Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          oQqJOnvPjmqdcWcxC/t8JRTrTaWwIg0kvb38b+byyjU=
Subject key identifier:   DF:07:ED:40:C8:A1:13:20:AD:EB:A9:E4:E5:9A:76:02:94:8E:37:FC
Certificate issuer:       /CN=731D49CB201358EE9CDBEE917EC25CF59E02A3B2
Certificate serial:       1F64CA179C58FEC1D04B74EF1D3689C4F9C7CB79
Authority key identifier: 73:1D:49:CB:20:13:58:EE:9C:DB:EE:91:7E:C2:5C:F5:9E:02:A3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Fri 01 Nov 2024 00:56:54 +0000
ROA not before:           Fri 01 Nov 2024 00:51:54 +0000
ROA not after:            Fri 31 Oct 2025 00:56:54 +0000
asID:                     265393
IP address blocks:        2804:3364:8200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:64:ca:17:9c:58:fe:c1:d0:4b:74:ef:1d:36:89:c4:f9:c7:cb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731D49CB201358EE9CDBEE917EC25CF59E02A3B2
        Validity
            Not Before: Nov  1 00:51:54 2024 GMT
            Not After : Oct 31 00:56:54 2025 GMT
        Subject: CN=DF07ED40C8A11320ADEBA9E4E59A7602948E37FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:8c:de:f7:45:a7:1d:3b:d6:3c:bb:bf:15:
                    a1:18:75:6c:78:4c:a3:5f:4e:3b:0d:14:ba:d0:67:
                    43:2d:14:af:75:4a:63:eb:6a:54:a5:ff:9e:90:c0:
                    bf:2b:f9:08:ca:a1:15:81:52:a6:43:32:40:a6:a4:
                    76:2c:53:9e:0c:94:43:d9:ac:80:ac:df:31:51:37:
                    8c:15:da:dd:eb:68:18:b1:5c:63:44:2c:f3:3b:cf:
                    23:d0:e8:03:04:6c:ca:1c:2f:08:d7:bc:3d:11:39:
                    a9:14:7e:2b:04:76:b9:c7:ae:b5:f5:a2:a6:e3:28:
                    fa:28:a3:5d:d1:c5:30:5a:f6:c6:b6:9e:c0:ce:e8:
                    f1:59:88:89:3c:e4:52:f5:61:66:5c:7a:22:87:6c:
                    b7:15:d3:f0:49:f9:1c:06:93:55:b8:d9:c6:49:9e:
                    eb:71:19:32:08:3c:75:ae:32:48:d0:c7:df:02:a1:
                    36:29:1d:93:2b:e5:b5:16:ec:1d:c3:48:6f:6a:7f:
                    57:4a:f4:6f:cf:66:6f:e6:e8:aa:88:df:29:08:40:
                    40:1d:4a:c6:ea:b4:44:88:89:c5:3b:fd:f1:dd:7d:
                    10:53:18:62:cd:e9:43:2d:31:00:2f:a4:b9:80:dc:
                    0c:a5:ab:d2:3c:a3:bc:bd:5e:fa:26:de:72:48:73:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:07:ED:40:C8:A1:13:20:AD:EB:A9:E4:E5:9A:76:02:94:8E:37:FC
            X509v3 Authority Key Identifier:
                keyid:73:1D:49:CB:20:13:58:EE:9C:DB:EE:91:7E:C2:5C:F5:9E:02:A3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:e3:8e:1b:bd:f4:86:6a:00:9e:0b:fe:31:4c:99:62:ba:04:
         7b:6d:2d:8c:ef:e1:cd:36:12:e1:3c:ba:fb:3e:7e:ee:d5:51:
         c8:4b:1f:ef:88:de:53:da:76:0e:fe:f4:05:28:18:6f:80:06:
         8c:77:af:75:79:ec:2f:0f:f8:a5:84:a6:76:ba:29:51:51:43:
         9d:9f:c0:07:52:0f:84:81:28:80:4f:de:42:3b:e3:5a:27:bf:
         95:a9:de:5c:2f:ae:39:b9:a4:dc:de:38:c4:f4:c8:3f:91:c9:
         08:6f:9e:85:0e:27:1f:3b:5e:c3:05:26:e2:82:7b:ac:4b:41:
         83:4a:a4:05:82:02:79:8b:17:02:bb:45:76:74:b8:8a:d4:46:
         86:f9:59:56:2d:9b:89:af:07:c5:46:6d:90:1a:ba:bf:77:14:
         b4:9e:c7:90:2f:65:97:1a:0a:8b:93:91:6f:ed:83:2f:a9:d9:
         4a:74:99:36:ed:cb:1c:17:72:70:57:a9:96:2f:3e:d7:3a:fe:
         14:df:e0:d6:9d:04:ba:bc:b4:1b:5b:b3:41:e1:74:53:43:8e:
         c4:c0:5d:3c:59:e0:f7:81:24:db:bf:44:68:a7:41:46:45:ce:
         bb:4c:45:9f:0d:ef:93:75:2e:86:e9:03:6b:1c:6f:82:6b:d5:
         a1:42:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:11 2024 by rpki-client on console-fra.rpki-client.org