Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3438203d3e20323632353734.roa
File:                     323830343a363939383a3a2f33322d3438203d3e20323632353734.roa (raw, json)
Hash identifier:          61vBmVb0723JmNVryPe/2V965ARbqI13KDN2tMseC1E=
Subject key identifier:   14:E5:C7:44:32:88:1F:35:9D:FC:B4:4B:88:AD:E1:77:A6:88:4F:BD
Certificate issuer:       /CN=748787010CE9A73A6FC8B212C63184EE1F098B46
Certificate serial:       02DBC653930CE443133D33729CE908600B509C8B
Authority key identifier: 74:87:87:01:0C:E9:A7:3A:6F:C8:B2:12:C6:31:84:EE:1F:09:8B:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3438203d3e20323632353734.roa
Signing time:             Mon 20 May 2024 13:36:37 +0000
ROA not before:           Mon 20 May 2024 13:31:37 +0000
ROA not after:            Mon 19 May 2025 13:36:37 +0000
asID:                     262574
IP address blocks:        2804:6998::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.crl
                          rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:c6:53:93:0c:e4:43:13:3d:33:72:9c:e9:08:60:0b:50:9c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748787010CE9A73A6FC8B212C63184EE1F098B46
        Validity
            Not Before: May 20 13:31:37 2024 GMT
            Not After : May 19 13:36:37 2025 GMT
        Subject: CN=14E5C74432881F359DFCB44B88ADE177A6884FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:65:b9:0b:45:a3:ab:e3:31:4c:9f:0b:eb:
                    92:00:d1:a9:28:9c:64:f4:66:a7:26:cd:ab:62:e6:
                    5f:e6:c3:55:18:32:d8:b1:96:d0:96:e9:54:97:ba:
                    4d:97:5d:d7:b7:04:92:b2:b1:6e:74:6e:27:d4:c5:
                    da:64:f6:eb:bd:dd:c0:1b:03:97:a7:17:cb:01:83:
                    08:ad:77:ae:38:8b:bb:2b:bd:f5:a1:54:2b:ad:a6:
                    76:af:f3:3b:61:b6:c7:8e:32:c3:31:09:39:09:2a:
                    3d:73:a2:34:6c:24:f5:a2:5a:93:89:35:bc:0d:9a:
                    de:b1:a6:f6:b8:23:0a:3d:ff:e3:be:1e:e4:9b:eb:
                    b7:5c:50:76:01:27:17:10:90:ea:bf:2e:2d:79:27:
                    99:54:91:3b:f2:9b:ca:ac:9f:81:e4:09:23:2c:9b:
                    fe:05:56:79:53:a3:81:e1:2c:ec:af:88:80:ea:7e:
                    56:7d:d6:6c:25:de:14:07:e0:b8:f9:69:3c:ce:02:
                    7b:df:d3:5c:79:02:26:53:e5:81:72:d1:ad:f1:02:
                    f8:cf:e6:c1:8f:4d:d4:68:b4:57:df:94:72:b1:f5:
                    81:1b:4d:59:9b:01:2d:e1:9c:42:02:a8:55:f5:7c:
                    a5:9b:24:0c:8e:21:6c:8d:16:69:99:0d:85:5b:f4:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:C7:44:32:88:1F:35:9D:FC:B4:4B:88:AD:E1:77:A6:88:4F:BD
            X509v3 Authority Key Identifier:
                keyid:74:87:87:01:0C:E9:A7:3A:6F:C8:B2:12:C6:31:84:EE:1F:09:8B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3438203d3e20323632353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6998::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:53:af:13:58:0c:49:a1:44:fb:5b:17:3b:da:18:9f:99:3b:
         4a:6c:10:c6:7d:0b:6f:7b:3b:75:8b:36:eb:0d:e6:b7:b8:06:
         40:bf:86:0b:7c:54:10:d3:5c:7e:74:46:7c:3d:a4:ec:53:fd:
         76:10:6b:fd:e0:d3:ef:9f:d6:80:09:dd:bb:15:bb:b7:f4:a4:
         cc:39:24:28:f2:5b:20:4a:b1:5f:f5:34:df:28:2e:32:1e:41:
         4e:f7:61:1d:58:5d:d1:1c:73:fa:a2:01:83:a8:af:20:57:54:
         18:68:33:9a:c2:29:f4:e7:05:6d:7e:c4:5e:6b:d6:14:41:e2:
         a0:cd:31:0b:66:b8:9c:34:c5:7b:67:20:6a:23:76:fc:63:10:
         6c:92:5b:be:af:56:db:ce:69:56:98:ec:fd:32:83:54:f3:3b:
         52:0f:2b:71:85:cc:2c:cf:1d:77:20:d5:8b:c9:a1:a5:80:49:
         65:51:4e:01:61:ef:1d:20:80:72:f5:8b:ec:09:46:5c:35:0e:
         a8:a2:e5:ae:a1:65:de:c9:69:38:1d:c7:d2:f6:f9:6d:de:b3:
         58:7b:5e:fb:24:f3:a1:30:aa:22:eb:8c:9b:9a:36:6f:65:7e:
         70:26:c0:ee:cf:20:c3:82:cb:3a:aa:2b:5b:26:c6:eb:c7:5b:
         7e:54:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:06 2024 by rpki-client on console-ams.rpki-client.org