Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3333203d3e20323635303933.roa
File:                     323830343a333262303a3a2f33322d3333203d3e20323635303933.roa (raw, json)
Hash identifier:          YVQplHyc9rw9x3WuqVtniAMfwFm5/+Qcsn2Vlg2Pq8Y=
Subject key identifier:   2E:26:3F:9D:B8:C3:2B:E9:96:9D:45:36:3E:B7:1D:CE:71:C7:34:61
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       55C8F32FA341C2FF58DB9D03F9C32DD4B258207C
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3333203d3e20323635303933.roa
Signing time:             Wed 02 Oct 2024 00:21:11 +0000
ROA not before:           Wed 02 Oct 2024 00:16:11 +0000
ROA not after:            Wed 01 Oct 2025 00:21:11 +0000
asID:                     265093
IP address blocks:        2804:32b0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c8:f3:2f:a3:41:c2:ff:58:db:9d:03:f9:c3:2d:d4:b2:58:20:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Oct  2 00:16:11 2024 GMT
            Not After : Oct  1 00:21:11 2025 GMT
        Subject: CN=2E263F9DB8C32BE9969D45363EB71DCE71C73461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:92:ee:d7:d1:c9:6d:44:08:4d:2a:44:6f:
                    9f:7b:41:9e:11:cd:a1:bd:81:ec:d1:8f:a2:1d:48:
                    dc:f0:35:eb:1a:24:29:70:21:77:dc:5c:5d:48:88:
                    92:21:e1:be:c4:f4:7e:67:47:62:19:aa:95:18:7e:
                    44:af:ae:0a:a2:a0:69:d8:b3:05:25:7d:62:9e:db:
                    0d:aa:0d:46:31:cb:4b:cb:86:48:3e:b6:a5:0d:f5:
                    4b:48:34:e7:eb:3d:70:b6:0b:36:7d:8a:24:25:e0:
                    8f:42:38:a8:64:30:2a:65:cb:d6:d7:3b:cc:9a:02:
                    36:f9:0d:b7:e0:77:26:ee:f7:4a:55:35:2a:38:ae:
                    51:32:4a:ae:dd:56:d6:cd:f2:2a:e8:3f:b9:c4:52:
                    16:b3:b0:ea:b5:4a:5d:1c:86:37:ed:d3:87:e3:8a:
                    63:a5:73:b8:bf:85:3a:cb:99:5b:10:a2:4f:c6:bc:
                    6c:98:3a:78:9b:a8:e5:05:53:df:3f:73:cf:9c:d5:
                    3d:cf:68:d9:1b:8a:80:4b:7f:4a:87:21:b9:e5:af:
                    85:f3:80:1e:c4:cc:b0:2c:c2:78:f1:06:f0:ac:ad:
                    c3:4d:48:8c:ea:c3:69:e8:45:a5:94:33:cb:e7:20:
                    eb:91:dc:57:d5:08:27:45:bf:11:57:5a:d8:17:7e:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:3F:9D:B8:C3:2B:E9:96:9D:45:36:3E:B7:1D:CE:71:C7:34:61
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3333203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:8c:ee:06:f8:ff:09:1e:92:15:ea:7b:5a:d6:a9:52:fb:0d:
         4e:ed:d0:88:5f:54:a0:c7:b6:54:31:e5:a7:91:3c:c0:02:1f:
         21:e9:5f:d5:47:55:31:d3:80:29:d3:17:20:21:93:a5:7a:c1:
         72:23:72:1a:78:63:a2:72:f1:46:6f:26:93:15:9d:76:60:d5:
         c2:29:72:ea:b1:90:fb:97:be:af:26:22:9f:41:8c:fb:0c:39:
         fe:11:f9:cf:86:25:17:b8:81:fe:5a:7d:03:63:c9:d1:37:85:
         4f:78:8a:53:97:1f:d1:c7:56:f8:16:48:d5:a4:52:48:b6:ff:
         65:16:d1:d9:54:ab:b0:47:f4:b4:be:d4:72:9e:9a:4a:23:63:
         5b:90:85:d7:0e:00:fa:57:ec:6b:d7:65:7e:24:80:2a:e6:21:
         e3:ab:ba:5d:c1:80:3e:13:8c:3e:6f:a1:92:ac:4a:e3:8e:81:
         6e:65:79:0c:fa:f0:49:a9:b0:03:16:0b:98:5d:e2:13:ec:69:
         be:cc:84:67:c3:4b:f9:b4:9b:fe:47:72:c0:4f:ad:2b:92:65:
         73:00:f0:75:69:5d:c0:4d:30:6a:73:ba:9f:28:a3:94:f0:17:
         d1:52:0a:01:77:e2:c5:63:0f:4c:91:13:ef:c4:64:f1:50:bf:
         b9:44:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:14 2024 by rpki-client on console-ams.rpki-client.org