Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa
File:                     323830343a346165343a3a2f33322d313238203d3e20323637323730.roa (raw, json)
Hash identifier:          TUWYyCkrYoRoseyRl0Msgo8m+DUVSqMNEe7rjIA5KXk=
Subject key identifier:   33:AA:97:87:1D:AE:34:F5:8F:87:16:0E:8B:D8:9B:1D:73:59:D9:C2
Certificate issuer:       /CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
Certificate serial:       4FC117A7F4391AB56857AC33E510408D2D2357A5
Authority key identifier: 7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa
Signing time:             Thu 03 Oct 2024 13:56:29 +0000
ROA not before:           Thu 03 Oct 2024 13:51:29 +0000
ROA not after:            Thu 02 Oct 2025 13:56:29 +0000
asID:                     267270
IP address blocks:        2804:4ae4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl
                          rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c1:17:a7:f4:39:1a:b5:68:57:ac:33:e5:10:40:8d:2d:23:57:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
        Validity
            Not Before: Oct  3 13:51:29 2024 GMT
            Not After : Oct  2 13:56:29 2025 GMT
        Subject: CN=33AA97871DAE34F58F87160E8BD89B1D7359D9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:66:92:ff:f7:a4:1e:60:40:1d:02:ef:bb:
                    cd:c2:43:38:99:1c:50:6c:8b:56:00:26:1a:01:93:
                    72:2c:9a:11:15:31:3d:30:ce:b7:0b:ee:2d:0b:af:
                    17:df:e9:55:ec:da:27:f0:ac:84:40:5d:8c:1c:04:
                    29:11:2f:cb:60:35:2f:37:a0:99:7d:87:ef:ef:a0:
                    8e:44:7f:9b:35:36:ba:d4:58:8c:9a:bf:d4:b1:0e:
                    41:b0:25:1d:f9:82:e2:b6:f7:9a:cf:5b:05:1f:fc:
                    4b:34:18:c9:e5:98:16:35:71:d9:ac:c2:21:fa:99:
                    00:53:f2:ff:ea:ab:23:97:77:0d:7a:db:51:b2:e8:
                    4f:c3:26:3c:cd:ef:27:9b:5a:7a:c1:d6:66:ba:4a:
                    73:1d:35:e0:17:eb:a3:9c:f0:de:69:99:b9:2d:d7:
                    39:19:7a:48:de:b3:30:cf:a0:44:bb:8a:e7:77:ee:
                    90:14:e1:8a:da:e1:0f:4f:0e:e6:62:62:a8:ce:96:
                    7a:db:db:04:33:9f:e5:6a:0d:4c:53:d8:9d:fe:19:
                    88:a5:bf:88:e5:13:2c:a0:fc:d8:80:36:d5:c2:99:
                    e9:51:f0:e0:c3:cc:2e:02:4a:59:71:63:dd:c1:f2:
                    54:0a:2c:bf:a4:49:64:36:cd:da:df:05:93:1a:f8:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AA:97:87:1D:AE:34:F5:8F:87:16:0E:8B:D8:9B:1D:73:59:D9:C2
            X509v3 Authority Key Identifier:
                keyid:7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:13:ac:b8:1e:2a:7f:31:ca:1b:48:b1:7a:ef:17:2d:b0:5e:
         15:92:a3:de:87:2f:9f:3e:3c:a9:d7:08:a2:21:0c:f8:b4:45:
         a8:6a:04:bf:96:9c:f4:9c:da:a4:f3:a1:67:c2:bb:a3:ca:b8:
         0c:9f:6d:f4:16:98:eb:16:94:d4:57:3f:26:58:ae:c6:cb:64:
         fa:03:af:2d:3b:f4:0e:0d:d8:b1:47:0c:14:92:2e:65:42:cf:
         95:cb:1f:b5:6e:e4:ce:16:12:12:27:f5:30:13:ab:eb:0d:fb:
         71:0f:93:df:15:aa:23:ee:c8:33:e0:56:28:ca:e6:dd:02:d5:
         d2:9d:d0:ea:fb:a3:d2:a7:ad:a5:b5:3a:c1:cf:6a:9f:3c:ce:
         5f:56:ba:9a:d5:b7:23:8a:46:0b:af:d3:eb:d6:b4:46:eb:8b:
         ad:39:7f:a8:be:88:3a:aa:9d:fd:88:1d:12:4c:bd:ca:a0:5f:
         0c:35:c4:83:ad:da:37:e3:c4:40:56:6b:f1:9c:5a:26:bf:6c:
         05:10:c4:b6:30:7d:d9:63:71:b6:e7:34:37:49:78:de:4b:85:
         b3:6b:57:e4:9f:fd:14:01:4a:1a:3d:73:ef:cb:b8:93:2f:2a:
         ef:83:bd:ac:42:38:83:2e:46:14:8c:bb:ce:06:83:e7:65:e1:
         35:c8:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:07 2024 by rpki-client on console-fra.rpki-client.org