Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a386162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a386162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          BHA9oqlik7Ybc579GcX19JFjuW23aueDGwlXCKVAcL8=
Subject key identifier:   C3:B4:C0:1B:FA:9E:E1:B8:6C:B9:76:62:DC:EB:62:DE:15:D7:72:BA
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       7E3249B236E4B19AFBA80FAF5118267427B85C1F
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a386162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 24 Sep 2024 19:47:58 +0000
ROA not before:           Tue 24 Sep 2024 19:42:58 +0000
ROA not after:            Tue 23 Sep 2025 19:47:58 +0000
asID:                     264485
IP address blocks:        2804:2050:8abc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:32:49:b2:36:e4:b1:9a:fb:a8:0f:af:51:18:26:74:27:b8:5c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Sep 24 19:42:58 2024 GMT
            Not After : Sep 23 19:47:58 2025 GMT
        Subject: CN=C3B4C01BFA9EE1B86CB97662DCEB62DE15D772BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:04:f0:b8:48:1a:0a:cc:c0:ab:f5:88:79:
                    e4:ec:fc:ca:66:ad:dd:dc:b3:d8:8e:98:6b:9b:76:
                    d6:b1:32:75:13:2c:f3:00:66:3d:c8:15:9b:04:04:
                    78:34:e5:7f:d0:2d:69:b7:4b:6a:35:59:a9:fc:81:
                    74:3c:bd:7e:ac:62:9e:58:8a:be:39:7d:76:1d:39:
                    7d:ec:4a:24:d9:3b:4d:f7:1e:c2:ec:14:e1:25:c2:
                    b8:41:54:14:87:61:9b:42:f4:30:9a:8b:d8:89:89:
                    82:72:a4:3f:2a:a2:7f:6e:7b:fa:1c:05:82:6d:05:
                    9d:16:18:b1:a5:b4:da:9c:dc:f4:af:b2:9d:97:b2:
                    03:d0:b6:57:75:d8:cb:53:32:56:10:84:ba:ef:2d:
                    72:66:33:d4:8b:08:d1:96:9e:dc:6f:17:3d:41:65:
                    5f:0f:c4:0c:43:a1:d2:15:0f:cc:d3:53:54:45:39:
                    13:03:cd:6d:0f:ac:03:d1:c7:26:0d:3d:79:be:1f:
                    cf:13:9e:0f:e1:81:ec:ec:57:f8:b3:b2:be:56:2c:
                    a7:e1:03:99:b9:5b:7d:02:30:f7:62:3b:d4:01:42:
                    e8:2f:d6:86:4d:b2:31:30:d3:9b:21:67:ab:e9:1e:
                    63:5f:55:97:55:2e:91:43:ec:85:28:36:6d:bd:05:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B4:C0:1B:FA:9E:E1:B8:6C:B9:76:62:DC:EB:62:DE:15:D7:72:BA
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a386162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:8abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:f0:20:dc:87:92:a2:ac:d2:66:82:9d:d9:e6:fa:5d:53:e0:
         1b:55:bb:cb:55:83:15:eb:8e:58:53:e5:9e:f7:6a:93:e8:d9:
         58:2a:74:f6:ff:0b:7e:be:52:12:69:1c:1f:d1:d9:d9:01:9e:
         19:f7:a2:ac:58:69:c4:7d:e8:6e:e5:4d:65:c2:16:d4:d7:d2:
         9d:97:af:4b:4c:1f:39:80:31:d2:70:5b:c0:4e:ef:bf:0b:e7:
         5b:5a:8d:5e:8f:bc:fc:b2:91:55:00:b4:e3:1e:81:c5:eb:34:
         dd:eb:86:37:6e:a3:8e:31:20:24:49:6e:16:5a:66:1b:d6:75:
         2c:4d:84:5c:34:91:eb:d8:e9:24:98:79:55:e8:71:7f:11:ec:
         7f:4c:70:8e:17:88:da:f9:a5:32:17:f6:ff:39:eb:c6:36:2e:
         88:4b:55:c4:09:d9:99:15:48:1b:7c:da:c9:bd:1c:0d:be:ad:
         ba:5b:94:15:fc:b4:7e:7f:4a:2a:85:32:4e:51:37:bb:aa:64:
         80:20:75:ef:42:94:48:af:61:6d:dd:14:f4:69:98:80:52:66:
         1d:2e:ae:e8:bc:b3:84:83:f6:fd:43:bb:7e:de:a6:ff:b1:56:
         85:c7:68:87:e0:67:57:32:43:d3:f3:cb:31:8f:8b:ff:82:58:
         f8:24:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:53 2024 by rpki-client on console-fra.rpki-client.org