Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa
File:                     323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa (raw, json)
Hash identifier:          0/mX6vYCCSpArK+IDzCtGxR4Swp3GVMjPXGka7zt0ys=
Subject key identifier:   65:32:21:A7:2A:EA:38:78:49:F7:1B:04:70:E8:31:52:28:D0:02:93
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       1FB2CBBF21BD45F3075D8A8FA1123F6F742AF6C8
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     268744
IP address blocks:        2804:0:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b2:cb:bf:21:bd:45:f3:07:5d:8a:8f:a1:12:3f:6f:74:2a:f6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:90:75:6d:5e:64:a5:5f:67:3f:85:25:f9:
                    51:9f:f9:cd:85:1c:fe:8a:73:76:40:b3:91:9a:0f:
                    9d:03:da:0d:29:53:d4:a7:27:d8:5b:e9:71:34:51:
                    b0:9d:a8:69:ea:d1:cc:e6:eb:6f:28:53:99:1e:5c:
                    40:e6:09:67:00:6d:14:e4:c6:87:90:13:50:16:27:
                    96:bb:6f:83:e0:09:a8:27:07:96:77:5e:86:17:e2:
                    23:62:1f:a0:9c:f8:f1:ae:10:1f:69:88:93:5c:8f:
                    79:d3:b3:fb:66:da:b9:29:bc:88:1e:67:eb:81:02:
                    1e:cd:f3:da:7f:f8:74:05:b6:78:3a:5f:e5:4a:0d:
                    a5:4f:e3:83:65:92:b5:2d:d6:40:5a:02:4a:02:9e:
                    d7:7b:77:69:3c:ab:5f:b1:5f:95:83:83:09:b2:fc:
                    6e:4c:3d:7c:f2:3e:ff:62:a3:6a:3e:1c:14:49:35:
                    40:ca:09:7d:69:e4:55:3d:95:1f:92:ad:3c:7b:db:
                    69:40:da:26:a1:b7:12:ea:6d:0b:96:64:54:03:a2:
                    66:a9:72:40:b3:ee:3a:8a:de:86:d9:51:5b:e9:0b:
                    b9:68:e0:be:e4:dd:72:89:ff:a9:0a:b8:dd:d1:9b:
                    c8:a3:69:c4:c0:6a:b5:b1:ba:9e:fd:83:cc:db:15:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:32:21:A7:2A:EA:38:78:49:F7:1B:04:70:E8:31:52:28:D0:02:93
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:53:3a:72:01:cb:45:bf:c3:c4:fc:07:1a:71:df:00:f1:e1:
         fe:d2:e5:38:7c:55:47:3b:48:7e:06:30:49:c6:53:40:4e:3d:
         9b:c8:11:c9:0f:93:47:73:26:32:16:03:51:e0:69:f3:db:8d:
         f9:6b:af:f2:f2:a0:a7:0c:fd:4f:23:9d:cf:d8:36:8c:b1:42:
         22:d4:72:17:da:4d:4c:02:bc:e4:3c:db:91:15:5b:8d:cf:38:
         d2:24:25:fd:bb:74:c6:46:06:4d:2e:24:40:ec:d1:ea:ef:43:
         33:55:26:82:86:d7:f3:a1:fe:62:36:ae:18:d8:61:b1:33:cb:
         fd:41:01:f8:6d:28:bb:24:84:c4:0f:98:4d:ef:d7:8a:5c:d5:
         25:51:39:31:0b:2e:6b:80:c2:55:b7:4d:81:d7:ab:98:df:f7:
         81:7e:e5:31:53:02:e9:7f:97:eb:27:e5:cf:b6:72:18:fc:b1:
         02:42:f2:2f:35:91:d3:64:fa:64:6e:14:b3:ea:39:d5:30:c1:
         16:a3:a9:1d:aa:35:3f:f3:89:24:4d:c6:14:81:19:f1:2d:5e:
         33:0b:ae:e5:fc:79:3b:26:02:61:04:7e:62:b9:d1:fb:02:dc:
         5c:a7:f7:52:39:b6:3b:cd:56:38:66:43:8a:28:3c:56:f3:95:
         ad:2b:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org