Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3336203d3e20323632343037.roa
File:                     323830343a3366343a3a2f33322d3336203d3e20323632343037.roa (raw, json)
Hash identifier:          F+G3MR1pvahsyEjAfTvkRNuiN5e0FatkbQYjGN+yrV4=
Subject key identifier:   7F:65:DA:D5:46:25:EA:C5:E7:1D:B8:CB:36:51:D8:3E:9D:7B:B6:F0
Certificate issuer:       /CN=E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29
Certificate serial:       04811E26A9163F1695A037B3F5428A8FCA161A81
Authority key identifier: E4:34:1D:CA:E9:8C:4F:2A:AF:19:C7:17:D6:FB:4C:0B:43:E9:BA:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3336203d3e20323632343037.roa
Signing time:             Fri 09 Aug 2024 19:33:19 +0000
ROA not before:           Fri 09 Aug 2024 19:28:19 +0000
ROA not after:            Fri 08 Aug 2025 19:33:19 +0000
asID:                     262407
IP address blocks:        2804:3f4::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:81:1e:26:a9:16:3f:16:95:a0:37:b3:f5:42:8a:8f:ca:16:1a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29
        Validity
            Not Before: Aug  9 19:28:19 2024 GMT
            Not After : Aug  8 19:33:19 2025 GMT
        Subject: CN=7F65DAD54625EAC5E71DB8CB3651D83E9D7BB6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:b8:f9:bf:6d:a9:d1:6f:26:bc:a8:41:b3:
                    91:5b:da:e2:7b:98:e1:1c:2e:db:ff:fb:1b:fa:74:
                    5b:8b:39:cc:3e:f1:7b:13:a7:00:e8:ac:23:ce:8a:
                    15:32:fe:22:d8:b2:fa:58:c0:fe:ff:37:8d:c0:bb:
                    13:37:a8:ec:62:ec:0d:a3:e9:e4:44:ee:d9:f8:ed:
                    79:41:ed:72:5d:cd:0f:ea:9a:c0:50:86:e1:e7:95:
                    ae:5d:7b:5a:87:6d:00:d5:5a:b0:60:da:32:26:1c:
                    52:cc:38:8f:ea:26:ec:5a:59:fa:9a:63:d0:88:dd:
                    76:5b:92:aa:04:c9:33:cb:b0:c7:2b:85:4b:d9:42:
                    6f:bb:1d:ea:88:9b:c1:20:34:db:87:94:23:85:97:
                    58:70:80:ec:b2:b9:45:0e:b9:cb:dc:99:93:d2:71:
                    c3:dc:1c:83:ad:73:ac:62:2e:22:72:ee:22:2d:f3:
                    1b:8b:43:2a:98:e8:99:9c:b4:4e:5a:8d:39:85:34:
                    9d:c8:c1:11:a5:a7:ab:ff:13:12:57:de:33:31:1f:
                    88:8a:9f:6c:3a:17:f5:57:59:8e:ff:00:50:a2:3e:
                    77:b6:dc:56:3d:bf:2a:5b:c5:4d:7a:31:bf:37:53:
                    8b:f0:6c:71:a4:cd:5e:0e:3d:e4:0d:45:b9:d8:5b:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:65:DA:D5:46:25:EA:C5:E7:1D:B8:CB:36:51:D8:3E:9D:7B:B6:F0
            X509v3 Authority Key Identifier:
                keyid:E4:34:1D:CA:E9:8C:4F:2A:AF:19:C7:17:D6:FB:4C:0B:43:E9:BA:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3336203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:5e:34:03:da:a6:64:49:bc:05:31:a1:54:5a:57:0b:f5:
         ff:38:93:5f:18:73:5b:c4:b6:14:05:5e:4c:19:89:5b:c8:07:
         e8:6b:89:48:ac:ff:f9:81:55:37:d1:a2:e2:b3:ea:23:7f:f0:
         34:36:74:3f:c9:75:90:a5:13:4a:5a:64:9c:12:ad:17:94:01:
         1b:02:0e:2b:08:fc:e7:90:10:8d:d1:db:b0:b5:df:fb:fe:79:
         57:fe:b9:92:1d:d4:13:af:fa:3d:02:36:87:2f:e3:d3:04:c8:
         54:9f:be:e7:a9:da:33:65:21:a0:a6:ea:4b:2f:da:0e:53:63:
         ba:41:e7:85:06:ec:ba:e6:1d:34:34:c6:d8:6a:70:cb:49:b3:
         1c:2f:6f:32:cc:3e:f3:92:09:ee:6d:0d:e1:f4:54:b3:36:c8:
         2e:2e:14:b5:f4:ac:85:33:80:67:cc:2c:33:3b:de:bf:27:66:
         16:c8:a9:ab:de:c1:24:a3:87:8e:47:aa:db:5e:09:e5:7a:9d:
         f6:49:22:ee:e4:05:65:d0:8d:90:d7:dd:aa:cb:7c:c9:7c:05:
         b7:08:6b:69:3b:0a:67:c6:cc:6e:be:e2:7b:d5:83:b9:9e:f7:
         a2:e9:15:c6:15:d6:d7:93:11:e8:f8:0d:26:f7:50:da:b7:a8:
         52:b8:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:41 2024 by rpki-client on console-ams.rpki-client.org