Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a3a2f33322d3332203d3e20323635343632.roa
File:                     323830343a333438303a3a2f33322d3332203d3e20323635343632.roa (raw, json)
Hash identifier:          VEQIKqankt2d9VqaC3LVTv1YDTRp4xztVH4Rtrl/bDE=
Subject key identifier:   8E:09:4C:68:9C:B5:12:AC:89:33:F3:80:6B:EB:C2:96:3B:71:B9:9C
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       3259BEFD25BA98FB5CB1B88465E36409BD07DCF2
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a3a2f33322d3332203d3e20323635343632.roa
Signing time:             Thu 04 Apr 2024 00:50:32 +0000
ROA not before:           Thu 04 Apr 2024 00:45:32 +0000
ROA not after:            Thu 03 Apr 2025 00:50:32 +0000
asID:                     265462
IP address blocks:        2804:3480::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:59:be:fd:25:ba:98:fb:5c:b1:b8:84:65:e3:64:09:bd:07:dc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Apr  4 00:45:32 2024 GMT
            Not After : Apr  3 00:50:32 2025 GMT
        Subject: CN=8E094C689CB512AC8933F3806BEBC2963B71B99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:5c:77:7a:60:33:ce:ba:38:29:c5:f9:ec:
                    b4:52:7b:6b:43:b1:15:ec:b0:b3:17:33:80:a2:c6:
                    2c:04:ca:d9:ce:41:0f:26:78:e8:a4:f9:e2:3e:71:
                    83:fc:eb:af:72:60:f3:f0:8d:82:9e:db:d9:3a:2f:
                    5d:61:8c:65:de:ae:70:a4:7d:7e:8f:8f:1c:4c:e9:
                    be:ba:8d:67:1b:e3:ba:77:28:10:00:a5:12:42:ba:
                    4c:1d:35:42:fa:57:0d:15:93:0a:9d:58:24:f4:ca:
                    4e:85:4b:f1:0b:f2:41:e3:52:ae:d1:33:1f:f5:54:
                    9d:0b:32:bb:fb:7d:6c:eb:10:87:f2:c3:27:28:52:
                    c3:98:48:64:4b:2c:7d:ef:29:06:dc:25:9f:a0:29:
                    b0:8b:6f:40:1b:70:94:5d:dd:ad:3f:53:9b:1a:ae:
                    c9:d9:17:6d:23:79:32:49:76:dd:2b:bf:01:87:50:
                    17:9e:71:ea:c2:4c:7d:85:76:c0:f0:c8:26:f2:d1:
                    b7:e0:a1:a6:85:fa:fe:af:de:c8:f6:53:46:80:b3:
                    61:a1:23:88:85:28:70:8b:69:b6:f8:69:2a:1f:cc:
                    3a:a2:38:e3:f8:cc:cf:72:a1:00:44:46:f4:8d:6b:
                    8b:fa:6e:41:f6:cc:be:11:85:a8:c4:f6:30:cf:e0:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:4C:68:9C:B5:12:AC:89:33:F3:80:6B:EB:C2:96:3B:71:B9:9C
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a3a2f33322d3332203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3480::/32

    Signature Algorithm: sha256WithRSAEncryption
         de:fa:6d:dc:a2:dc:66:5d:54:80:9f:be:8a:25:18:3d:3d:c8:
         b6:14:01:e1:24:b2:03:f1:0f:df:d8:bc:65:0a:e3:ad:64:d0:
         84:9d:b7:ef:a0:f1:26:ac:40:5a:b4:fa:3b:2a:0c:1a:48:53:
         9c:7c:2a:0f:22:95:06:84:19:10:21:aa:05:d5:b4:90:c8:24:
         63:20:f9:67:d6:d2:ba:1d:f8:90:da:af:5b:ab:64:1a:8c:1d:
         dc:d0:49:0e:fe:fb:84:19:de:e3:ae:e9:d5:cf:12:c8:6e:fd:
         94:a3:c3:16:9d:04:54:92:4a:0b:b5:9b:0a:f5:33:f6:25:db:
         85:c0:ce:e8:08:ac:01:0b:c3:c8:36:03:dd:ab:2e:39:c2:14:
         20:58:b6:34:a2:8b:aa:39:7b:16:b9:bd:f6:bf:74:24:38:7f:
         d8:0e:40:b4:28:54:2e:3f:4d:6c:72:ed:95:ab:30:dc:04:77:
         ca:d3:28:e0:2c:6e:ec:fb:6b:76:7c:fc:3f:f6:88:7e:ac:4e:
         fa:d3:d8:ad:78:34:5c:e6:36:d9:a7:cd:f9:d8:95:49:08:cf:
         6e:32:32:13:29:aa:cc:9a:9c:6a:92:83:e2:b6:00:5e:78:56:
         22:ee:00:2a:4a:90:ad:6b:63:b3:88:9d:6a:f6:3c:c3:78:96:
         d8:84:9f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:46 2024 by rpki-client on console-fra.rpki-client.org