Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33332d3333203d3e20323633343939.roa
File:                     323830343a313263633a3a2f33332d3333203d3e20323633343939.roa (raw, json)
Hash identifier:          rCtK/uXh7J8ybcySMJ2sgNsxEq1z2Eu0P0/+hY4gXyk=
Subject key identifier:   32:7B:91:D1:95:BB:37:E5:30:DB:71:B9:79:F0:AB:5A:C1:6E:EE:E4
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       36A83F54D410775BBE35067FBFAF94E070F1FC49
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33332d3333203d3e20323633343939.roa
Signing time:             Wed 14 Aug 2024 14:12:19 +0000
ROA not before:           Wed 14 Aug 2024 14:07:19 +0000
ROA not after:            Wed 13 Aug 2025 14:12:19 +0000
asID:                     263499
IP address blocks:        2804:12cc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a8:3f:54:d4:10:77:5b:be:35:06:7f:bf:af:94:e0:70:f1:fc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Aug 14 14:07:19 2024 GMT
            Not After : Aug 13 14:12:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:3e:3b:6a:83:f4:ef:5d:00:84:6d:58:47:
                    eb:5f:d4:10:48:55:6b:b2:3c:44:14:5e:6f:eb:0d:
                    ff:d9:36:65:e1:74:ab:17:ce:09:13:d9:88:cb:f7:
                    84:67:48:16:a9:37:ac:7d:29:5d:03:f6:73:80:da:
                    90:d8:56:b8:36:8e:a7:73:22:2b:3f:0a:c1:f8:ea:
                    77:17:62:19:ac:44:67:50:1a:dc:1b:85:e4:62:51:
                    53:9a:67:75:cd:f5:a7:06:92:dd:65:aa:47:13:56:
                    13:00:a0:4d:73:12:51:2c:10:5a:96:50:94:ca:b7:
                    fa:8e:fb:c6:aa:97:a8:55:60:b7:4f:b9:6e:0b:ef:
                    f8:70:ff:1d:a6:ba:41:d9:fa:2a:a5:29:69:6c:df:
                    f1:8f:8e:cc:73:25:b1:1d:2c:c1:5c:e4:03:ef:c4:
                    3e:91:78:b7:a1:52:01:29:24:f1:52:dc:fb:12:dc:
                    87:a9:5c:30:ec:19:37:0e:39:b4:92:03:c0:b2:a2:
                    1d:ba:c4:c4:13:1c:c5:2f:a8:66:e6:8e:f9:d0:33:
                    b3:66:ac:5a:f5:11:ca:e5:ee:1c:e0:2d:5a:25:af:
                    b4:a8:5c:e3:c2:e9:55:df:e2:fa:77:b4:5d:b7:c5:
                    f2:14:2c:a2:82:d6:87:42:45:5a:54:3a:48:fb:91:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7B:91:D1:95:BB:37:E5:30:DB:71:B9:79:F0:AB:5A:C1:6E:EE:E4
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33332d3333203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:63:1f:78:a0:59:78:d1:66:ae:13:27:64:30:e9:f0:5b:
         3b:b1:9f:f7:4b:9d:0c:b2:ca:d6:fd:71:35:a4:fc:ee:7b:47:
         dd:55:d8:7f:ff:b3:63:0f:ab:21:78:6c:10:06:8a:fd:f2:df:
         ad:2f:f6:f6:bc:2d:ba:e6:5a:f5:0a:b5:b5:d7:aa:82:ae:f6:
         c5:65:c9:80:91:90:97:7c:85:a6:3e:f9:fe:a3:51:dc:13:e7:
         a0:db:fc:b1:d6:f1:83:db:27:13:de:26:9d:7b:68:03:61:64:
         b0:7f:f9:8d:22:ff:b2:ff:4c:8b:d9:1c:0a:11:64:d4:a2:0d:
         2e:e7:51:71:4f:67:d6:71:63:a9:54:14:76:82:0a:29:a2:69:
         43:07:b2:fa:a9:09:41:23:c5:47:19:04:3e:29:5e:8c:03:df:
         be:37:80:62:72:b8:cc:1e:86:d8:72:36:ed:88:23:b9:fd:5d:
         3e:bf:2f:71:25:80:2d:08:4d:e7:3b:ce:65:e7:7e:f0:c6:77:
         b3:3d:be:15:ea:9b:69:90:9b:67:c8:58:4e:e1:e3:08:18:bc:
         49:d0:9e:bd:2a:6d:cc:ea:4f:2c:42:ed:ea:19:3d:57:58:1f:
         d1:0f:6b:8d:86:8c:ae:96:5e:ce:f0:9c:7d:b7:70:13:b8:dc:
         9b:d6:d6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:09 2024 by rpki-client on console-ams.rpki-client.org