Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d313238203d3e203533313630.roa
File:                     323830343a323664383a3a2f33322d313238203d3e203533313630.roa (raw, json)
Hash identifier:          1Oj2+hlH2Eo80pYh6+BP46as6OuVmLzwcFg7X2s838o=
Subject key identifier:   12:A0:6E:F0:8E:EF:69:E2:3C:D8:E6:2E:66:31:67:BA:EF:29:A0:00
Certificate issuer:       /CN=A4EB551354D73BB4306DB510E741AB54435DC5FE
Certificate serial:       0C10C033ABD4EDBA5A8A717B86A4EA1ED31DF11C
Authority key identifier: A4:EB:55:13:54:D7:3B:B4:30:6D:B5:10:E7:41:AB:54:43:5D:C5:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d313238203d3e203533313630.roa
Signing time:             Tue 30 Apr 2024 20:37:19 +0000
ROA not before:           Tue 30 Apr 2024 20:32:19 +0000
ROA not after:            Tue 29 Apr 2025 20:37:19 +0000
asID:                     53160
IP address blocks:        2804:26d8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.crl
                          rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:10:c0:33:ab:d4:ed:ba:5a:8a:71:7b:86:a4:ea:1e:d3:1d:f1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EB551354D73BB4306DB510E741AB54435DC5FE
        Validity
            Not Before: Apr 30 20:32:19 2024 GMT
            Not After : Apr 29 20:37:19 2025 GMT
        Subject: CN=12A06EF08EEF69E23CD8E62E663167BAEF29A000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:f1:b2:f3:4a:c8:a1:9c:9e:1a:ae:84:8d:
                    5b:5c:5f:62:71:b6:ad:70:b6:23:7e:e2:1a:ee:81:
                    9a:34:2f:83:17:63:a2:e8:b8:a4:f1:bd:c0:26:ab:
                    bf:e4:c0:c1:fd:f0:44:0a:a7:07:bf:66:3b:f1:ef:
                    21:f4:c6:89:bc:19:be:83:67:fe:98:54:8b:7d:0e:
                    41:bb:d6:7e:42:05:45:f3:b2:02:f2:ad:a4:11:56:
                    42:0c:2b:61:a0:7c:a6:17:49:41:da:21:7f:22:e1:
                    98:f2:d1:4b:c1:79:37:33:07:94:60:62:67:1a:bc:
                    9d:22:5a:8b:85:75:78:5d:d0:98:74:76:33:5a:df:
                    c6:7e:f7:d7:bb:ec:af:79:0a:67:ea:d8:45:8a:c9:
                    f4:3c:1f:eb:33:80:c2:4d:8f:a6:3d:8d:62:14:e3:
                    ec:5b:76:0b:33:e6:15:87:0b:28:24:32:29:e6:e6:
                    46:2b:71:d9:35:bf:14:c2:85:e9:10:f5:c6:a2:96:
                    6e:b8:7e:85:56:00:50:90:90:3c:76:9c:1c:87:04:
                    d2:8f:21:e7:b8:be:f9:fb:90:63:ed:d4:16:5c:0a:
                    b6:07:ad:06:11:32:93:23:af:bd:da:a8:df:cb:57:
                    a1:16:54:3f:e5:f9:b3:d5:91:f8:ca:f4:e6:b1:b1:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A0:6E:F0:8E:EF:69:E2:3C:D8:E6:2E:66:31:67:BA:EF:29:A0:00
            X509v3 Authority Key Identifier:
                keyid:A4:EB:55:13:54:D7:3B:B4:30:6D:B5:10:E7:41:AB:54:43:5D:C5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/323830343a323664383a3a2f33322d313238203d3e203533313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:09:a1:13:9b:70:d6:df:c5:22:09:ff:3f:2d:30:9d:7a:
         c9:15:e2:bb:03:a6:a8:51:b0:69:b7:c8:c5:fb:8b:e5:01:73:
         de:e7:27:5e:44:f2:69:7a:81:c4:a3:1c:4e:bb:2b:d4:cf:7f:
         c4:db:03:c8:fe:65:2f:1e:3f:ff:a9:8b:57:ee:0c:d8:e8:0f:
         a6:de:75:0d:2c:c2:db:24:d8:14:d0:32:71:e2:f5:68:d5:6a:
         c2:0c:9a:14:d7:20:3e:42:7d:df:d6:43:d1:f4:b1:76:32:03:
         b7:88:2c:e7:5d:01:f4:0b:a0:d8:2b:ee:fe:ad:89:9a:22:82:
         a5:4b:c0:99:47:d1:85:e7:70:52:84:45:9e:84:31:8f:4e:53:
         7f:9c:e5:f0:0b:b7:a9:ab:8a:7d:4a:0a:87:07:71:c2:c6:36:
         03:41:1e:51:ac:02:b8:47:3d:23:e8:49:20:aa:ca:8f:ce:61:
         d6:48:30:6a:73:12:07:9f:f4:09:39:8f:79:37:3a:56:0c:e3:
         c7:26:1c:db:3b:b3:0f:ed:57:9f:b9:cb:2c:ea:4f:b8:3c:25:
         dd:f1:4f:0a:1e:8b:cb:ce:2d:0f:aa:d2:93:09:30:4b:70:91:
         68:0a:3c:fd:48:6d:bb:42:a1:3b:a4:03:a3:57:99:53:6b:8e:
         c3:d3:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:47 2024 by rpki-client on console-ams.rpki-client.org