Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/323830343a326131303a3a2f33322d3438203d3e20323634303534.roa
File:                     323830343a326131303a3a2f33322d3438203d3e20323634303534.roa (raw, json)
Hash identifier:          vX+xKyXv6deeIhHxOna5P8vkDhp33TZ+4f2HVIT582w=
Subject key identifier:   71:FD:25:5D:19:00:FA:A4:C3:9F:61:CC:CA:D7:6B:49:CB:DA:F7:16
Certificate issuer:       /CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA
Certificate serial:       1EA8BD2D5D865AA49DA4833FC878A6B4998404C7
Authority key identifier: E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/323830343a326131303a3a2f33322d3438203d3e20323634303534.roa
Signing time:             Thu 04 Apr 2024 05:48:34 +0000
ROA not before:           Thu 04 Apr 2024 05:43:34 +0000
ROA not after:            Thu 03 Apr 2025 05:48:34 +0000
asID:                     264054
IP address blocks:        2804:2a10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.crl
                          rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a8:bd:2d:5d:86:5a:a4:9d:a4:83:3f:c8:78:a6:b4:99:84:04:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA
        Validity
            Not Before: Apr  4 05:43:34 2024 GMT
            Not After : Apr  3 05:48:34 2025 GMT
        Subject: CN=71FD255D1900FAA4C39F61CCCAD76B49CBDAF716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:27:b4:2a:88:c8:61:5c:a5:b8:eb:48:ea:
                    d8:ee:e7:75:cc:3d:7c:5c:fb:ab:6a:f0:7b:ed:8d:
                    ad:1b:92:cf:46:2b:bd:30:4d:28:62:f8:6d:b2:85:
                    d9:69:4e:59:d5:35:64:75:32:4c:4a:74:a0:59:2f:
                    5a:94:90:e0:1c:b9:ae:a3:44:e5:9c:9a:fd:3e:6d:
                    0e:43:64:66:04:72:8d:a9:5b:59:2b:48:37:26:60:
                    3c:0c:68:84:75:f1:cd:e0:5c:bd:2f:9f:c8:4c:e5:
                    46:fa:73:60:f1:94:ca:eb:66:52:70:38:8d:c4:e6:
                    08:73:a4:bb:68:40:75:5a:86:9e:52:5d:0c:91:ea:
                    80:44:da:b8:7b:f6:1f:be:ac:9e:34:cb:80:18:fe:
                    9b:17:25:dd:34:a2:07:e1:54:a2:e7:ef:3b:c9:ec:
                    2b:93:f0:ac:04:7c:40:36:0d:f6:8d:fb:23:e8:54:
                    dd:d9:5c:d6:d5:f4:bc:91:5e:df:66:76:7e:37:fb:
                    c8:f6:94:1d:e5:b7:9a:fd:3c:86:12:49:8c:0c:ef:
                    f4:fd:a4:fe:3b:c6:63:94:d3:01:d1:a7:a6:c8:e6:
                    81:9e:13:7a:75:af:11:3a:59:7a:64:82:3b:d1:f9:
                    d4:2a:65:1a:22:2b:a0:76:72:15:de:aa:3e:df:fb:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FD:25:5D:19:00:FA:A4:C3:9F:61:CC:CA:D7:6B:49:CB:DA:F7:16
            X509v3 Authority Key Identifier:
                keyid:E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/323830343a326131303a3a2f33322d3438203d3e20323634303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:34:24:f8:67:24:ac:7f:ba:03:54:c4:21:67:1d:6e:6c:
         79:bb:68:6c:4f:4c:65:9a:12:d5:58:0c:66:85:f8:13:78:b6:
         64:93:a1:80:85:ae:81:37:5d:dd:6d:bf:c0:df:39:6b:45:64:
         7b:b7:4c:58:a2:5d:b6:7b:01:6f:53:d9:ce:97:f8:66:9c:b9:
         12:b5:2a:fa:44:09:15:38:cb:50:d7:6e:5f:c6:ae:1d:c9:2f:
         33:6f:1a:88:58:36:7c:7d:87:a1:68:e6:18:f1:e7:99:1c:af:
         5a:8d:4b:d2:e8:c5:f2:79:86:05:41:a5:0b:25:22:a5:2a:50:
         11:e8:32:39:6a:6d:1a:e5:49:ec:f2:00:1e:46:e6:0f:6a:0d:
         da:ce:c5:a4:7f:f4:fe:44:98:4b:a1:23:55:84:39:44:f3:7a:
         67:0b:07:54:a7:c5:e2:9c:13:39:7b:48:b9:1a:8c:4b:a8:87:
         d3:b0:72:43:b5:55:c9:ae:32:0b:9c:3a:7b:e7:92:2d:b4:5e:
         cc:90:9e:92:32:e3:d7:ca:f9:1b:57:3b:24:3d:9f:74:85:be:
         7b:2a:d9:7e:51:7f:a5:fa:dd:6c:f3:b0:94:fe:f8:8f:b4:ad:
         ea:8f:40:27:e0:d9:80:b5:52:9f:6f:8a:1c:b9:bb:4e:bb:98:
         91:4b:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:09 2024 by rpki-client on console-fra.rpki-client.org