Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa
File:                     323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa (raw, json)
Hash identifier:          VBVpE2ZwecSHeNo1wswL1zrEt7Uuvd7qMJClJA+ZpOE=
Subject key identifier:   5E:D2:5A:0F:FE:0E:FE:D8:6B:34:B0:5E:9F:A7:6B:5A:1F:C6:74:6A
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       136B8745D64C5CE1B75A65D76F4025E1B978A484
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa
Signing time:             Thu 04 Apr 2024 02:34:38 +0000
ROA not before:           Thu 04 Apr 2024 02:29:38 +0000
ROA not after:            Thu 03 Apr 2025 02:34:38 +0000
asID:                     266635
IP address blocks:        2804:3f08:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6b:87:45:d6:4c:5c:e1:b7:5a:65:d7:6f:40:25:e1:b9:78:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Apr  4 02:29:38 2024 GMT
            Not After : Apr  3 02:34:38 2025 GMT
        Subject: CN=5ED25A0FFE0EFED86B34B05E9FA76B5A1FC6746A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:37:9a:4a:a5:13:ca:5c:53:61:89:bf:a0:
                    8e:d4:16:82:11:69:b2:c5:e9:63:b2:ab:80:93:4c:
                    84:79:cf:1b:cf:51:85:7e:25:b2:20:fd:e4:81:ff:
                    c0:3e:4e:fa:e3:74:9c:37:73:e5:57:60:c0:32:0d:
                    dc:ce:d0:8f:d8:a1:bf:f5:59:53:83:6a:63:f3:d4:
                    1e:8a:5e:f8:f5:69:43:65:81:fa:48:91:7e:e5:50:
                    91:76:c8:a3:ef:75:db:cf:d9:42:ca:ca:db:6f:b4:
                    f4:e8:63:ab:3c:a0:e3:d9:41:96:4e:10:28:d0:6c:
                    45:ef:08:c9:6a:59:d6:02:5f:dc:a0:fb:26:70:22:
                    46:17:82:4c:6d:18:d8:9b:6b:4d:c3:a5:04:ff:5e:
                    c3:dc:5c:d6:2b:c8:d4:03:71:04:37:74:aa:d5:f6:
                    62:dd:5c:da:a3:a7:1b:11:19:5b:6a:bc:95:6d:ff:
                    a4:55:31:cc:51:51:ec:54:37:5e:30:22:04:c4:95:
                    94:7d:4a:31:cb:8e:82:db:3f:25:6b:4d:ae:1f:a7:
                    c0:6b:5e:6a:de:52:4d:26:48:bd:9a:26:c1:a8:06:
                    80:5d:79:26:77:5d:43:76:0a:8f:5e:3d:2d:a4:15:
                    78:d5:d7:af:52:7d:bc:50:53:97:4a:91:3c:af:84:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:5A:0F:FE:0E:FE:D8:6B:34:B0:5E:9F:A7:6B:5A:1F:C6:74:6A
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:33:3c:33:b6:12:f8:a4:d7:a3:72:b0:f2:fc:a8:f3:97:33:
         5f:fa:fb:da:88:73:52:97:41:10:d4:69:11:10:1e:24:fd:15:
         6f:74:a3:6c:02:4f:e7:a3:87:05:f6:98:c3:8e:8f:47:74:60:
         58:99:62:dd:6b:e1:c3:6c:fe:5c:a9:57:eb:14:d3:4f:6b:90:
         19:38:25:fd:53:37:9f:d8:fb:b8:ca:c6:bb:d1:71:ab:7f:3d:
         e6:28:0e:0c:65:aa:ef:3f:1f:a4:2d:63:34:60:0c:3e:a1:bd:
         3e:d8:e7:64:c6:5f:89:a9:4d:fd:28:93:46:d1:57:51:8e:4d:
         ac:76:0b:0e:09:7f:eb:fa:73:1d:07:45:be:3b:36:de:8c:bf:
         65:cd:e8:40:02:cd:ba:4e:1b:9f:aa:33:27:02:9c:93:ef:82:
         6f:21:d0:1e:dd:d7:99:ac:e5:4a:78:12:21:c7:3a:89:33:94:
         c5:40:f1:be:d4:2d:90:0f:35:49:40:5e:46:db:94:ca:d2:b4:
         55:07:94:e7:fb:de:3d:2b:87:72:23:df:c4:85:2d:4f:58:73:
         d4:cd:ca:af:ff:1c:85:15:6f:1f:8b:62:8c:1d:41:05:a1:88:
         d6:bf:b9:23:5a:e1:2b:d1:8a:24:1b:8e:28:2a:d0:c3:b6:cd:
         0e:c1:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org