Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/323830343a336536343a3a2f33322d313238203d3e20323636353933.roa
File:                     323830343a336536343a3a2f33322d313238203d3e20323636353933.roa (raw, json)
Hash identifier:          Tq6jALu2wk0wBULO1JX7U19LqMcYiw7Mmv9CDLBlLfE=
Subject key identifier:   40:B2:50:D6:DC:E7:AA:4C:F0:73:58:5F:8D:72:6C:F0:A2:B1:5B:96
Certificate issuer:       /CN=AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D
Certificate serial:       45DDD4AAB9B95E5D3BC1CE11CE50C0E50B5A3C7B
Authority key identifier: AB:95:6F:7A:92:84:BB:A6:0E:AA:6D:BF:CF:12:6F:D5:FB:62:F3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/323830343a336536343a3a2f33322d313238203d3e20323636353933.roa
Signing time:             Mon 29 Jul 2024 17:44:18 +0000
ROA not before:           Mon 29 Jul 2024 17:39:18 +0000
ROA not after:            Mon 28 Jul 2025 17:44:18 +0000
asID:                     266593
IP address blocks:        2804:3e64::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.crl
                          rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:dd:d4:aa:b9:b9:5e:5d:3b:c1:ce:11:ce:50:c0:e5:0b:5a:3c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D
        Validity
            Not Before: Jul 29 17:39:18 2024 GMT
            Not After : Jul 28 17:44:18 2025 GMT
        Subject: CN=40B250D6DCE7AA4CF073585F8D726CF0A2B15B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:6f:41:72:1f:21:36:5c:78:81:81:6f:3c:
                    3c:5a:ea:79:27:4e:02:a8:c4:35:42:ff:ec:06:e3:
                    9e:5b:a4:d8:f3:08:4c:c0:a2:60:f9:61:be:71:6e:
                    16:df:22:7a:67:26:e2:5d:ac:22:7f:d1:35:ae:f9:
                    b1:af:89:cf:a7:87:e5:38:36:eb:a1:ae:fd:2b:67:
                    4f:df:34:31:20:20:ef:4e:9f:c3:d7:1b:42:a0:ce:
                    a8:c9:54:85:82:90:19:0c:15:d3:f6:b3:66:3d:5c:
                    5b:1c:05:93:e9:a3:72:c8:1c:92:5f:93:4c:71:7a:
                    ca:f2:22:1f:02:db:6d:9b:68:fb:ae:25:b9:29:ec:
                    80:46:6e:f9:d3:b4:de:8e:e7:ca:3a:eb:dd:46:07:
                    a3:59:22:1f:15:eb:14:4e:73:e1:6d:f9:8e:79:81:
                    6f:3b:58:45:f6:5c:09:a4:4a:ff:40:e9:b1:23:20:
                    47:c1:15:35:6d:e3:03:ea:22:29:ca:78:a8:fc:e3:
                    0c:36:6f:c9:5f:54:e2:8b:61:91:ff:2b:22:78:38:
                    c1:a8:92:78:a5:d3:33:43:0a:27:f7:2e:ef:37:c4:
                    a7:8e:fe:2a:97:32:89:94:8e:56:c0:7a:1b:19:41:
                    b1:f5:94:2e:b8:d1:d9:b4:ea:79:f8:a9:ff:bd:de:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:50:D6:DC:E7:AA:4C:F0:73:58:5F:8D:72:6C:F0:A2:B1:5B:96
            X509v3 Authority Key Identifier:
                keyid:AB:95:6F:7A:92:84:BB:A6:0E:AA:6D:BF:CF:12:6F:D5:FB:62:F3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/323830343a336536343a3a2f33322d313238203d3e20323636353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:d8:98:06:cd:e5:1a:9e:d2:b5:32:1c:b0:5e:7c:49:0d:dc:
         01:a7:82:b2:c2:94:aa:aa:d3:c9:13:1a:53:3a:22:09:e9:fd:
         06:15:5e:4b:b2:08:cf:57:3c:c0:68:6d:2e:2b:38:3d:a7:3e:
         b3:0d:c1:eb:f1:fa:56:0e:0d:7a:53:ac:95:b2:70:77:af:d2:
         21:db:d2:18:c9:ea:16:8c:03:4e:b9:d5:37:fd:e5:4b:f3:59:
         67:8a:63:ac:6a:68:e9:29:2c:d4:ad:19:07:11:a6:4f:f7:d4:
         5e:0b:56:f0:01:f6:a2:b5:ec:9a:76:89:13:c4:54:7c:c8:e7:
         27:b9:1b:40:10:df:9e:62:42:af:4f:8a:e9:f3:2d:8a:ff:5c:
         f8:c0:94:1e:fa:31:ed:c9:1d:2c:aa:88:a9:c1:b6:f9:6e:6d:
         09:ba:ab:89:29:a0:a8:a1:22:5e:03:a7:92:d6:35:d5:d1:4c:
         3e:38:6d:d2:13:5b:5f:66:51:a2:b6:9e:73:bd:32:9f:39:89:
         de:69:04:06:f3:8f:b5:cd:d6:8d:83:77:80:54:44:fe:4b:b6:
         dc:5c:ce:43:3b:f7:98:8b:d4:f7:7a:cc:6a:e4:a2:da:4d:3a:
         95:31:62:08:40:2d:b9:af:6c:9b:b7:80:a1:bb:ff:38:f0:6c:
         52:ed:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:06 2024 by rpki-client on console-fra.rpki-client.org