Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa
File:                     323830343a326238343a3a2f33322d3438203d3e20323635313537.roa (raw, json)
Hash identifier:          UXl1gMyGmg7AzSER64r089n/Rmjriw9zC9nPYtjJWws=
Subject key identifier:   17:87:BF:2D:5B:68:3A:AD:C9:C2:1B:E8:34:82:B9:7E:D9:67:3A:0A
Certificate issuer:       /CN=D8523FD1200EADCEDDA631988A12B3199DE27864
Certificate serial:       4C34497BD8EA88FB91750FAACF722F016BFDFEAB
Authority key identifier: D8:52:3F:D1:20:0E:AD:CE:DD:A6:31:98:8A:12:B3:19:9D:E2:78:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8523FD1200EADCEDDA631988A12B3199DE27864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa
Signing time:             Wed 04 Sep 2024 14:42:49 +0000
ROA not before:           Wed 04 Sep 2024 14:37:49 +0000
ROA not after:            Wed 03 Sep 2025 14:42:49 +0000
asID:                     265157
IP address blocks:        2804:2b84::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/D8523FD1200EADCEDDA631988A12B3199DE27864.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/D8523FD1200EADCEDDA631988A12B3199DE27864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8523FD1200EADCEDDA631988A12B3199DE27864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:34:49:7b:d8:ea:88:fb:91:75:0f:aa:cf:72:2f:01:6b:fd:fe:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8523FD1200EADCEDDA631988A12B3199DE27864
        Validity
            Not Before: Sep  4 14:37:49 2024 GMT
            Not After : Sep  3 14:42:49 2025 GMT
        Subject: CN=1787BF2D5B683AADC9C21BE83482B97ED9673A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:a4:3c:86:67:73:66:59:f9:92:62:1e:39:
                    ce:d5:58:56:de:82:cb:c5:cd:c1:a1:17:56:43:07:
                    d8:84:71:b8:a3:48:9a:eb:22:56:db:06:e6:23:ff:
                    70:1c:bd:01:93:ca:57:27:d6:a1:9e:80:8c:db:03:
                    9d:0b:3a:11:c3:ae:00:fc:20:aa:e6:b2:ff:31:ed:
                    f8:45:25:64:8d:90:6b:d8:88:d3:4e:d5:66:db:a2:
                    45:c3:94:d4:ab:80:87:c4:96:11:59:20:af:d3:f6:
                    e5:8c:11:23:7a:56:c6:8a:0b:10:c7:87:a0:33:31:
                    ff:69:b2:5d:8b:d0:2e:31:d4:16:75:67:82:8e:17:
                    5e:9b:56:0f:05:95:6c:91:a5:4d:6f:61:f3:5b:5f:
                    fb:f3:73:95:73:41:5a:63:e0:bf:3c:82:a4:19:ca:
                    c6:91:08:d0:d1:13:b3:34:9a:5a:4f:da:39:fe:be:
                    ad:de:76:a9:cb:c5:1e:c9:09:1b:30:03:48:f5:c8:
                    fa:24:34:28:56:d0:c4:c6:7c:aa:e6:69:10:e1:63:
                    a1:27:96:7b:e0:b5:ff:d8:87:69:6f:5b:ef:e7:38:
                    27:93:9c:79:e0:26:ca:8a:e5:3a:36:66:ab:6a:5e:
                    de:72:f6:ea:66:47:a3:db:57:d0:30:98:3d:e6:be:
                    d5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:87:BF:2D:5B:68:3A:AD:C9:C2:1B:E8:34:82:B9:7E:D9:67:3A:0A
            X509v3 Authority Key Identifier:
                keyid:D8:52:3F:D1:20:0E:AD:CE:DD:A6:31:98:8A:12:B3:19:9D:E2:78:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/D8523FD1200EADCEDDA631988A12B3199DE27864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8523FD1200EADCEDDA631988A12B3199DE27864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a326238343a3a2f33322d3438203d3e20323635313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:0e:26:08:42:cb:0b:8b:a4:2b:63:96:5b:7e:66:7c:e3:
         a9:fb:07:d4:7e:d7:5c:69:05:ff:56:04:00:a1:af:2d:9b:87:
         fe:db:4f:b2:1f:07:e0:5a:c7:75:b6:ab:08:ab:f7:31:d0:ae:
         d3:74:e8:08:75:e7:25:ff:75:8b:bf:11:ee:98:4d:91:d2:c3:
         1e:a1:3b:a8:42:d2:c3:94:bc:6b:f6:88:f3:b8:26:e5:92:14:
         44:b2:87:52:b7:b9:16:85:a8:31:6f:d7:a5:33:1f:fd:23:31:
         bc:ec:90:a9:ff:dd:b7:88:61:fd:6c:a5:9f:48:02:d1:66:c0:
         2c:ba:b3:33:8a:23:3d:fa:07:bb:3c:62:0b:21:ef:94:3d:8e:
         21:46:a6:39:18:22:69:97:dd:11:04:8c:d6:74:8c:1c:02:f0:
         38:f2:54:4f:72:97:e3:f0:68:86:4e:fa:af:42:e1:51:52:95:
         4f:5b:a7:d3:62:53:a7:e6:a4:84:d2:38:57:7b:de:26:6b:a8:
         47:6d:7d:68:c9:35:f4:ac:d6:7a:e6:27:ce:3a:a1:db:f8:d6:
         fb:f8:ff:bf:1a:0d:d7:9b:8c:fa:b9:42:ef:07:70:9d:b5:f5:
         7a:67:6b:f4:a5:53:1f:b0:63:de:88:d1:5e:1b:73:76:0c:fd:
         ed:2a:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org