Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa
File:                     323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa (raw, json)
Hash identifier:          if48eVIK4Y3IXnfw5KFCj2PXpV1Iui/k48Z/NusEmaU=
Subject key identifier:   9E:07:0C:EB:79:BD:8F:74:3E:FC:D1:F4:28:A9:A6:B3:DB:55:9A:67
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       1B8873757CC98A07724D609F2413D139D52448D1
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa
Signing time:             Wed 03 Apr 2024 18:31:51 +0000
ROA not before:           Wed 03 Apr 2024 18:26:51 +0000
ROA not after:            Wed 02 Apr 2025 18:31:51 +0000
asID:                     269700
IP address blocks:        2804:688c:c000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:88:73:75:7c:c9:8a:07:72:4d:60:9f:24:13:d1:39:d5:24:48:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Apr  3 18:26:51 2024 GMT
            Not After : Apr  2 18:31:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:79:31:ae:a1:5b:ab:9f:97:79:e0:96:ee:
                    6d:23:27:84:af:ad:b5:1a:de:bc:53:b3:56:e4:6d:
                    2d:1d:96:f0:37:bf:6e:ff:a3:04:9f:b9:69:73:fc:
                    44:20:33:8c:86:58:67:ab:7b:a5:40:4f:ad:7d:0e:
                    16:33:6d:bd:4e:ca:fa:c3:08:42:65:80:d4:ff:f2:
                    03:42:6e:da:d9:76:2f:9c:d3:b4:ee:31:6b:3a:d7:
                    c4:91:9a:8e:8e:48:9c:29:dd:1d:cd:a0:c3:5e:bc:
                    7b:5e:78:16:50:2e:23:64:cf:ae:65:11:2b:83:c6:
                    79:9b:00:e9:c6:2c:76:35:d2:3e:ed:9f:11:be:b8:
                    d2:09:05:b5:d2:18:68:cf:ed:50:f8:66:b6:24:40:
                    7d:ef:60:09:ab:d7:51:29:aa:ae:07:6b:fe:8f:f6:
                    40:ab:94:02:eb:b1:c8:ea:97:53:0c:f6:b3:82:a8:
                    0a:ee:44:c0:b3:3e:a4:a6:27:a4:0c:6d:9c:e6:13:
                    f2:96:03:0b:d1:7e:f2:dc:1f:1a:d0:fa:17:52:ee:
                    34:af:0e:69:5f:a6:2f:c6:12:df:63:ff:8f:e5:e6:
                    70:d4:a8:ee:c7:f5:ca:71:c7:d0:b6:c0:dd:51:e8:
                    c2:9b:dc:a9:67:e0:b2:4f:a9:96:12:03:40:25:74:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:07:0C:EB:79:BD:8F:74:3E:FC:D1:F4:28:A9:A6:B3:DB:55:9A:67
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:688c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:32:c0:8f:51:b0:74:51:70:c5:9d:37:f8:ac:76:f8:e7:
         71:44:01:1b:34:a1:bb:04:55:00:6a:c0:71:84:c1:a0:6a:88:
         c8:b0:37:0c:0b:e9:7e:9c:13:5a:0d:b0:38:3b:d5:67:63:d1:
         81:84:b0:54:f6:a5:f5:9d:af:3d:fb:f5:88:3d:3e:d0:b9:50:
         48:a8:c9:ad:0e:2c:b5:e7:0c:27:8e:e8:e3:1c:58:c2:19:cd:
         f2:13:3b:4e:c4:2c:48:ef:0d:a8:51:a0:14:44:30:2a:c2:e4:
         21:4a:d2:be:a6:e5:b7:cb:dc:85:58:f3:0f:aa:80:d2:9c:42:
         08:4b:ee:29:d7:68:fe:49:c7:5f:50:d1:2f:54:59:be:e0:4a:
         68:8a:cc:a8:4a:31:32:22:de:8b:6a:c5:82:71:4d:bc:ef:a5:
         ee:30:0e:22:9a:81:b5:5b:76:52:be:4a:bc:dc:60:4e:f9:2e:
         32:75:04:93:59:e6:7b:a1:3e:93:5c:3e:70:42:b6:a1:85:01:
         ae:55:ef:f6:b5:a8:b7:f8:82:4a:32:56:35:60:13:12:a3:66:
         d6:84:c3:de:34:e5:a0:f8:b7:a6:9e:4a:07:ba:f6:66:96:07:
         67:f7:d9:3a:5b:5b:c1:8e:95:2b:b2:8b:88:48:ce:2d:80:9e:
         36:b7:a6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:05 2024 by rpki-client on console-fra.rpki-client.org