Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a3a2f33322d3438203d3e20323632333136.roa
File:                     323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          q8y18T/cZ0wq8rBp5y9YkJ8i/Tb1hTdYdSmC4bye+V0=
Subject key identifier:   EA:18:D1:3D:02:28:6B:0E:03:04:A5:5B:6C:75:F6:C2:7F:00:D0:7F
Certificate issuer:       /CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
Certificate serial:       2EA4415D7963F086A6C9A77964F0DFFA908CD02E
Authority key identifier: 21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a3a2f33322d3438203d3e20323632333136.roa
Signing time:             Wed 06 Nov 2024 20:47:11 +0000
ROA not before:           Wed 06 Nov 2024 20:42:11 +0000
ROA not after:            Wed 05 Nov 2025 20:47:11 +0000
asID:                     262316
IP address blocks:        2804:7c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a4:41:5d:79:63:f0:86:a6:c9:a7:79:64:f0:df:fa:90:8c:d0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
        Validity
            Not Before: Nov  6 20:42:11 2024 GMT
            Not After : Nov  5 20:47:11 2025 GMT
        Subject: CN=EA18D13D02286B0E0304A55B6C75F6C27F00D07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:df:46:64:2a:e9:34:a8:ee:3f:3f:bd:3a:
                    8d:29:e3:48:45:a2:af:16:1f:e3:94:8f:8a:d7:85:
                    f7:fe:e8:62:f5:c2:a3:6e:5c:95:dc:52:01:78:2d:
                    e6:5f:0d:71:22:b5:72:2b:37:cb:64:fa:0b:22:68:
                    52:b7:31:5c:87:14:7f:50:bc:00:28:27:e4:ef:8d:
                    b4:ca:21:3c:18:ea:a5:ab:65:1f:e8:76:70:7f:e8:
                    be:8f:71:b8:37:da:7c:73:b4:20:f5:6f:f4:57:7f:
                    14:46:d3:38:cc:c7:c0:4f:5d:c8:ce:b1:98:cc:bf:
                    52:38:c8:9f:7f:70:3b:4d:dc:53:74:2d:3d:94:05:
                    7e:25:9f:39:21:4a:34:ae:17:15:3d:3c:74:61:bd:
                    c9:4d:fd:55:51:9f:67:6e:ee:bc:db:64:2e:20:f4:
                    3c:0b:2e:08:75:23:47:25:de:ef:32:c5:de:d7:1e:
                    1e:8a:a6:14:cc:c8:84:55:47:fa:45:c5:66:9d:0e:
                    c1:d9:53:9c:b2:19:29:7c:0d:44:ab:06:68:c4:3a:
                    00:89:f8:7a:bd:7c:df:80:7e:b2:72:2f:aa:c9:3a:
                    bb:04:ac:38:a8:7e:0e:2b:88:cf:d3:b9:c4:41:da:
                    84:c0:d6:ad:31:fe:44:a9:9a:7a:73:f5:77:34:be:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:D1:3D:02:28:6B:0E:03:04:A5:5B:6C:75:F6:C2:7F:00:D0:7F
            X509v3 Authority Key Identifier:
                keyid:21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a3a2f33322d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:21:d2:b9:bc:47:cb:d1:44:23:96:5b:ea:43:8b:1f:d9:fa:
         09:22:fa:f6:57:55:63:41:cc:60:3a:5c:9e:0f:a5:0d:8e:d7:
         75:6d:ee:cd:f2:e7:f9:a1:8e:ef:f0:6b:65:d8:b8:e7:4f:02:
         b0:44:7c:b2:bd:59:d1:6a:1f:9b:48:8c:84:4c:5b:cb:76:6a:
         d4:43:7d:c8:02:09:2d:bb:11:f3:d4:47:b6:d4:51:63:82:bf:
         dc:ad:5a:61:d2:47:85:c2:83:64:84:6b:05:39:41:80:be:07:
         a6:9c:a1:a3:9d:36:4d:a1:15:61:e7:b7:22:8b:0e:3e:4b:ef:
         de:2e:c9:b6:b7:54:b1:b8:16:90:3d:5c:b3:fb:7a:de:26:73:
         f8:f9:af:d6:78:b1:18:58:49:60:91:be:01:61:6c:61:77:d3:
         6d:b2:20:06:60:35:d8:77:0a:ed:20:46:ac:90:5c:5f:b9:9b:
         0f:33:75:f0:38:a5:e6:ff:17:87:e4:4e:b5:be:80:d0:e5:46:
         a0:92:84:24:d9:0d:58:0a:40:22:6f:29:e5:46:9e:e8:d3:32:
         f3:96:f3:d6:12:f6:cb:77:f3:67:65:e1:72:d1:3b:bb:3b:d5:
         94:f5:89:99:e6:e6:6e:71:28:8c:ea:3a:cb:85:46:d3:a5:e2:
         04:16:17:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:53 2024 by rpki-client on console-fra.rpki-client.org