5b:de:69:b2:e4:b1:5b:3d:41:f0:de:94:
                    c8:99:ba:28:27:92:31:70:24:fc:8d:73:25:b0:98:
                    dd:63:32:6e:5e:c2:e6:c2:a1:ed:26:e8:9c:95:23:
                    df:4a:38:2e:ae:91:93:50:26:1f:8b:13:03:40:13:
                    99:90:21:67:66:92:fa:37:64:48:c2:3f:37:48:f1:
                    ba:13:f2:50:bd:e5:79:70:ce:47:56:b1:fe:aa:9d:
                    0d:5f:9d:11:18:a5:6b:6f:8e:46:0c:36:a7:b1:9e:
                    af:19:cc:cb:13:fc:f4:f4:f7:fd:ca:42:61:e0:8b:
                    88:56:33:ab:e6:6b:16:00:05:e3:50:dd:ab:e4:44:
                    87:36:37:90:3b:e1:6e:d9:f8:73:cf:54:62:3c:cc:
                    a9:eb:bc:81:56:8a:c7:5b:47:b0:e3:51:89:4e:53:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B7:39:5E:84:8C:F8:42:CA:DA:BE:A6:E8:6C:A6:7B:D5:38:AF:EB
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:bc:67:3f:50:ba:c3:ab:8f:1c:77:67:93:5b:78:e5:72:94:
         09:e3:a3:67:38:fe:ff:1f:2f:56:74:14:bf:d4:9e:8d:7c:f0:
         eb:25:b4:e9:5e:61:fc:ea:b2:47:24:0e:b3:2e:a5:85:53:c5:
         35:ce:01:e9:1d:13:02:dd:82:f8:18:45:b2:82:26:75:3b:ad:
         13:2c:78:c8:eb:11:fd:0b:5c:58:5d:3d:a0:0d:53:4c:22:ac:
         63:bd:bd:9b:b5:bd:18:c9:d3:24:af:1b:fd:08:99:77:13:96:
         3e:99:3f:ae:ab:46:85:b5:ae:90:31:77:f6:85:ae:38:e5:69:
         b4:88:89:11:64:99:90:71:9b:71:3e:5d:70:36:61:ed:f3:fe:
         07:b9:77:df:fe:ac:7c:98:4e:fb:f8:ad:43:85:31:85:f7:9f:
         4d:ce:6b:47:b2:e0:8d:58:d8:73:56:b6:25:26:17:c5:d2:60:
         b9:7f:7f:34:42:23:1f:d3:41:c7:e0:67:d4:d2:20:5e:9b:9b:
         58:ba:c6:2e:54:66:cc:53:90:38:7f:5f:bb:44:91:51:f9:00:
         2b:52:32:4d:d2:6d:73:fa:bb:42:fa:a9:95:44:25:d8:3d:51:
         cc:be:cb:fe:76:c4:59:d5:1b:01:c2:72:53:1f:38:45:7b:b7:
         bd:46:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org