Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/323830343a316463343a3a2f33322d3438203d3e20323634333932.roa
File:                     323830343a316463343a3a2f33322d3438203d3e20323634333932.roa (raw, json)
Hash identifier:          3apqy/VehE5Vy0QMV/np867Sh9hbXr+YZ8VnhJsggdI=
Subject key identifier:   7F:A7:45:85:D2:47:E7:DA:60:EE:AA:98:CB:26:A9:87:6D:DD:89:2C
Certificate issuer:       /CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
Certificate serial:       71C0BF14B930643FDED2442471563290FC00F562
Authority key identifier: 69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/323830343a316463343a3a2f33322d3438203d3e20323634333932.roa
Signing time:             Thu 04 Apr 2024 06:27:43 +0000
ROA not before:           Thu 04 Apr 2024 06:22:43 +0000
ROA not after:            Thu 03 Apr 2025 06:27:43 +0000
asID:                     264392
IP address blocks:        2804:1dc4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl
                          rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c0:bf:14:b9:30:64:3f:de:d2:44:24:71:56:32:90:fc:00:f5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
        Validity
            Not Before: Apr  4 06:22:43 2024 GMT
            Not After : Apr  3 06:27:43 2025 GMT
        Subject: CN=7FA74585D247E7DA60EEAA98CB26A9876DDD892C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:35:a8:0d:67:6b:9c:a1:bd:fb:33:fc:5b:
                    f4:48:c6:bc:bd:28:a6:4e:fe:45:29:21:f0:68:c1:
                    90:a1:de:ef:9d:18:f4:c6:fb:52:8d:6a:31:12:3b:
                    b6:2e:7b:84:fa:76:c5:98:c5:c2:90:91:e5:99:04:
                    9d:1a:b1:f6:de:0c:cc:91:68:45:fa:b1:a3:05:0f:
                    b1:d7:73:90:5d:3f:07:e8:63:6f:15:1b:98:7c:78:
                    28:72:07:ea:54:20:9d:5a:04:7f:e2:ac:8a:31:41:
                    50:d5:30:8d:2b:db:86:fc:70:5c:20:33:14:ce:ce:
                    6f:a9:96:75:f9:b1:61:01:3b:59:7e:00:66:e5:20:
                    74:71:f4:56:19:e0:d4:be:be:eb:3a:62:83:26:31:
                    e4:39:2d:45:24:55:03:0b:41:aa:10:d4:19:e7:9e:
                    14:6e:3f:98:2f:ef:93:a0:ef:b2:d0:1c:a3:3c:72:
                    20:16:18:a5:d2:32:70:4e:59:7d:20:90:18:81:eb:
                    08:d7:d4:97:70:31:2d:7e:d2:64:cc:24:b2:b0:5a:
                    ff:45:87:a5:0f:ec:99:ae:76:9a:93:78:5b:b2:58:
                    50:b4:6e:43:6c:c9:d9:f0:aa:f4:ff:62:df:a1:37:
                    65:e7:fc:b5:6f:63:fb:c5:ac:9d:62:03:2c:cd:da:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:45:85:D2:47:E7:DA:60:EE:AA:98:CB:26:A9:87:6D:DD:89:2C
            X509v3 Authority Key Identifier:
                keyid:69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/323830343a316463343a3a2f33322d3438203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:8e:0b:83:23:89:30:f2:69:44:20:52:74:e7:b8:91:80:f4:
         4d:30:a7:03:00:5f:9e:20:65:5c:e9:2d:70:7d:4c:fb:84:c9:
         51:8f:d4:17:fb:5e:44:1b:b5:85:f1:d3:7e:7e:b3:3c:9b:1e:
         bb:ba:c4:0a:80:96:af:50:5d:d1:92:ee:01:7d:d8:a2:fa:7e:
         92:15:63:be:ee:27:27:c3:29:f9:88:b9:e3:90:24:66:ce:56:
         c9:cc:9d:6d:27:e9:7d:3a:17:f0:97:21:72:c9:ee:eb:10:29:
         7a:7c:c3:ea:12:d5:f2:c4:ca:07:37:da:97:e2:68:3d:9d:c2:
         18:2c:d9:7e:ec:2d:3a:a0:9b:82:bb:3a:cf:37:60:3d:8a:91:
         c1:fc:75:b8:43:07:0c:14:0a:f0:85:8f:76:23:8f:e2:e3:8f:
         c1:6a:89:cd:99:92:76:ea:1c:b5:75:65:aa:ec:89:70:b9:a5:
         92:88:b8:f1:8e:fc:47:c1:de:ab:78:8d:59:61:f4:52:6a:d9:
         c0:de:28:97:88:aa:93:fc:32:1d:d1:2c:13:08:31:53:0a:0d:
         cd:52:bd:11:2c:f7:72:d2:d2:ee:b3:24:4d:79:3d:35:a6:47:
         b2:aa:98:6c:1e:e7:6d:9b:8a:54:af:e0:cf:a5:5f:7b:e1:dc:
         f4:2c:c8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org