Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/323830343a343132343a3a2f33322d313238203d3e20323636303036.roa
File:                     323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (raw, json)
Hash identifier:          ws+8E9axDu1kqGuUlqdgzO93WSBoJ34POHzMLC/y+DQ=
Subject key identifier:   E6:08:FB:40:2F:8E:FE:2E:41:A0:7F:EA:53:D0:C6:95:AD:48:75:44
Certificate issuer:       /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial:       3FDA4C5688DF7210F6EE5575D0F7D3E60835FC90
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/323830343a343132343a3a2f33322d313238203d3e20323636303036.roa
Signing time:             Mon 30 Sep 2024 21:38:25 +0000
ROA not before:           Mon 30 Sep 2024 21:33:25 +0000
ROA not after:            Mon 29 Sep 2025 21:38:25 +0000
asID:                     266006
IP address blocks:        2804:4124::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
                          rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 23:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:da:4c:56:88:df:72:10:f6:ee:55:75:d0:f7:d3:e6:08:35:fc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
        Validity
            Not Before: Sep 30 21:33:25 2024 GMT
            Not After : Sep 29 21:38:25 2025 GMT
        Subject: CN=E608FB402F8EFE2E41A07FEA53D0C695AD487544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:c4:e9:77:68:a3:8e:9f:17:b5:74:1f:6f:
                    1b:97:9b:92:f0:39:05:35:9a:8f:0e:ad:4e:2c:43:
                    d2:46:a5:6e:77:6b:ce:ae:c3:5e:6b:d7:c0:6a:df:
                    42:d4:bf:fd:66:2b:14:89:f3:0c:22:4a:a1:51:f7:
                    32:db:f1:6c:ad:d2:a9:6c:99:d4:f9:78:6f:7e:37:
                    be:12:c3:e5:e1:f4:16:e7:b8:d7:5b:01:77:b7:ad:
                    ad:f6:8b:b1:da:72:b2:58:5f:9f:55:9f:44:6d:66:
                    76:9e:18:68:4e:bd:22:1d:0b:da:7f:64:9a:5c:84:
                    cd:1e:b2:69:f9:01:20:ec:1b:e6:97:19:3e:e0:93:
                    17:67:33:9a:9a:99:ec:fe:7a:aa:24:06:e0:60:8a:
                    05:2d:17:4a:80:40:04:2c:58:25:24:e7:80:08:70:
                    68:42:75:ac:8d:a3:26:c3:86:b2:72:4f:70:5e:85:
                    6b:61:95:ae:d4:62:29:70:1b:be:91:81:7b:93:88:
                    85:55:50:a8:25:bf:58:eb:a8:e9:ef:f7:0f:90:31:
                    45:69:bf:86:3e:fc:ba:e5:c2:71:d5:3d:27:98:09:
                    17:b2:70:e6:af:2c:9a:1a:fd:47:eb:6e:6c:d3:13:
                    9c:21:91:44:22:83:84:52:71:9e:cc:a9:8f:c3:a3:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:08:FB:40:2F:8E:FE:2E:41:A0:7F:EA:53:D0:C6:95:AD:48:75:44
            X509v3 Authority Key Identifier:
                keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/323830343a343132343a3a2f33322d313238203d3e20323636303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4124::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:a2:4f:b3:54:aa:f1:8f:60:2c:15:29:ed:93:36:db:00:
         28:b9:0a:66:4b:fa:3b:66:da:23:e0:69:89:f9:1a:22:2f:e1:
         bb:fe:4b:3a:57:d6:b1:5c:d3:a3:e9:21:d7:c2:f9:7e:50:0b:
         2f:64:98:6d:a5:1a:5a:a5:2e:b2:4e:05:7a:ae:77:f3:a5:ac:
         db:f3:b2:ce:70:37:70:95:af:83:bc:55:66:c6:e4:2b:0e:31:
         dd:c2:21:1d:17:9a:ab:f7:7d:67:9e:ee:9c:bd:96:da:41:84:
         26:a2:0a:2f:4f:42:86:d7:66:4b:0b:8d:f1:c7:ec:24:0e:17:
         f5:7a:c8:ad:f0:96:d3:e9:e9:1f:e2:df:24:74:af:e0:a5:9a:
         0b:96:dc:b6:b7:b0:47:98:1a:95:c1:a8:3e:e8:39:be:d3:65:
         d5:4c:4b:52:02:08:a3:f4:94:03:04:8f:40:81:5b:27:36:7b:
         26:9a:cd:86:35:f3:c2:2f:3c:c4:90:13:ad:f8:f7:04:a0:cf:
         a9:a3:e4:43:21:ca:f8:7c:f9:a1:52:f5:cf:28:d5:c8:a9:3e:
         85:1b:eb:8b:7b:6d:72:f4:a2:6e:43:48:56:32:8e:3f:ca:1f:
         23:53:0d:16:66:71:69:ca:03:5c:dc:fe:c0:83:de:a9:d7:d3:
         7b:a5:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:29:47 2024 by rpki-client on console-fra.rpki-client.org