Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31313a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a31313a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          qxmWi+U8FIKErqaOCFNbvhpYOrW7XjolpCLZJREjEVg=
Subject key identifier:   28:11:2B:59:FC:C1:92:47:90:E5:7D:CB:96:F0:87:EE:0C:CE:FD:5A
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       58F3FF6D1B64D3206A7198AA669AD46C576AE647
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31313a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Tue 11 Jun 2024 18:04:12 +0000
ROA not before:           Tue 11 Jun 2024 17:59:12 +0000
ROA not after:            Tue 10 Jun 2025 18:04:12 +0000
asID:                     263541
IP address blocks:        2804:1398:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f3:ff:6d:1b:64:d3:20:6a:71:98:aa:66:9a:d4:6c:57:6a:e6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Jun 11 17:59:12 2024 GMT
            Not After : Jun 10 18:04:12 2025 GMT
        Subject: CN=28112B59FCC1924790E57DCB96F087EE0CCEFD5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:65:e5:80:2f:a1:50:ba:db:60:4c:6a:3a:
                    36:32:93:18:96:1f:99:54:ab:67:20:f0:1c:c8:c0:
                    f1:18:a8:35:0c:0d:7c:64:2d:b7:cf:b9:b3:1c:8d:
                    41:6a:7c:4d:bf:b4:38:2b:53:08:00:16:c2:94:e7:
                    bc:35:cd:0b:47:04:c7:51:dd:86:58:bd:46:50:05:
                    1b:9e:3d:91:e5:5e:e1:11:20:4b:46:31:dc:cb:c8:
                    a9:92:3e:c7:d2:b2:ef:80:fc:54:2f:3e:fb:fa:8b:
                    f8:7e:17:37:53:53:be:3c:a4:09:8b:a2:58:82:c3:
                    ff:be:d6:02:92:52:cc:2c:9d:09:8e:cd:ca:ca:90:
                    24:0a:d7:58:15:b4:10:b5:9d:7a:99:f5:bf:d5:9b:
                    16:65:dd:d0:d1:fe:35:7f:67:d2:17:35:2b:ac:1d:
                    c8:57:18:98:41:43:ea:98:7b:8d:db:38:7a:ed:3a:
                    2a:20:91:66:63:91:3f:c4:d5:30:e0:27:40:61:f7:
                    22:b6:07:cd:18:53:4c:61:5c:a4:70:99:a1:16:68:
                    30:97:9b:e5:72:87:59:38:34:24:9e:9b:9a:93:ee:
                    41:7f:9d:79:4e:a7:19:de:c4:b4:87:89:ea:24:ff:
                    fb:2b:7a:80:aa:4a:12:46:78:d4:73:7f:73:32:b0:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:11:2B:59:FC:C1:92:47:90:E5:7D:CB:96:F0:87:EE:0C:CE:FD:5A
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31313a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:da:37:1b:c0:57:47:19:05:a1:8c:69:61:b1:36:1f:34:f8:
         81:0b:12:15:6b:21:92:5c:c4:63:34:59:81:b1:ad:93:52:24:
         5d:a7:cb:ab:19:1a:0b:df:2c:f0:e9:a4:2d:83:5f:a1:6f:c8:
         1c:b0:d5:eb:ca:e6:21:0f:cb:95:87:d9:f0:da:73:63:e4:42:
         0f:bd:e5:30:c4:cd:52:e7:4f:ca:36:de:16:6c:3c:3b:c6:b0:
         c4:36:3d:11:ef:50:0b:6b:cc:62:95:97:e5:d2:82:ad:f1:ea:
         9b:6b:7f:2e:07:2b:de:bd:56:fa:8b:20:ad:d8:bb:3a:2c:a1:
         e1:9f:06:7e:2c:79:eb:2b:1e:f8:22:1f:c8:63:33:24:89:ef:
         07:4d:35:12:2d:2f:49:dc:22:2c:06:d4:84:21:d3:e2:28:70:
         d9:4c:a6:a7:6c:84:56:a3:18:b8:3c:e4:c5:2f:2a:cd:c0:91:
         04:af:78:15:c2:66:fd:bf:da:d2:04:cf:5b:a6:c0:0e:73:74:
         0f:47:49:ad:ef:a6:87:30:87:a5:68:e5:8d:c6:34:5a:1c:17:
         10:d2:41:65:63:b4:fa:e1:81:12:f2:72:dd:e2:62:17:96:fb:
         b3:a0:69:86:83:c7:7f:b1:e6:9d:ba:36:80:60:ff:b9:0d:61:
         dd:17:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:18 2024 by rpki-client on console-ams.rpki-client.org