Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa
File:                     323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa (raw, json)
Hash identifier:          E11OuFjL5ngaUSsI9QL8D+f3Dr+NtYkstJqZFlvP2S8=
Subject key identifier:   4B:15:DF:71:FC:C9:A0:1E:81:66:E1:A4:DE:93:B1:70:0A:3A:D0:F3
Certificate issuer:       /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial:       3C1B93772719A9B47F1FEBD0412703E3031683A7
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa
Signing time:             Thu 31 Oct 2024 14:03:02 +0000
ROA not before:           Thu 31 Oct 2024 13:58:02 +0000
ROA not after:            Thu 30 Oct 2025 14:03:02 +0000
asID:                     268033
IP address blocks:        2804:56f0:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1b:93:77:27:19:a9:b4:7f:1f:eb:d0:41:27:03:e3:03:16:83:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
        Validity
            Not Before: Oct 31 13:58:02 2024 GMT
            Not After : Oct 30 14:03:02 2025 GMT
        Subject: CN=4B15DF71FCC9A01E8166E1A4DE93B1700A3AD0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:9f:6c:13:18:39:b6:45:77:a7:0c:7b:37:
                    4b:bf:04:05:9c:b2:87:0b:5c:3c:14:eb:bb:c9:db:
                    4e:3c:c6:f0:be:5c:9f:4e:67:72:b7:d3:19:57:50:
                    e8:59:a1:dd:8f:0a:ba:5f:c0:6c:3f:4e:31:1f:a4:
                    05:6c:05:7a:08:42:25:f4:a8:3a:bc:b8:c1:25:92:
                    f9:af:86:c4:13:58:6c:3e:ba:3c:b9:1a:3c:81:1e:
                    9b:ad:68:81:97:63:7c:a1:49:ea:14:b4:1e:43:80:
                    d5:e6:34:99:d1:d6:9b:a9:80:e7:9f:d0:81:d7:96:
                    dd:72:7f:65:6b:2b:be:c7:37:f2:4f:ca:61:36:39:
                    4a:b5:df:57:9b:86:27:82:2b:7b:d1:de:a9:8d:b1:
                    cc:6f:a2:7e:d3:6b:e0:a7:64:40:4c:38:04:48:ea:
                    cb:c3:16:23:86:7f:d5:f6:9f:2f:fb:0f:40:e9:24:
                    e3:b7:54:59:17:0e:33:2c:04:8d:85:be:a5:15:c6:
                    83:db:6b:fe:90:24:54:49:33:5d:c4:62:6c:40:f2:
                    c0:6e:8e:e7:10:d2:05:fd:02:a5:64:d2:5b:b2:96:
                    79:ea:90:5d:2d:54:01:b9:ec:cc:75:f8:b5:74:01:
                    4c:7f:42:c7:60:14:9d:2c:fa:0e:4e:36:c2:72:80:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:15:DF:71:FC:C9:A0:1E:81:66:E1:A4:DE:93:B1:70:0A:3A:D0:F3
            X509v3 Authority Key Identifier:
                keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f0:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:a9:67:62:5c:9b:5b:79:74:67:90:0b:d2:f5:75:5e:1e:
         8a:2c:76:bf:02:b6:de:bc:3e:e8:2a:8f:9c:bf:08:4b:85:9f:
         46:ab:34:41:1b:6b:e6:43:7c:20:5f:1c:82:64:85:e3:69:ab:
         c5:6b:a7:14:ae:82:c8:21:6b:c3:d9:c6:a2:58:58:4c:36:e9:
         ce:89:4f:07:78:49:2d:b3:06:6e:7b:68:b3:5d:26:5f:b5:79:
         7b:fb:d6:4d:f1:0b:da:34:55:b9:53:71:18:b2:96:da:ed:3c:
         e1:52:48:40:23:c7:9a:07:40:6e:2a:f4:65:75:8f:7f:2b:2f:
         49:f2:75:11:66:24:a6:86:f0:37:cc:35:79:0f:70:25:b7:32:
         65:18:f4:8c:5a:d9:b9:52:71:9e:e0:d5:98:74:1a:78:2c:58:
         40:98:33:fb:e2:72:02:44:8a:3c:62:09:1c:d2:99:76:73:03:
         72:ed:28:4c:5e:a2:86:71:70:e8:f1:07:0d:64:a5:2b:7f:41:
         19:8a:f9:13:2a:9d:8f:cb:d6:52:78:52:93:79:fd:2f:a9:d0:
         b2:11:ac:4b:d3:1d:62:9a:8c:19:4a:65:f9:4d:2d:0d:b6:4e:
         c7:45:49:ae:a8:bf:25:4e:f6:f5:3f:e6:38:4a:9e:fa:a4:dd:
         1b:16:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org