Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/323830343a323939633a3a2f33322d3438203d3e20323634303235.roa
File:                     323830343a323939633a3a2f33322d3438203d3e20323634303235.roa (raw, json)
Hash identifier:          /qh6j5qzm2fjotua1I+C8JBZ/JCQF6ya5RM+hUkn0aA=
Subject key identifier:   44:33:66:16:AF:5B:DF:9A:59:3D:2D:40:BE:4A:CC:BA:E2:B4:26:BC
Certificate issuer:       /CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
Certificate serial:       31137D2652D2564DD8B8835CF923AAA18A6C8F44
Authority key identifier: E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/323830343a323939633a3a2f33322d3438203d3e20323634303235.roa
Signing time:             Thu 04 Apr 2024 00:29:03 +0000
ROA not before:           Thu 04 Apr 2024 00:24:03 +0000
ROA not after:            Thu 03 Apr 2025 00:29:03 +0000
asID:                     264025
IP address blocks:        2804:299c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 13:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:13:7d:26:52:d2:56:4d:d8:b8:83:5c:f9:23:aa:a1:8a:6c:8f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
        Validity
            Not Before: Apr  4 00:24:03 2024 GMT
            Not After : Apr  3 00:29:03 2025 GMT
        Subject: CN=44336616AF5BDF9A593D2D40BE4ACCBAE2B426BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:59:23:d3:45:c3:47:d3:fb:c9:a9:8a:54:45:
                    55:1d:f0:8c:2e:54:42:e5:8d:8c:ce:ac:2b:2a:23:
                    e9:fe:94:c8:8b:7b:d4:24:c3:4f:98:78:47:a0:c6:
                    15:a7:a2:f6:6b:47:45:b0:9e:aa:e7:e8:8e:1c:b0:
                    8f:47:0c:86:24:66:db:bd:59:50:d4:fc:38:77:38:
                    54:68:59:4e:db:9f:a5:ba:23:8f:8c:04:e7:63:6e:
                    3b:d0:68:ec:03:61:4f:3b:b6:d4:87:ba:49:f7:e0:
                    90:d4:2c:74:ca:18:97:02:6a:8a:b6:03:6b:de:5c:
                    44:fd:ec:66:56:26:33:ba:f5:a3:80:a7:53:a5:1d:
                    23:1d:89:6f:71:7b:a1:b1:5a:af:f1:12:99:06:bd:
                    7f:f3:c2:02:76:eb:83:c8:29:6a:bf:6d:a4:94:cc:
                    d1:44:bf:0a:5d:a5:19:2d:cd:9f:94:de:83:91:37:
                    be:2e:df:d1:d7:3e:79:d9:e3:42:57:6e:6d:31:63:
                    05:c7:e9:13:ad:64:4b:af:68:d4:a1:81:5d:7f:fb:
                    3b:9b:b2:8f:8f:57:d0:41:98:f6:e0:3c:c5:6a:13:
                    d5:53:e7:bc:4d:51:dd:bb:0a:71:7e:2b:33:49:1b:
                    95:4e:f1:2f:18:17:ea:28:85:a6:61:7e:16:7c:c2:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:33:66:16:AF:5B:DF:9A:59:3D:2D:40:BE:4A:CC:BA:E2:B4:26:BC
            X509v3 Authority Key Identifier:
                keyid:E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/323830343a323939633a3a2f33322d3438203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:12:49:94:c3:20:04:bf:70:69:2f:d8:77:7e:a8:72:ce:73:
         e4:5f:7f:f9:60:48:76:0d:a6:24:86:94:2c:7c:74:5f:57:f1:
         d4:7f:8f:b0:21:1a:4b:1b:1d:32:9d:7d:39:59:5c:29:bf:74:
         24:59:b6:91:d4:53:45:f6:d4:b9:50:cc:0c:58:d3:04:60:d6:
         6c:50:36:86:68:4b:b1:d2:fc:f8:2f:d0:69:97:cc:eb:ab:3b:
         29:a3:1e:fc:62:dd:a5:c6:44:41:74:30:b0:aa:00:f3:b6:00:
         da:f8:e9:6e:ee:68:2f:f5:5d:60:14:4f:c2:fb:b7:29:4b:4d:
         f7:d0:dc:6e:22:84:6a:f9:38:a7:df:52:aa:94:e0:40:00:50:
         d8:53:ce:aa:37:b0:80:4d:7b:07:df:73:55:12:69:6e:9c:81:
         c5:81:30:e1:a3:fb:93:ae:9c:f9:75:56:a1:d4:11:77:96:f6:
         28:73:a1:da:97:dd:93:f2:98:2c:89:0a:1b:19:4c:9c:85:b4:
         12:8b:73:94:0f:63:bc:4c:85:2d:11:39:5c:03:e7:9a:00:ad:
         6e:d3:8a:db:aa:bc:24:78:93:4e:c7:46:ab:69:cf:2f:1f:d5:
         b9:73:b4:c9:92:64:37:f3:a7:03:af:ff:76:ea:96:32:7b:a5:
         78:7d:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:47:27 2024 by rpki-client on console-fra.rpki-client.org