Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/323830343a346231383a3a2f33322d313238203d3e20323637323833.roa
File:                     323830343a346231383a3a2f33322d313238203d3e20323637323833.roa (raw, json)
Hash identifier:          7UekPUmqTuDPjiMaZUccN7+8/63U8M8jIEHqQtuZpfY=
Subject key identifier:   EB:95:A2:E4:0F:E8:F4:7A:63:F4:E8:F6:F9:9D:94:25:85:D1:A2:12
Certificate issuer:       /CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
Certificate serial:       653466730CD7847198AC2A91A9819E2B5B2DEB11
Authority key identifier: 43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/323830343a346231383a3a2f33322d313238203d3e20323637323833.roa
Signing time:             Thu 04 Apr 2024 13:17:53 +0000
ROA not before:           Thu 04 Apr 2024 13:12:53 +0000
ROA not after:            Thu 03 Apr 2025 13:17:53 +0000
asID:                     267283
IP address blocks:        2804:4b18::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl
                          rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:34:66:73:0c:d7:84:71:98:ac:2a:91:a9:81:9e:2b:5b:2d:eb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
        Validity
            Not Before: Apr  4 13:12:53 2024 GMT
            Not After : Apr  3 13:17:53 2025 GMT
        Subject: CN=EB95A2E40FE8F47A63F4E8F6F99D942585D1A212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:1b:5d:75:ef:a7:97:47:da:6a:71:a1:f9:
                    b1:ba:c2:71:4a:36:47:44:56:e6:bb:87:a6:8c:de:
                    7b:f6:d6:e0:0b:57:12:b5:f4:ad:b1:8b:d0:1f:9c:
                    e1:cd:ac:32:ff:64:b4:32:46:38:b5:6d:1a:12:86:
                    77:14:04:51:86:42:5d:0a:00:06:b4:04:47:c0:24:
                    7c:63:a4:62:85:99:fb:fd:fa:89:ee:ca:c5:36:4d:
                    61:db:5f:f5:36:78:70:7e:4b:5c:3c:a3:9a:9a:d7:
                    68:92:2b:e3:3f:7d:cd:77:21:09:42:b2:ed:99:71:
                    4b:cb:4b:1f:78:ef:51:e5:f6:09:5d:ac:a3:83:0a:
                    65:70:a9:58:2b:f4:2f:3f:6e:47:c0:f2:66:c3:bf:
                    90:e7:69:de:99:3c:35:88:34:bf:20:57:9c:8c:c8:
                    09:e8:0e:49:b0:7a:9b:c5:3f:ca:eb:31:d0:df:a4:
                    04:91:d2:48:7b:99:5a:0b:cd:8d:88:36:6e:84:9f:
                    c3:84:7a:96:f0:f6:09:8c:7a:c9:ad:b0:9d:0a:c3:
                    b3:bf:42:23:83:58:f4:57:50:e9:fd:f3:31:23:79:
                    5c:b2:c5:30:05:36:49:18:1f:07:81:ad:df:5c:fa:
                    00:58:76:32:f3:e8:b0:3c:a4:ed:32:69:62:9d:46:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:95:A2:E4:0F:E8:F4:7A:63:F4:E8:F6:F9:9D:94:25:85:D1:A2:12
            X509v3 Authority Key Identifier:
                keyid:43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/323830343a346231383a3a2f33322d313238203d3e20323637323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:2a:b2:ff:08:56:53:b7:79:28:ef:39:8b:15:23:a1:4c:d7:
         87:6c:c9:16:29:14:df:ac:69:1b:3c:82:88:93:e9:83:2e:ba:
         eb:4c:c8:e6:4f:2b:b1:9b:8a:5b:ff:3a:57:4b:97:bc:5b:0d:
         c9:90:20:d6:db:15:d0:b6:46:38:f0:23:06:9f:3d:d0:c0:2b:
         68:45:03:86:ef:a8:91:16:40:28:58:30:3d:9b:c9:f1:82:d0:
         f8:44:be:2b:00:95:f5:3c:d7:e3:a1:49:6d:95:0b:4b:7b:5e:
         73:7d:a7:fd:0b:7a:d6:2b:dc:80:69:b0:6e:9b:57:ed:2f:44:
         ce:87:f2:d6:7d:2f:07:49:d0:c4:99:d1:95:cd:97:2b:0a:32:
         90:4e:d2:ba:f0:67:64:ed:55:ca:82:cf:31:29:5a:2a:bd:69:
         4d:81:8d:87:2e:86:a4:8e:2c:6f:e7:e6:a9:36:1f:5a:25:42:
         56:c5:e5:63:0f:05:96:86:19:43:15:d6:12:96:b3:1e:68:6e:
         e4:87:6f:9c:77:de:a2:10:c7:29:29:5f:9c:96:a5:2f:66:b0:
         b1:b1:fb:0d:0f:7e:74:56:b3:56:0f:c9:c4:ba:70:0b:ae:a9:
         f9:9a:26:f0:42:e4:2d:35:1a:17:e1:07:74:4b:1a:2d:a6:4b:
         52:c2:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org