Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/323830343a336338303a663162313a3a2f34382d3438203d3e20323636323136.roa
File:                     323830343a336338303a663162313a3a2f34382d3438203d3e20323636323136.roa (raw, json)
Hash identifier:          OgRg7YJMvPZKtGKrF3ZRhEeFmcfvmYMKoi5TkISLR70=
Subject key identifier:   29:45:B3:78:0C:C0:EC:8B:C0:3D:33:0B:96:54:33:FF:F1:C0:5B:BF
Certificate issuer:       /CN=7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1
Certificate serial:       3530F548F829C1E90329BADBC4F0FC497EF81062
Authority key identifier: 7F:D9:3E:2C:B5:E8:55:00:D9:02:F1:5C:B4:1F:89:2D:C4:D6:D7:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/323830343a336338303a663162313a3a2f34382d3438203d3e20323636323136.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     266216
IP address blocks:        2804:3c80:f1b1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.crl
                          rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 14:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:30:f5:48:f8:29:c1:e9:03:29:ba:db:c4:f0:fc:49:7e:f8:10:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject: CN=2945B3780CC0EC8BC03D330B965433FFF1C05BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:8e:a2:6d:34:1c:58:d9:7b:77:00:0d:3e:
                    01:a6:32:8d:9d:24:37:94:c6:ef:7e:04:2e:3d:9a:
                    45:60:b2:47:81:8e:20:7f:6c:c0:13:d9:4b:90:c6:
                    6d:0c:e3:97:6f:33:9d:e7:64:74:37:c8:a0:d5:eb:
                    07:ad:51:a8:49:27:76:69:2a:dc:c9:2f:1a:16:9f:
                    b4:63:cb:85:b1:3c:31:46:a2:27:3c:36:0e:ac:4b:
                    d2:42:ee:c8:0e:1a:bf:d2:88:4e:7c:ec:89:76:51:
                    6f:d1:ec:41:93:a5:1d:e3:00:ac:e4:6d:47:92:e0:
                    3f:4b:70:7d:32:a9:34:fb:da:9c:44:c7:ab:62:8e:
                    05:82:bd:1d:44:f7:a7:71:ad:18:99:30:59:df:b0:
                    59:89:3f:0d:d3:eb:4c:8a:10:f8:a1:dd:3c:1c:66:
                    ed:12:ac:01:6c:3a:02:ea:1a:43:35:3b:23:54:fd:
                    ef:ce:4b:90:af:52:1c:74:5c:44:07:cf:83:76:1c:
                    b5:27:7a:13:d5:24:9c:24:c8:b8:3d:a2:c8:48:87:
                    89:aa:0f:a7:c2:ec:58:bd:4b:5e:4c:29:bd:5b:24:
                    8f:6e:8c:62:cf:06:03:31:b6:5b:29:cd:89:fe:8c:
                    6a:4f:54:83:d9:09:89:ea:e6:3e:ac:c5:51:ec:06:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:45:B3:78:0C:C0:EC:8B:C0:3D:33:0B:96:54:33:FF:F1:C0:5B:BF
            X509v3 Authority Key Identifier:
                keyid:7F:D9:3E:2C:B5:E8:55:00:D9:02:F1:5C:B4:1F:89:2D:C4:D6:D7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/323830343a336338303a663162313a3a2f34382d3438203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c80:f1b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:15:fe:fc:9b:5c:b8:c8:87:35:6c:bb:d5:cb:6a:a7:5a:4f:
         81:e4:67:67:63:3d:72:5c:56:1f:68:48:9e:19:1c:61:b8:95:
         0a:ad:87:97:a5:99:a2:d2:e6:51:e4:e2:e5:d9:ab:fb:96:df:
         db:ae:ea:4f:13:b6:b2:a2:1a:89:fb:5e:4c:9d:ed:a7:3f:b3:
         a9:e6:26:0d:e4:8c:0b:45:68:76:c1:14:d8:a9:96:e7:82:38:
         a2:41:d2:c7:90:8f:96:fe:23:b4:16:72:e6:10:6d:0c:08:86:
         eb:9a:e7:c1:df:77:8b:28:8d:29:e2:54:fe:6d:c7:ea:61:fd:
         5b:cd:76:41:14:a4:d1:97:27:1e:f1:2e:5d:24:f6:1c:d3:d2:
         d2:4d:79:cc:10:53:36:a3:1f:bc:d4:8f:2b:60:a3:94:ca:9a:
         03:8c:4e:4b:64:b9:42:77:72:be:c0:d2:96:54:40:bc:42:6d:
         3e:f5:fb:40:87:4e:9d:5e:c9:14:21:c9:7d:a3:f9:4d:bb:9e:
         f8:b2:6e:4f:c1:80:9b:d9:06:ff:50:da:85:ec:5a:80:af:76:
         18:3b:41:99:55:88:2f:96:e6:7c:6a:af:0d:16:cb:ea:1e:7b:
         89:a1:3a:b2:26:b2:c2:e2:9a:38:fe:75:05:78:75:1e:bf:fe:
         fe:51:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 14:46:27 2024 by rpki-client on console-fra.rpki-client.org