Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a633030303a3a2f33342d3334203d3e20323633333338.roa
File:                     323830343a313439343a633030303a3a2f33342d3334203d3e20323633333338.roa (raw, json)
Hash identifier:          Hb8vpNLAB4K+bibEySltwfA+julf/PBj/HKglRWQPRY=
Subject key identifier:   0E:DC:26:04:E7:8E:66:8C:B9:C7:41:34:71:BA:02:97:C2:CB:FF:8E
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       6C4D55315073F49DF17FCD31E563631BB23B7686
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a633030303a3a2f33342d3334203d3e20323633333338.roa
Signing time:             Mon 21 Oct 2024 13:04:15 +0000
ROA not before:           Mon 21 Oct 2024 12:59:15 +0000
ROA not after:            Mon 20 Oct 2025 13:04:15 +0000
asID:                     263338
IP address blocks:        2804:1494:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4d:55:31:50:73:f4:9d:f1:7f:cd:31:e5:63:63:1b:b2:3b:76:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 21 12:59:15 2024 GMT
            Not After : Oct 20 13:04:15 2025 GMT
        Subject: CN=0EDC2604E78E668CB9C7413471BA0297C2CBFF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:c1:25:0e:64:14:5a:f0:a6:ee:3f:12:bd:
                    93:7b:47:47:f5:cd:df:77:5e:13:f8:24:1c:03:68:
                    8a:70:f7:8d:75:5a:3b:7b:62:d2:6d:ac:83:23:7c:
                    d0:32:cd:e1:5c:be:0a:50:8b:95:e0:98:ca:aa:7a:
                    82:7c:41:f5:58:0c:4c:c0:aa:3f:10:3e:e9:df:c3:
                    b6:25:90:bf:8d:13:89:f4:26:22:56:db:f5:76:e7:
                    95:0e:cc:31:12:76:d4:18:12:50:47:bc:0a:18:3a:
                    f0:da:8e:50:46:a8:c4:c4:ef:98:ac:5e:db:d5:c0:
                    31:64:5c:14:cb:d5:b8:5f:f1:31:0c:c2:a9:60:91:
                    e2:69:fd:a3:01:8c:34:4e:54:ca:e4:29:24:3f:b2:
                    c3:e4:1c:8d:54:29:e8:3f:7e:a7:dc:4b:c5:35:c9:
                    e4:a0:41:ad:bc:d9:03:aa:79:fe:19:96:10:0f:2e:
                    7b:48:1c:28:ab:fe:93:76:51:b0:39:64:ce:50:fe:
                    33:2f:0e:b4:95:3a:dc:de:13:53:ca:c5:50:da:08:
                    29:6d:5c:ec:de:1b:57:e8:72:37:23:de:92:bc:1b:
                    94:38:93:d9:4f:59:23:a8:1e:03:3e:e7:2b:0c:f9:
                    a9:23:c8:4e:b6:09:41:99:1d:27:e7:40:7a:85:59:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DC:26:04:E7:8E:66:8C:B9:C7:41:34:71:BA:02:97:C2:CB:FF:8E
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a633030303a3a2f33342d3334203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:5a:87:28:cb:80:f7:ae:2d:d0:0b:3b:8a:bf:92:53:ab:c0:
         20:7b:49:44:bc:b7:47:e9:bc:5b:fa:9d:bd:fa:22:8a:2d:02:
         21:fb:f2:84:e7:17:b7:17:09:14:ba:57:c4:49:19:f6:df:de:
         8e:38:43:9d:01:b3:d5:4f:a8:c4:3d:b5:65:a1:e3:d3:c4:09:
         a8:d1:db:00:43:f2:00:7a:07:ba:bf:9b:c2:da:9d:f9:7e:c0:
         3f:b8:3c:5f:95:97:36:d5:56:d1:a9:f6:50:4e:73:ef:3f:92:
         cf:11:47:0a:9e:de:a8:b4:be:7a:e7:d8:8c:09:6b:88:fe:61:
         a2:0e:69:c2:6e:75:65:5e:b8:b9:80:b5:b2:f3:dd:ea:5e:c2:
         75:b0:ee:a1:c7:8c:5e:3b:07:d9:7e:b9:7c:3e:4a:33:dd:d3:
         df:de:88:ad:c6:51:ce:81:e6:70:eb:9c:56:fa:4c:06:5b:3e:
         6b:64:6e:42:4a:50:9b:97:99:15:fc:03:60:61:81:4a:7b:78:
         ca:05:59:f1:56:0b:f7:9d:20:08:31:66:86:40:b8:77:3f:75:
         7c:76:a2:b5:26:dc:9d:54:ca:88:4f:4e:69:10:46:4d:ba:b4:
         2d:fd:52:12:88:8c:2b:e9:22:a9:58:c9:2d:03:1e:32:1e:fd:
         5e:60:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:17 2024 by rpki-client on console-ams.rpki-client.org