Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa
File:                     323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa (raw, json)
Hash identifier:          NV3EqAQGsfMlKfI/YkCMlvw+jimUYD5r1ZBl3ZCiPXc=
Subject key identifier:   CE:E0:98:19:3E:EA:13:D6:D0:1B:78:C9:48:92:33:59:83:AE:F0:D2
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       307E26B8FA4E38C07837A45D477E24C72E61BF93
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa
Signing time:             Thu 08 Aug 2024 00:41:38 +0000
ROA not before:           Thu 08 Aug 2024 00:36:38 +0000
ROA not after:            Thu 07 Aug 2025 00:41:38 +0000
asID:                     263641
IP address blocks:        2804:1094:1100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7e:26:b8:fa:4e:38:c0:78:37:a4:5d:47:7e:24:c7:2e:61:bf:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Aug  8 00:36:38 2024 GMT
            Not After : Aug  7 00:41:38 2025 GMT
        Subject: CN=CEE098193EEA13D6D01B78C94892335983AEF0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:3b:60:41:f6:2d:eb:11:bd:29:31:09:cb:
                    71:a3:98:4a:dc:ac:4a:2b:06:73:90:e5:04:f8:26:
                    8a:38:e0:cc:1c:9c:5f:71:45:ed:25:f2:00:76:c4:
                    4c:71:6a:1b:e0:77:52:e2:61:98:64:7b:11:9d:c4:
                    9f:a5:f0:2a:3e:dc:ee:fa:b7:d9:d3:5c:ca:ca:e9:
                    8b:a4:dd:2c:00:58:58:c2:22:e6:c6:3d:5b:84:01:
                    20:81:66:93:ba:cc:d0:f3:a6:cf:26:25:dc:dd:b6:
                    5b:69:14:43:28:d4:68:09:ef:7e:4c:24:a3:c3:0a:
                    c8:86:67:dc:91:97:d9:21:73:e0:92:58:19:3f:48:
                    59:b3:63:5b:ee:c7:49:22:ef:9a:be:f3:44:1a:9f:
                    a4:d8:43:47:c5:67:60:ee:d4:a5:9e:64:69:24:c0:
                    8a:49:c9:2b:33:9a:82:46:1f:54:5c:48:83:be:1c:
                    cb:d2:f8:0b:cb:5a:27:d6:a7:46:bc:57:a7:cf:1a:
                    a1:21:c3:42:05:63:fa:a6:a7:b0:6a:2b:1c:de:c4:
                    ca:02:30:13:cd:83:3c:8c:a8:34:28:13:2e:31:db:
                    91:6e:68:b9:48:98:ca:0d:e2:9f:83:61:06:b0:74:
                    ae:3a:50:68:60:bd:c5:92:a3:82:ae:bc:1b:4f:da:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E0:98:19:3E:EA:13:D6:D0:1B:78:C9:48:92:33:59:83:AE:F0:D2
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:43:e8:b8:3b:ca:4a:b9:82:28:95:91:66:27:74:09:b4:
         05:00:6a:d2:60:32:4b:f9:ed:4c:82:f1:d7:76:da:dd:82:fd:
         82:33:48:fb:84:5e:8e:74:77:5d:d4:71:48:6b:da:92:64:99:
         ea:1d:26:05:c4:ee:a2:56:98:52:05:f6:ee:9b:a8:9e:10:07:
         ba:37:69:d6:5d:9d:d8:93:6c:ff:17:fb:99:d4:57:fd:16:04:
         d9:88:37:3a:a1:54:0a:23:47:dc:81:a0:3a:52:c2:2c:e2:35:
         8c:4b:db:0a:2d:44:50:53:09:7f:3d:f4:96:77:ba:b7:ec:5a:
         e7:84:2e:a9:9e:5a:7b:59:d5:a3:a5:5a:13:54:10:77:c6:90:
         b1:44:1d:36:d5:b7:c1:c9:94:08:f2:d7:ee:29:3a:20:9b:37:
         17:9b:a7:01:d8:a2:21:02:80:de:d8:90:99:db:a5:b9:04:a8:
         2c:05:fc:47:18:15:fa:2c:41:a4:67:1c:08:71:04:7e:86:8a:
         79:12:03:da:b3:39:5e:ce:50:a1:60:86:81:41:00:0a:8f:82:
         06:b7:7b:78:48:0d:15:c1:b1:3a:47:f1:0a:a8:8a:78:46:08:
         c6:de:6a:a7:2d:d9:85:ba:ab:c2:98:c2:dc:f4:e2:44:16:73:
         10:6a:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org