Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33332d3333203d3e20323730353234.roa
File:                     323830343a366435303a3a2f33332d3333203d3e20323730353234.roa (raw, json)
Hash identifier:          m91iZiMI6o0WzGAbsR7czzAShrAXhcNMRo8KndFtBwE=
Subject key identifier:   16:04:FC:42:53:90:BA:64:B5:64:C4:AD:8D:25:A9:54:79:10:A7:CC
Certificate issuer:       /CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
Certificate serial:       158BCDE0111181F25F8F88B33D83791BA8D169D1
Authority key identifier: E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33332d3333203d3e20323730353234.roa
Signing time:             Tue 13 Aug 2024 12:57:46 +0000
ROA not before:           Tue 13 Aug 2024 12:52:46 +0000
ROA not after:            Tue 12 Aug 2025 12:57:46 +0000
asID:                     270524
IP address blocks:        2804:6d50::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8b:cd:e0:11:11:81:f2:5f:8f:88:b3:3d:83:79:1b:a8:d1:69:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
        Validity
            Not Before: Aug 13 12:52:46 2024 GMT
            Not After : Aug 12 12:57:46 2025 GMT
        Subject: CN=1604FC425390BA64B564C4AD8D25A9547910A7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:da:86:53:5c:0f:50:48:b7:70:4d:b3:6b:
                    f8:8f:40:a7:70:be:20:ec:83:f6:24:be:d6:dd:ec:
                    07:ed:da:7b:27:a9:fd:33:6b:c0:4e:c3:12:50:83:
                    9d:62:b9:ae:51:46:3d:ac:58:5c:7a:ef:1b:d2:2e:
                    e4:2c:a0:b2:6c:12:e6:91:80:a6:d0:a7:9c:b0:d1:
                    eb:da:73:8b:6f:e6:60:14:bd:24:fb:f6:a3:9c:a7:
                    d7:40:82:69:2b:56:ba:6c:e3:43:ab:88:ee:79:4a:
                    94:d3:61:12:3a:f7:74:34:c5:94:45:fe:db:37:54:
                    c1:90:6e:5d:c3:8a:9f:d0:44:d6:5c:00:70:b7:cc:
                    85:57:ef:1c:eb:4a:c1:a9:1d:a8:5d:dd:f9:57:55:
                    e6:a3:b4:02:c5:fb:8d:1b:af:59:f3:da:bc:ae:7a:
                    b1:53:b8:85:c0:6d:68:6a:25:37:fb:63:2a:56:fa:
                    00:35:08:f8:c7:8e:97:ca:5d:b9:13:5e:69:39:be:
                    0c:3c:0d:68:9a:a3:ac:d7:b4:fa:61:9a:8c:3e:ee:
                    b6:ba:c5:5c:ba:39:bc:cc:07:14:8d:1a:32:5b:8c:
                    0c:e2:ff:45:d6:97:a5:0d:51:ad:cf:73:57:98:45:
                    06:6d:85:79:8f:51:4a:16:b5:17:a9:d8:36:a5:b1:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:04:FC:42:53:90:BA:64:B5:64:C4:AD:8D:25:A9:54:79:10:A7:CC
            X509v3 Authority Key Identifier:
                keyid:E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33332d3333203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d50::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:57:25:ec:0b:a0:09:bd:d6:07:9d:fe:02:2a:8f:04:d1:ff:
         2e:06:34:82:8b:f2:56:53:b9:c6:48:c0:82:d4:de:0d:0c:a2:
         bf:04:e5:5a:47:a0:7f:49:31:4c:a8:32:6c:52:d9:c1:f7:63:
         a0:13:59:06:b3:3d:fa:c9:57:da:7b:18:85:82:56:e0:82:12:
         56:d2:b6:96:8c:d5:62:bc:5f:6c:35:35:ab:ef:b3:d4:a7:d8:
         3a:e4:a9:f5:2e:85:48:23:78:41:55:d3:5b:bd:ec:37:14:7d:
         95:8e:3e:4a:26:1c:fd:a1:1e:4b:9a:82:ac:62:76:4f:81:2e:
         e2:05:b0:fa:74:c3:ea:b1:e0:6a:da:a0:11:26:d3:e6:fd:e7:
         86:0d:7e:15:2e:2c:04:f6:98:c1:38:17:64:3d:d0:f0:57:ac:
         71:38:c3:48:4c:33:01:6a:ee:4e:a1:83:25:6a:64:0f:d0:11:
         5b:be:c6:6b:54:c5:86:a8:a7:73:7e:49:70:5f:6d:52:11:ef:
         4c:2c:fb:dd:2d:06:bc:48:6b:aa:c0:99:27:fb:2e:ef:03:b5:
         0e:3a:fc:9f:d8:ab:4d:1d:26:6f:2d:48:dd:44:a9:e5:d1:55:
         9d:dc:cd:2f:f2:33:9f:c4:6f:22:94:ee:44:3f:de:3d:35:04:
         75:90:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:02:10 2024 by rpki-client on console-fra.rpki-client.org