Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/323830343a313636343a3a2f33322d3438203d3e20323633323835.roa
File:                     323830343a313636343a3a2f33322d3438203d3e20323633323835.roa (raw, json)
Hash identifier:          eMiEmC/jjBYxk3oD/InOEbiXwpRMiWQLncv5UqxPqF0=
Subject key identifier:   08:E5:33:9B:C6:B3:E6:29:EB:3D:01:2C:1D:D4:5D:CB:D8:8E:0F:1D
Certificate issuer:       /CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF
Certificate serial:       69F21185D00A068100806C5040325C0807805C55
Authority key identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/323830343a313636343a3a2f33322d3438203d3e20323633323835.roa
Signing time:             Thu 04 Apr 2024 09:09:47 +0000
ROA not before:           Thu 04 Apr 2024 09:04:47 +0000
ROA not after:            Thu 03 Apr 2025 09:09:47 +0000
asID:                     263285
IP address blocks:        2804:1664::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl
                          rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f2:11:85:d0:0a:06:81:00:80:6c:50:40:32:5c:08:07:80:5c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF
        Validity
            Not Before: Apr  4 09:04:47 2024 GMT
            Not After : Apr  3 09:09:47 2025 GMT
        Subject: CN=08E5339BC6B3E629EB3D012C1DD45DCBD88E0F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:75:27:1c:7f:d6:83:a8:a2:d9:05:b5:37:
                    51:c3:63:f3:c1:97:28:82:67:de:6d:60:b7:71:16:
                    14:92:81:ca:99:e3:3d:bf:e5:42:8f:e6:d2:a5:9c:
                    d4:63:90:8f:2b:19:f7:56:ab:33:94:1a:ea:61:37:
                    83:b3:01:0f:ee:32:75:54:48:f7:97:2f:7d:6c:5d:
                    8a:50:89:fa:2e:a7:01:08:78:c0:87:30:6b:12:89:
                    eb:48:17:3e:18:15:51:2e:c5:a9:ba:d5:55:e3:80:
                    1d:de:d3:78:f7:ea:fb:d1:88:46:c9:a6:15:fb:f4:
                    32:09:ad:b3:d3:ce:3e:f0:59:e8:3e:e1:f5:45:81:
                    eb:2e:ba:3e:fe:84:72:be:09:c1:90:af:c2:20:1c:
                    a3:0a:91:ed:0f:ac:3e:e4:bc:12:f8:5e:2b:71:e5:
                    ad:d2:45:30:6b:43:e0:7b:34:27:62:ea:46:2c:c2:
                    be:f6:4b:3d:58:76:c8:d5:6a:2a:67:66:11:88:c5:
                    5d:cf:3d:29:d0:b3:51:fd:fa:18:ec:66:34:11:e9:
                    82:05:b0:e2:84:80:66:4d:8a:e9:c3:be:c7:6c:e7:
                    43:9c:55:a7:96:6c:9c:54:98:87:d2:af:ac:d8:eb:
                    9c:b5:58:93:03:95:df:2d:a4:5b:2f:93:a2:f4:7a:
                    a6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:33:9B:C6:B3:E6:29:EB:3D:01:2C:1D:D4:5D:CB:D8:8E:0F:1D
            X509v3 Authority Key Identifier:
                keyid:66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/323830343a313636343a3a2f33322d3438203d3e20323633323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1664::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:6b:a9:53:f7:7d:25:9f:3b:12:fb:87:7a:02:0a:6c:c2:b5:
         ac:45:77:05:2b:15:75:ec:dd:25:f7:ca:51:bf:07:7d:15:03:
         43:d5:43:02:7b:05:d8:56:69:21:a1:4e:aa:57:9d:ee:ec:b0:
         a7:fc:e2:f7:92:6b:c0:eb:7a:80:fb:9f:85:d3:12:70:48:b0:
         7c:a4:d6:da:10:b7:e4:5a:e9:9c:d5:27:19:be:e6:ef:77:9f:
         7d:8f:b3:56:7d:83:41:54:d5:bb:44:d6:a8:64:53:ef:c0:db:
         63:2f:78:fa:1b:d5:76:06:9a:94:ad:a8:23:34:b4:ab:53:ce:
         31:2f:e1:92:c7:78:d5:ac:b1:22:b2:15:96:73:a4:23:79:f3:
         27:fe:bb:70:d6:6d:a9:88:ab:b9:f9:c9:94:3d:ba:9c:b5:88:
         5a:ea:ca:91:42:91:1c:5f:90:58:44:7f:1e:67:10:a6:ee:89:
         45:1d:b9:88:4f:20:c0:de:37:9f:1b:bc:14:52:21:05:f5:f4:
         b5:e3:71:fa:2c:d3:f1:c2:8e:cc:5e:d9:09:9a:08:e8:e6:ea:
         e9:7b:37:17:80:5b:eb:0a:22:d6:3a:16:ab:b4:d2:60:f8:22:
         f6:32:51:4c:ec:39:24:e9:2c:10:51:c5:2f:84:a3:f1:0d:64:
         7b:9d:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:34 2024 by rpki-client on console-ams.rpki-client.org