Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a633030303a3a2f34382d3438203d3e20323635303933.roa
File:                     323830343a333262303a633030303a3a2f34382d3438203d3e20323635303933.roa (raw, json)
Hash identifier:          6Q8ArHjU6gmuSu7GK63J70NmwsONXtraMlbKWsblSJY=
Subject key identifier:   B8:E2:4E:95:9C:BE:05:4F:F5:35:F6:94:A9:C2:F1:C0:C9:6F:BD:59
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       0ED47B5C14AAF2E403B9623F9756C7EA87CAC581
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a633030303a3a2f34382d3438203d3e20323635303933.roa
Signing time:             Wed 02 Oct 2024 00:20:07 +0000
ROA not before:           Wed 02 Oct 2024 00:15:07 +0000
ROA not after:            Wed 01 Oct 2025 00:20:07 +0000
asID:                     265093
IP address blocks:        2804:32b0:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d4:7b:5c:14:aa:f2:e4:03:b9:62:3f:97:56:c7:ea:87:ca:c5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Oct  2 00:15:07 2024 GMT
            Not After : Oct  1 00:20:07 2025 GMT
        Subject: CN=B8E24E959CBE054FF535F694A9C2F1C0C96FBD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:47:97:6f:94:fd:93:a8:4c:9d:2e:66:b9:
                    a9:7a:ae:e4:9e:ca:00:e7:b3:47:ec:db:94:ce:67:
                    11:22:4f:74:a8:c8:43:38:cd:6d:2e:6a:6e:da:57:
                    63:5c:51:2f:ee:35:18:8e:91:6d:aa:03:7a:a2:77:
                    12:f0:30:57:3d:f0:c3:9a:e1:d0:d3:5d:a7:1f:17:
                    b7:80:ad:4c:1c:c7:8a:6f:f6:e6:25:fa:5c:60:af:
                    80:79:59:f3:9f:aa:b3:91:a7:c0:f2:eb:e6:d0:eb:
                    df:6c:c2:f2:a4:e0:db:53:5e:ba:48:64:8d:50:20:
                    94:4e:ad:b3:70:fe:6a:8d:d0:6c:62:7e:cf:bf:2c:
                    d8:d0:0c:9d:0a:84:35:fe:77:a4:d2:8b:ed:8c:e4:
                    59:87:7e:69:6a:0c:25:7e:a2:05:54:c0:0d:0d:fe:
                    eb:b9:9a:e2:37:c5:01:6f:1b:05:b6:1c:8d:20:ce:
                    c7:f9:9b:b6:c0:f8:6d:17:37:08:8d:e0:7b:37:79:
                    b3:5f:e8:4c:3a:42:13:3f:03:79:1b:f6:9f:55:b5:
                    13:4b:a6:2f:88:40:49:e0:86:df:0c:ba:cc:53:d4:
                    ff:69:af:3d:9a:a1:48:4a:38:cd:d6:4a:37:60:eb:
                    ba:a2:bc:2d:9a:60:4e:a4:85:c2:79:ea:bc:15:fc:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E2:4E:95:9C:BE:05:4F:F5:35:F6:94:A9:C2:F1:C0:C9:6F:BD:59
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a633030303a3a2f34382d3438203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32b0:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:00:be:2b:a2:f8:e0:56:c1:e3:a9:93:c4:a0:c8:ac:6b:
         4c:06:1e:b2:9b:5d:a7:b2:98:94:ed:52:4e:55:59:b7:26:45:
         c2:31:4e:fc:22:2d:eb:08:5e:f3:92:64:50:5d:94:92:6c:bb:
         5b:6a:4d:7c:6a:c5:38:35:a0:49:e1:24:8a:5e:b7:bb:2e:f3:
         77:e0:3d:40:71:9e:f1:1d:a1:80:ae:11:08:1c:83:14:58:a8:
         90:7d:99:b5:fc:02:1c:55:11:f0:12:85:8f:84:fc:b9:4a:74:
         70:6e:6c:26:0c:c8:94:6f:0b:43:40:e0:60:55:61:a2:38:1d:
         2f:e2:98:1b:ec:55:c1:16:0a:b2:5c:a8:f9:8c:05:9a:15:c5:
         56:07:52:74:c8:37:56:bc:dc:89:12:e7:f0:2f:56:63:1e:9f:
         d7:c0:d4:d5:b7:0e:54:da:a4:b5:c0:79:a4:0a:81:dc:d7:17:
         47:5c:64:27:b7:0c:74:f7:8d:5e:5f:6c:e7:ec:0c:d4:a7:4c:
         ab:49:73:fa:5d:fe:0f:60:c2:ad:f1:46:8a:1b:6f:11:40:24:
         27:52:f3:e9:ad:07:56:1b:d0:bc:e2:1e:24:6a:6b:d0:44:37:
         c3:b7:bf:a2:a6:e5:b9:35:7d:4c:fe:23:b9:1d:36:97:75:22:
         75:f1:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:14 2024 by rpki-client on console-ams.rpki-client.org