Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a613030303a3a2f34302d3430203d3e20323634303031.roa
File:                     323830343a323934383a613030303a3a2f34302d3430203d3e20323634303031.roa (raw, json)
Hash identifier:          Kq0IiibN50wbOo+X4cTCcN7IzbmhLrQgdR7LKPZtIew=
Subject key identifier:   2C:92:BE:B9:C2:A0:3A:EE:D2:37:B8:CC:7A:AA:FD:ED:A7:E7:57:90
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       7F65289FB0CBD4001F2A7CC6FBED2C4F3BB1AD64
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a613030303a3a2f34302d3430203d3e20323634303031.roa
Signing time:             Thu 04 Apr 2024 11:10:21 +0000
ROA not before:           Thu 04 Apr 2024 11:05:21 +0000
ROA not after:            Thu 03 Apr 2025 11:10:21 +0000
asID:                     264001
IP address blocks:        2804:2948:a000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:65:28:9f:b0:cb:d4:00:1f:2a:7c:c6:fb:ed:2c:4f:3b:b1:ad:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Apr  4 11:05:21 2024 GMT
            Not After : Apr  3 11:10:21 2025 GMT
        Subject: CN=2C92BEB9C2A03AEED237B8CC7AAAFDEDA7E75790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:d0:67:40:ab:d8:42:41:f3:2f:48:87:0a:
                    ef:11:84:7b:25:6e:80:be:2d:bd:88:f5:60:6c:2d:
                    5c:85:f6:1b:6b:23:48:45:d1:af:67:89:f7:85:d0:
                    c2:3d:59:df:3a:7d:56:93:9f:0c:e5:e8:cb:c4:50:
                    2a:d6:5e:4e:66:7b:77:0a:bd:1e:7b:3b:76:72:b2:
                    15:4c:36:bf:5e:03:4b:c5:d2:2d:54:13:38:b3:4c:
                    ab:d1:e9:e6:b3:5a:e6:12:b6:c7:e5:ce:9e:49:2d:
                    c1:6b:22:03:0a:37:25:87:c0:6a:93:88:d8:f2:3c:
                    21:f7:38:95:a1:76:65:f1:1b:9c:ad:d9:cf:c4:22:
                    91:90:2f:b0:af:bb:c2:e1:1d:91:92:d5:bc:6d:86:
                    97:3f:61:27:69:c5:7d:8c:f0:22:ab:e1:e4:58:14:
                    91:b6:d6:00:68:a9:05:be:1d:c5:a1:0f:8f:fd:cd:
                    cd:32:ff:2d:dc:00:c5:8f:04:04:04:7b:43:c3:cc:
                    dd:15:d9:12:16:0c:b5:73:2f:64:92:84:3c:72:dc:
                    3b:20:10:b9:89:6b:31:0a:3f:eb:13:60:13:c2:e5:
                    65:fa:60:24:e6:fd:08:7d:b0:ef:6d:a1:31:83:45:
                    a7:c0:4f:65:93:e2:84:af:8e:9a:c9:6c:80:b6:c7:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:92:BE:B9:C2:A0:3A:EE:D2:37:B8:CC:7A:AA:FD:ED:A7:E7:57:90
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a613030303a3a2f34302d3430203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:96:d5:01:82:6c:45:7a:20:af:af:c3:c6:d5:44:d3:38:f9:
         b0:24:ac:73:35:65:28:8c:16:2c:fe:2f:28:41:b0:e6:ea:3f:
         94:68:2e:4d:dc:74:53:54:df:3c:fa:7c:70:f6:57:f7:fe:f8:
         7f:d6:ef:08:dc:d1:32:30:60:d0:b0:77:3e:74:71:0d:f6:62:
         d7:e2:b8:b7:c4:c5:1a:a5:7f:f9:e0:17:39:6e:2a:1a:66:12:
         28:43:02:9c:55:b8:af:cd:56:3f:20:67:54:72:d7:aa:7b:ea:
         d0:a6:f9:3b:0c:97:76:32:15:e9:30:24:ee:2d:a5:b1:4e:9d:
         f6:a3:95:8a:e3:cf:7b:2c:95:df:3c:fa:f0:b9:79:ae:3a:77:
         63:3f:7d:6d:c8:3d:f5:b7:8d:ff:a6:74:b1:fa:ca:8b:07:17:
         c7:cb:9f:0a:8c:52:06:af:d0:46:25:14:5d:28:d5:6d:1e:1a:
         9c:81:5e:b0:90:1e:26:35:3f:45:71:70:f7:a2:0d:ec:3f:d0:
         eb:b3:de:83:55:06:07:50:8e:ef:ca:74:f5:72:83:74:85:04:
         2f:6a:f6:2d:07:07:88:c8:7b:e3:9f:00:43:a5:98:56:89:32:
         0f:79:00:3b:b1:c6:f9:33:c3:d7:44:5a:7b:eb:a8:24:c1:55:
         ba:69:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:20 2024 by rpki-client on console-fra.rpki-client.org