Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/323830343a6165303a3a2f33332d3333203d3e203238333532.roa
File:                     323830343a6165303a3a2f33332d3333203d3e203238333532.roa (raw, json)
Hash identifier:          am7lMVHJ3ZokC5NgqbpbMAY8FTz3QXeeF/VxXBznzGY=
Subject key identifier:   6E:0B:F6:7A:BD:96:B7:D0:D6:C7:B3:DE:44:19:CD:03:B5:ED:C5:1A
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       1052CA801B99F30C593CD7BB35E6F88E8C8B2974
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/323830343a6165303a3a2f33332d3333203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:49 +0000
ROA not before:           Thu 04 Apr 2024 10:11:49 +0000
ROA not after:            Thu 03 Apr 2025 10:16:49 +0000
asID:                     28352
IP address blocks:        2804:ae0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:52:ca:80:1b:99:f3:0c:59:3c:d7:bb:35:e6:f8:8e:8c:8b:29:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:49 2024 GMT
            Not After : Apr  3 10:16:49 2025 GMT
        Subject: CN=6E0BF67ABD96B7D0D6C7B3DE4419CD03B5EDC51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:67:a3:a7:df:bd:13:5b:cf:1d:b5:8f:b5:
                    14:0d:8c:d1:42:06:44:ae:1c:a4:14:d0:ef:30:1c:
                    20:e4:2c:70:d3:b1:12:03:08:40:c6:7a:ce:91:af:
                    98:6e:ca:38:d2:62:b4:13:2c:de:a7:5f:11:36:05:
                    42:8a:8c:7a:96:fc:11:2f:3c:5e:30:97:0c:2e:95:
                    8b:a1:18:54:b8:11:f3:19:72:f6:4b:00:d5:a6:67:
                    d5:f4:70:99:11:b0:8e:75:e9:6e:0d:f8:37:96:28:
                    96:fa:f9:2f:df:db:13:26:df:c3:09:7a:4d:6c:6f:
                    d5:f6:1b:81:8c:97:a5:43:98:17:cf:30:43:07:6e:
                    8c:83:bc:0f:49:c2:a9:78:fb:dd:83:01:c8:ff:92:
                    16:a6:6b:ee:07:1d:31:ea:b0:15:9c:41:c9:20:6f:
                    74:36:6d:c5:2f:ad:81:5b:19:92:ac:3b:70:20:21:
                    af:93:7c:b5:36:d2:d6:27:ce:30:d9:c3:9d:74:21:
                    52:19:55:d5:0f:9d:16:2d:fd:98:10:fb:18:a1:8a:
                    8e:5a:84:b5:80:54:4c:91:b5:02:bf:5a:c3:55:91:
                    3e:e6:a4:6d:c6:88:09:a2:63:c1:b9:8b:c6:43:80:
                    cc:6e:8d:d8:8e:db:74:ea:b7:99:43:a8:73:63:22:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:F6:7A:BD:96:B7:D0:D6:C7:B3:DE:44:19:CD:03:B5:ED:C5:1A
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/323830343a6165303a3a2f33332d3333203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:fd:b0:2f:e5:8f:a2:3b:75:68:e5:2a:de:6e:82:e0:ac:1f:
         d6:e2:d7:4d:17:de:1c:46:86:08:2f:b8:8a:d7:45:1e:3d:58:
         ce:54:be:9d:4b:8d:90:5d:99:5e:8f:05:32:71:2a:bd:ef:a6:
         9c:62:f5:ce:71:0c:c7:57:eb:92:07:d0:7f:7e:ed:07:8e:21:
         af:4c:70:85:33:e9:29:e4:2e:7b:7f:63:e9:82:f5:c6:63:a2:
         8f:b1:20:e9:ad:f0:c1:dc:79:3a:2a:1e:af:62:b1:54:df:0b:
         8d:09:c7:72:b7:47:a2:51:ea:9c:de:49:ce:ae:96:e9:1f:46:
         f9:45:f5:bb:93:4f:45:28:ba:5b:87:70:e6:c8:05:97:36:c8:
         57:42:d6:f0:13:1d:f9:06:11:1f:d3:74:a3:29:2d:8a:bf:5e:
         76:b0:eb:14:33:b7:b7:67:03:0c:3c:c7:bf:d2:b4:76:d7:f8:
         93:b8:f7:50:43:03:69:bb:37:cd:3b:c1:b1:94:f6:4c:de:a4:
         89:1a:42:6d:92:7d:e6:cb:24:bf:cd:80:74:b6:23:58:04:c8:
         00:37:7f:bf:16:62:a1:a1:e9:8f:92:e5:62:54:01:b9:c3:77:
         05:6d:63:83:6e:73:5c:de:20:84:e8:4b:87:3b:69:e5:c3:2b:
         95:8c:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org