Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa
File:                     323830343a373235633a3a2f33322d313238203d3e20323632353036.roa (raw, json)
Hash identifier:          qN1vK7+iDrTI7vCdGKhqeyWf1Kt+IItsrRxQgemx7fM=
Subject key identifier:   DE:FB:6F:3E:DB:C9:C8:73:47:4E:2B:69:DB:F7:F2:AE:54:19:F3:C9
Certificate issuer:       /CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Certificate serial:       62374C793EFF134E039A84D9919E0F8EDAAC467D
Authority key identifier: EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa
Signing time:             Thu 11 Apr 2024 13:40:19 +0000
ROA not before:           Thu 11 Apr 2024 13:35:19 +0000
ROA not after:            Thu 10 Apr 2025 13:40:19 +0000
asID:                     262506
IP address blocks:        2804:725c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl
                          rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:37:4c:79:3e:ff:13:4e:03:9a:84:d9:91:9e:0f:8e:da:ac:46:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
        Validity
            Not Before: Apr 11 13:35:19 2024 GMT
            Not After : Apr 10 13:40:19 2025 GMT
        Subject: CN=DEFB6F3EDBC9C873474E2B69DBF7F2AE5419F3C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:46:b4:32:81:d3:3a:6b:69:1c:11:34:fd:
                    4d:ff:cd:7b:8a:41:7a:28:ca:5b:d9:3e:ea:98:4d:
                    15:2a:7a:b1:db:e9:46:79:6c:02:09:04:f2:5a:12:
                    31:33:93:bc:0a:6f:83:2d:66:e5:4a:be:a2:63:d4:
                    26:b0:a2:a5:69:c1:81:02:84:83:cd:89:49:09:2b:
                    06:e2:e8:ff:df:4f:6d:b4:ac:80:39:0f:cb:bf:48:
                    9e:cf:86:c5:c0:00:16:9c:7f:8c:3a:a0:a2:d3:99:
                    08:f2:d3:1a:b1:2d:51:71:0d:7d:3f:42:52:cf:67:
                    ad:bb:34:0f:3b:39:a1:cb:87:d4:44:75:1f:7f:44:
                    91:4f:c6:ea:fc:3e:21:41:30:4c:41:b1:19:80:8e:
                    e6:89:26:1e:1f:7d:ae:47:be:6a:94:55:a6:48:68:
                    27:03:e7:1c:31:79:0a:64:db:32:75:ff:45:23:93:
                    11:8d:8d:eb:fb:ff:c6:d1:5b:b7:69:cb:fc:27:1a:
                    ee:4a:d9:aa:7b:3c:19:c0:af:0d:da:36:2f:86:9e:
                    86:3c:73:90:9f:57:f7:69:1d:d1:a1:dc:40:f7:c8:
                    05:b8:29:78:fa:ab:c1:01:8a:18:78:92:55:1d:ec:
                    1d:49:8c:c7:09:cc:7d:b7:0a:95:c4:49:7d:dc:d3:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FB:6F:3E:DB:C9:C8:73:47:4E:2B:69:DB:F7:F2:AE:54:19:F3:C9
            X509v3 Authority Key Identifier:
                keyid:EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:725c::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:85:3a:9d:c1:7e:b6:4c:14:bc:91:a7:5c:87:25:6b:eb:
         69:47:0d:30:23:47:6b:a3:64:33:d9:a8:5d:f0:06:77:b3:e7:
         5c:15:2d:a7:e4:c8:29:4c:ee:01:e0:14:0d:54:81:8e:64:2c:
         12:9f:61:09:e9:05:5d:81:aa:0e:b1:84:f6:8e:65:d3:a7:c0:
         eb:2a:f2:04:f6:53:03:63:66:99:0f:73:b7:e8:86:93:b3:21:
         3f:1e:38:1f:46:07:ac:0c:a6:5d:0a:cb:3e:d3:33:09:93:0b:
         ae:c1:74:ca:05:57:90:66:63:a0:3a:2a:fa:2b:c5:6f:fa:93:
         13:46:cf:2c:36:00:b5:ad:74:33:b1:b2:97:d5:08:24:f9:f7:
         a7:15:35:e2:29:97:77:bc:ca:7f:53:c7:71:02:cc:c0:63:a4:
         68:ab:90:ff:62:52:5c:17:da:70:59:38:8d:5f:80:12:ab:d2:
         05:f1:15:dd:d8:95:e8:cc:8d:59:ee:d8:60:a2:e8:c5:2c:f0:
         9e:05:6a:be:ad:aa:38:1b:17:5c:2c:d1:3b:de:35:6a:98:8c:
         da:01:16:8b:c3:22:9d:c4:6a:f2:4e:bd:53:a5:cd:61:65:4d:
         5f:1b:1e:e3:3d:fd:79:50:70:1e:31:f2:d7:ae:c7:6f:71:57:
         bb:d4:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:56 2024 by rpki-client on console-fra.rpki-client.org