Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
File:                     323830343a356161343a3a2f33322d313238203d3e20323638373836.roa (raw, json)
Hash identifier:          CVHhENo4r1N0cZ6GY7DSxx8xCfi8Cn/98j62v5H8Prk=
Subject key identifier:   E2:AB:66:0B:50:C5:DA:9F:98:57:64:47:27:15:0C:59:BC:23:D5:63
Certificate issuer:       /CN=E03CF531484EF901E008EB682C28C97D40536BB3
Certificate serial:       7AD007178FDC0D02C5FAA788A43F6E0E623FE6C2
Authority key identifier: E0:3C:F5:31:48:4E:F9:01:E0:08:EB:68:2C:28:C9:7D:40:53:6B:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
Signing time:             Fri 09 Aug 2024 20:26:22 +0000
ROA not before:           Fri 09 Aug 2024 20:21:22 +0000
ROA not after:            Fri 08 Aug 2025 20:26:22 +0000
asID:                     268786
IP address blocks:        2804:5aa4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d0:07:17:8f:dc:0d:02:c5:fa:a7:88:a4:3f:6e:0e:62:3f:e6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E03CF531484EF901E008EB682C28C97D40536BB3
        Validity
            Not Before: Aug  9 20:21:22 2024 GMT
            Not After : Aug  8 20:26:22 2025 GMT
        Subject: CN=E2AB660B50C5DA9F9857644727150C59BC23D563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5b:1b:93:6c:b8:2b:10:e5:4e:f6:a4:e7:ec:
                    c9:fb:83:96:80:17:e7:64:95:e6:64:df:d0:71:32:
                    9b:28:b5:13:f2:52:ee:90:2b:fb:4d:da:0f:61:9e:
                    68:33:56:ec:20:9c:06:d5:7c:8d:22:33:99:a5:0a:
                    c8:53:16:9e:33:bc:db:c8:1b:45:6e:e7:cf:78:83:
                    e1:a4:c7:a2:81:51:92:87:cf:51:c9:ed:7e:b0:91:
                    d4:64:b8:77:2f:e6:e9:41:67:29:dd:76:43:f0:b1:
                    c0:e5:fe:22:ab:39:70:82:dd:97:39:8f:78:ef:9f:
                    bd:f7:8b:de:bd:43:5d:6b:d0:a9:dd:ff:17:fd:d4:
                    b0:69:cc:e9:4c:f0:17:36:05:c6:6f:e6:11:43:84:
                    ed:6a:e1:c4:7b:59:59:be:d5:74:23:ab:d3:a0:bf:
                    b4:bc:e2:73:9d:fd:a0:cd:68:25:d6:67:cb:10:27:
                    ad:27:20:e9:1e:ca:65:d9:00:09:e6:df:ca:fd:b2:
                    90:99:a3:e8:8d:33:98:28:ab:ec:bf:f0:b0:1f:09:
                    d9:82:67:d8:e5:c9:03:30:21:0f:44:53:fe:04:80:
                    6f:0d:29:95:37:2d:dc:a3:75:c1:45:7c:34:ed:5c:
                    20:66:1f:fc:52:c9:40:9a:07:31:35:b0:d0:b2:d4:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AB:66:0B:50:C5:DA:9F:98:57:64:47:27:15:0C:59:BC:23:D5:63
            X509v3 Authority Key Identifier:
                keyid:E0:3C:F5:31:48:4E:F9:01:E0:08:EB:68:2C:28:C9:7D:40:53:6B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:38:18:c1:3f:ab:c4:7e:24:30:b1:8d:12:8e:ab:fe:ae:
         ed:f6:d2:50:f9:6e:f2:9a:59:5e:c5:a4:99:7a:c5:c1:aa:13:
         32:05:7d:78:03:e4:a3:ca:9c:dc:07:e7:4f:f7:a0:13:6a:f5:
         bc:5f:b2:d6:a1:a9:51:6c:18:8a:d1:e9:7a:e3:77:f1:27:cc:
         a6:b5:93:f8:32:b0:78:c6:3a:30:7a:fa:62:be:b6:75:11:df:
         39:86:b1:a7:44:b7:7e:a2:89:e9:1b:eb:69:50:8e:d7:37:30:
         9c:39:03:17:e1:8e:7f:a1:28:7d:0c:2a:0b:0f:2a:b4:37:1d:
         d8:e9:d4:12:7f:09:6b:c4:bf:bb:d8:e3:8e:72:70:67:5e:14:
         da:1a:da:d7:cd:e2:70:92:26:23:2a:37:9d:7e:d4:79:dd:15:
         17:e4:d3:18:4c:ee:d2:54:de:4a:e6:e8:21:ae:0a:9e:d5:4d:
         11:e6:11:b9:31:9d:04:d3:d6:aa:b1:76:45:3b:21:36:97:fa:
         7b:a3:63:ab:26:a7:7c:2e:68:24:58:24:fc:a3:8b:1f:13:aa:
         96:f7:c8:f4:46:31:49:a8:1a:cf:35:be:5f:b2:aa:0f:35:c5:
         73:0e:75:7c:68:bd:27:5d:68:62:16:6d:63:8f:e0:21:20:d9:
         e2:08:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:00 2024 by rpki-client on console-fra.rpki-client.org