Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a3a2f33322d3438203d3e203532353634.roa
File:                     323830343a316562383a3a2f33322d3438203d3e203532353634.roa (raw, json)
Hash identifier:          G6Vf87E2Q7XbsSMWHBqZzA8FxiygA9Lge2GJP0SgRdI=
Subject key identifier:   0E:17:CE:4E:98:D4:97:9E:68:CE:5A:D3:9F:B8:34:2B:BE:D8:C7:6E
Certificate issuer:       /CN=E98023C18CFFA0301734D20AA2F683021CF11573
Certificate serial:       3E5D25180B67CF03D4B5C2077FDF0EE5F248F568
Authority key identifier: E9:80:23:C1:8C:FF:A0:30:17:34:D2:0A:A2:F6:83:02:1C:F1:15:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98023C18CFFA0301734D20AA2F683021CF11573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a3a2f33322d3438203d3e203532353634.roa
Signing time:             Wed 16 Oct 2024 13:43:01 +0000
ROA not before:           Wed 16 Oct 2024 13:38:01 +0000
ROA not after:            Wed 15 Oct 2025 13:43:01 +0000
asID:                     52564
IP address blocks:        2804:1eb8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/E98023C18CFFA0301734D20AA2F683021CF11573.crl
                          rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/E98023C18CFFA0301734D20AA2F683021CF11573.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98023C18CFFA0301734D20AA2F683021CF11573.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5d:25:18:0b:67:cf:03:d4:b5:c2:07:7f:df:0e:e5:f2:48:f5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98023C18CFFA0301734D20AA2F683021CF11573
        Validity
            Not Before: Oct 16 13:38:01 2024 GMT
            Not After : Oct 15 13:43:01 2025 GMT
        Subject: CN=0E17CE4E98D4979E68CE5AD39FB8342BBED8C76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:da:fd:3d:d9:b5:d2:00:5c:db:97:94:3e:
                    72:16:c4:42:18:7f:91:b9:b0:e2:15:a1:3c:0b:12:
                    3d:9f:44:97:25:1c:09:af:45:d6:b5:95:59:3d:4a:
                    62:97:dc:a0:b4:49:3f:02:73:37:e9:27:5a:28:e2:
                    f2:79:b2:a6:c7:54:13:ae:5b:95:37:ea:fd:24:34:
                    48:0e:2b:e4:40:fe:58:8a:c3:04:51:62:56:f5:96:
                    93:57:31:44:76:bf:e1:43:fb:b8:7e:c4:10:5e:99:
                    66:cc:4f:c8:82:67:79:ff:53:4b:e8:c2:de:e8:25:
                    f4:41:86:25:8c:6f:c6:53:d8:9c:82:d9:37:13:6c:
                    7c:e1:13:a3:5a:b0:a2:85:d2:bc:01:6d:7b:d9:b9:
                    91:d2:44:c3:79:95:40:76:1c:e1:47:db:f7:18:30:
                    ab:35:70:21:b5:69:ca:c9:a2:42:f1:c3:b5:52:12:
                    61:9b:a7:b1:94:07:2b:7f:a5:e7:20:e1:4b:96:1b:
                    25:c1:b3:e9:ae:30:5a:64:d7:ec:4c:bd:64:7a:5b:
                    09:aa:53:70:eb:9b:e8:a0:2e:9b:ca:bb:3e:03:ad:
                    d1:52:22:26:92:ac:55:5f:f9:81:00:9e:ee:c0:82:
                    46:6b:f0:ea:a8:d6:56:9c:fc:4f:4f:6b:fa:a5:96:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:17:CE:4E:98:D4:97:9E:68:CE:5A:D3:9F:B8:34:2B:BE:D8:C7:6E
            X509v3 Authority Key Identifier:
                keyid:E9:80:23:C1:8C:FF:A0:30:17:34:D2:0A:A2:F6:83:02:1C:F1:15:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/E98023C18CFFA0301734D20AA2F683021CF11573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98023C18CFFA0301734D20AA2F683021CF11573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a3a2f33322d3438203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:a2:91:4c:42:36:26:5e:38:84:9d:57:d6:7e:f6:35:db:
         47:82:1b:72:a0:39:92:6e:9a:a4:e5:87:6f:5e:16:c4:5d:38:
         e6:16:62:dd:a7:a6:5f:8a:8d:45:88:7e:20:57:c6:de:1f:d8:
         80:2f:be:b2:d5:0e:24:a2:c1:12:de:11:a7:2e:c8:7f:01:2a:
         ac:95:f0:55:f4:e3:03:1c:b7:31:b4:2f:dd:8b:53:db:bc:33:
         05:4b:99:93:a8:e1:84:6b:60:ba:d6:2b:4b:89:51:8a:1d:76:
         e4:5a:8f:41:44:8a:88:cc:c1:3b:46:3e:51:6d:86:95:a7:43:
         6b:99:ca:02:88:95:6a:56:45:d4:86:25:eb:d6:70:6a:3d:7e:
         c8:d0:41:15:a0:f8:a5:61:a4:b9:8d:28:5d:51:37:ea:d3:69:
         23:62:72:7a:38:20:28:7e:ca:8f:70:93:7e:78:03:cb:44:5a:
         3a:00:4d:a6:fe:2e:6e:15:c6:c7:db:36:0f:18:53:4d:6a:96:
         ae:d8:26:21:5b:a4:26:1f:c0:23:0c:50:b8:37:c7:04:c8:2f:
         c4:9f:69:a0:ff:c6:3b:03:dc:ca:9d:42:e5:50:69:2b:b3:0b:
         16:5b:cf:33:b3:b3:31:97:00:7c:67:da:df:81:f2:73:48:46:
         30:34:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org