Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a3a2f33322d3332203d3e20323633333338.roa
File:                     323830343a313439343a3a2f33322d3332203d3e20323633333338.roa (raw, json)
Hash identifier:          uoYNEOl2hrSXdnp38m7pC/q2qrcfmHGTV1wAxSx0PYw=
Subject key identifier:   D8:89:72:24:2B:64:93:48:17:BC:31:E2:96:56:F4:97:35:CF:62:E2
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       116C6B9D9EDBF4A3DD4A791A7D32742F247FB6A6
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a3a2f33322d3332203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:28 +0000
ROA not before:           Thu 16 May 2024 11:33:28 +0000
ROA not after:            Thu 15 May 2025 11:38:28 +0000
asID:                     263338
IP address blocks:        2804:1494::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6c:6b:9d:9e:db:f4:a3:dd:4a:79:1a:7d:32:74:2f:24:7f:b6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:28 2024 GMT
            Not After : May 15 11:38:28 2025 GMT
        Subject: CN=D88972242B64934817BC31E29656F49735CF62E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:d0:ac:2f:ff:bb:94:31:26:c2:c0:9f:53:
                    04:6f:ca:fb:ca:0f:ad:18:53:eb:8f:d8:22:50:d7:
                    d5:9e:38:4c:0b:94:ef:6c:fe:1e:03:37:05:03:ef:
                    00:e8:92:dc:a5:92:c8:2e:a8:84:53:5a:3f:b8:ae:
                    e1:84:09:9c:f3:59:ed:97:45:88:f4:fe:4a:97:41:
                    f6:30:fa:b6:00:68:ed:10:7d:b1:6c:aa:f0:6d:36:
                    fd:14:38:13:70:e8:aa:ee:e4:0f:e3:c1:60:03:75:
                    5b:9e:ea:7a:4f:9e:29:e4:3d:c4:bf:fc:22:a9:77:
                    8c:e8:e7:f0:a4:c4:a1:98:d6:6a:70:10:aa:dc:4a:
                    a7:44:ff:44:55:b0:99:dd:71:e9:ac:dc:07:11:ec:
                    c2:b0:d9:21:d7:e3:42:c0:4f:8b:0d:67:92:48:98:
                    8d:62:b4:69:f9:82:b3:b5:15:0d:f5:4e:93:ac:17:
                    74:39:05:2a:a7:88:be:e3:be:c8:f5:48:32:40:73:
                    ca:99:bf:97:e8:1b:da:89:1c:00:6e:c7:54:18:f0:
                    4c:0a:53:c2:7c:45:21:ff:72:7f:b9:65:a5:54:95:
                    16:f3:c5:ab:8b:c7:d0:d1:a8:31:16:81:a3:4b:2f:
                    eb:f3:15:69:00:f4:e1:22:67:2a:ea:bc:45:1c:07:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:72:24:2B:64:93:48:17:BC:31:E2:96:56:F4:97:35:CF:62:E2
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a3a2f33322d3332203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:e2:02:7a:57:31:a4:71:e4:2b:ba:14:b7:e1:96:40:39:
         89:89:df:78:f2:b3:11:9f:98:43:3c:85:36:a8:0d:b9:1b:64:
         73:1c:38:c7:c5:c1:64:c4:4c:06:59:9b:6b:6f:48:09:4a:8b:
         3a:1b:0d:49:cf:30:df:45:e4:5a:94:84:b8:c6:12:39:e3:ea:
         90:06:83:22:a2:a6:04:8f:59:72:af:30:5b:8a:00:22:94:e7:
         56:bf:7e:78:46:b5:c9:09:5c:0f:c7:49:a7:f5:74:42:d4:f9:
         89:37:64:12:55:05:d1:1f:71:8a:bb:4c:f2:62:56:9b:f2:f7:
         94:0d:91:e8:2a:f0:c3:49:f6:f9:b2:7f:ae:e3:d7:ad:fa:62:
         97:63:66:76:86:c9:73:88:58:70:c0:cf:af:69:c4:b1:22:de:
         d5:bf:ea:80:52:d3:90:b4:48:0e:55:f9:19:6e:47:91:ab:b3:
         36:93:0c:bb:9b:d8:88:e2:79:c5:3f:62:05:5f:0f:6c:70:f0:
         68:ea:eb:83:6c:32:61:5b:91:dc:c4:89:54:04:6b:d8:62:f7:
         57:50:1d:3b:d3:53:15:ab:6e:a9:e8:00:ea:af:1a:70:d1:7c:
         12:5f:6d:50:aa:8f:e9:c7:96:70:5d:30:8a:99:fb:cf:5b:87:
         08:fe:4c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:17 2024 by rpki-client on console-ams.rpki-client.org