Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa
File:                     323830343a313263633a3a2f33362d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          kg8oe9S81gutxp+p5O1ZnJv10r86cMye2Fxh8cxNwg0=
Subject key identifier:   0B:C2:89:AD:E6:9D:5A:4C:FE:40:5D:5D:88:0E:AB:8F:9F:76:73:2E
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       7497B3A64EAF681E3BF1E9D96ED1EE3D79CE28DD
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa
Signing time:             Wed 14 Aug 2024 14:12:45 +0000
ROA not before:           Wed 14 Aug 2024 14:07:45 +0000
ROA not after:            Wed 13 Aug 2025 14:12:45 +0000
asID:                     263499
IP address blocks:        2804:12cc::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:97:b3:a6:4e:af:68:1e:3b:f1:e9:d9:6e:d1:ee:3d:79:ce:28:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Aug 14 14:07:45 2024 GMT
            Not After : Aug 13 14:12:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:3e:77:7c:63:68:a4:c8:0b:45:21:6b:fa:
                    c4:5b:2a:6e:e3:dd:04:59:6a:c0:d5:70:10:f1:99:
                    71:79:c9:5f:d8:02:de:3d:65:fe:b3:39:85:1f:8f:
                    cb:09:e4:59:00:82:df:01:01:04:30:4b:0e:86:be:
                    1f:e6:06:bd:2f:57:e3:4d:f9:1f:f4:10:2c:14:39:
                    07:47:a4:24:6b:d7:25:96:12:d1:cb:90:8f:e0:a1:
                    67:3c:44:17:7c:e2:77:c1:5a:85:3c:0d:26:0c:3d:
                    d4:9c:32:d8:0b:20:99:b4:64:2f:56:e6:a9:71:19:
                    31:f4:55:ac:b6:db:cb:ca:75:75:57:2f:cc:16:b0:
                    00:b8:68:9b:77:50:5a:e9:9a:54:0c:43:a9:26:1d:
                    c9:aa:e0:d3:6e:8c:27:a9:ad:41:05:59:51:ad:a7:
                    ae:6c:eb:37:86:8e:44:1a:9d:79:e8:93:09:81:33:
                    5f:3c:42:39:e1:6f:69:ec:16:9b:4c:7d:c1:d9:c9:
                    9c:83:b7:58:94:14:f6:fc:71:d3:7c:e5:49:71:bd:
                    d3:50:47:ef:98:d0:60:72:26:21:f8:b1:43:c1:82:
                    34:65:dd:55:b6:50:57:73:91:e1:9f:32:d7:4d:e5:
                    6d:60:fb:1c:c6:d4:37:89:3c:92:9b:ef:45:48:4b:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:89:AD:E6:9D:5A:4C:FE:40:5D:5D:88:0E:AB:8F:9F:76:73:2E
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:c7:41:b6:d2:ba:f5:c3:db:72:fd:4c:f7:b2:de:54:ff:
         c2:c8:78:5f:b2:1e:76:6d:31:1a:3c:e7:90:dd:c0:32:ed:04:
         0a:42:54:d0:8b:86:ca:c7:e3:e8:fd:a4:2a:bb:54:34:15:5a:
         77:76:06:36:9f:5a:53:59:35:d6:cf:6f:d1:89:5b:7c:92:71:
         a0:82:2d:cc:29:2e:c9:15:5c:98:0e:74:e3:96:6a:4b:bf:6a:
         c3:21:06:eb:04:3f:a9:69:21:76:52:94:80:bf:7a:b9:80:69:
         9f:f8:3b:42:67:63:36:90:0c:7a:fc:56:49:bd:a4:f3:6e:32:
         b1:cf:27:75:33:a0:d0:79:41:70:e6:ad:3f:f4:2a:0b:51:80:
         3f:52:b5:0d:7f:7f:73:c8:23:8f:85:14:b4:a6:29:41:24:74:
         75:70:c0:f8:c0:84:d9:07:9e:5d:1f:e9:45:6e:93:08:9a:89:
         17:0c:e6:ee:fb:5c:36:f3:17:c1:98:e5:b9:e1:36:91:fd:25:
         b7:0c:c8:f3:df:71:6a:d2:a6:06:96:27:35:83:3d:5a:0e:fe:
         9f:71:7b:ae:a6:0a:1f:78:01:9c:c1:d6:68:28:ce:47:56:5d:
         54:25:90:ab:81:2f:34:e8:08:42:ec:6f:45:ed:f6:af:54:6e:
         52:de:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:56 2024 by rpki-client on console-fra.rpki-client.org