Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/323830343a313534303a3a2f33322d3438203d3e20323633333830.roa
File:                     323830343a313534303a3a2f33322d3438203d3e20323633333830.roa (raw, json)
Hash identifier:          4OnzomS+/318mCdRV4qiGDu2JYrOGuJ4x/iuYs5HIY8=
Subject key identifier:   2A:CC:32:8F:8E:70:3E:AE:05:5A:90:F7:2D:44:5D:76:C6:C0:CD:87
Certificate issuer:       /CN=815D82355FE04A7A4061D1721A871BE88E744386
Certificate serial:       331EEF59A1CAC279CA89A825BDF38FEFEAE9F766
Authority key identifier: 81:5D:82:35:5F:E0:4A:7A:40:61:D1:72:1A:87:1B:E8:8E:74:43:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815D82355FE04A7A4061D1721A871BE88E744386.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/323830343a313534303a3a2f33322d3438203d3e20323633333830.roa
Signing time:             Mon 28 Oct 2024 16:02:01 +0000
ROA not before:           Mon 28 Oct 2024 15:57:01 +0000
ROA not after:            Mon 27 Oct 2025 16:02:01 +0000
asID:                     263380
IP address blocks:        2804:1540::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/815D82355FE04A7A4061D1721A871BE88E744386.crl
                          rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/815D82355FE04A7A4061D1721A871BE88E744386.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815D82355FE04A7A4061D1721A871BE88E744386.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1e:ef:59:a1:ca:c2:79:ca:89:a8:25:bd:f3:8f:ef:ea:e9:f7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815D82355FE04A7A4061D1721A871BE88E744386
        Validity
            Not Before: Oct 28 15:57:01 2024 GMT
            Not After : Oct 27 16:02:01 2025 GMT
        Subject: CN=2ACC328F8E703EAE055A90F72D445D76C6C0CD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:cd:78:88:b8:75:48:15:78:61:c0:b9:30:
                    0a:8c:91:4e:78:d4:94:15:bf:fa:dc:99:4e:ef:a5:
                    de:e1:dd:55:97:58:e7:62:a1:a8:88:fc:b8:f5:ae:
                    33:98:8d:b9:73:b8:9e:7e:83:9f:cd:c2:48:6b:e8:
                    f7:71:8c:0a:47:a2:38:13:7e:1f:58:e7:b8:6a:9b:
                    a7:65:c1:02:c0:41:51:bc:d6:28:55:4f:ab:3f:71:
                    86:67:a1:1e:1b:e2:87:fb:7a:18:ef:f8:01:21:f8:
                    60:0d:18:96:0c:09:3c:0f:be:9d:82:c7:f2:ec:d8:
                    fb:a0:24:30:cf:e2:d2:7f:58:00:6f:d5:eb:f7:54:
                    42:f9:11:65:d1:82:1d:47:8e:fa:c7:61:13:94:ee:
                    31:f4:72:e1:0b:21:d5:e4:92:33:d7:b9:fa:fa:a7:
                    d2:95:43:78:65:93:c3:9e:cf:4e:5f:03:22:e7:d6:
                    bb:45:ae:c3:e5:f1:1f:af:26:67:6f:c9:4b:48:d8:
                    d5:7e:09:62:b8:3a:4b:54:28:fc:84:25:2b:8b:92:
                    fa:fc:a9:16:e5:86:45:c1:d0:ed:ab:57:39:06:f0:
                    cc:97:95:2f:97:c7:6b:fc:8c:d1:f7:4f:89:e0:1c:
                    97:45:ad:54:84:9d:d1:42:43:f3:33:04:7f:88:9f:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:32:8F:8E:70:3E:AE:05:5A:90:F7:2D:44:5D:76:C6:C0:CD:87
            X509v3 Authority Key Identifier:
                keyid:81:5D:82:35:5F:E0:4A:7A:40:61:D1:72:1A:87:1B:E8:8E:74:43:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/815D82355FE04A7A4061D1721A871BE88E744386.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815D82355FE04A7A4061D1721A871BE88E744386.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/323830343a313534303a3a2f33322d3438203d3e20323633333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1540::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:6b:6d:89:39:4c:08:66:4e:d1:9e:90:96:71:3f:f2:27:3c:
         70:11:e3:f0:48:cc:c1:61:50:7a:8a:bd:84:e8:c1:90:89:f5:
         d9:8c:58:0e:92:1e:72:0c:ad:c8:e1:65:57:a5:a1:d4:06:8a:
         9d:92:9a:86:af:6e:b7:94:fd:f6:e1:96:5c:c3:01:c4:5b:8c:
         65:8a:4e:73:8f:ae:80:5a:d2:ba:66:31:86:bb:cb:21:d4:8a:
         40:4a:23:a4:42:47:a4:35:88:7f:59:d4:71:49:d0:47:f6:03:
         cf:28:29:b9:48:18:ee:ce:11:72:69:fb:d7:fe:cc:87:09:49:
         ea:bb:7c:ee:7f:11:7c:c9:5a:43:d0:ec:6a:1a:c7:d2:71:a3:
         1e:1a:dd:d1:ce:d9:47:9f:5d:52:94:12:81:37:e9:80:dd:d3:
         4a:07:49:90:7b:de:69:34:14:75:ff:e4:97:cd:37:72:c2:88:
         3d:0e:e5:44:a1:1a:5d:53:20:b7:82:50:02:cc:84:87:ab:8d:
         88:93:9d:7d:86:86:7e:55:11:20:b0:cb:57:0a:11:45:5e:bc:
         19:8b:10:3a:68:fb:a4:c4:7c:7b:a4:bf:ae:46:1f:1c:42:32:
         92:b7:5f:9b:95:2f:4e:25:84:5c:a6:db:42:8b:8c:94:9a:f3:
         5a:cd:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org