Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/323830343a343362343a3a2f33322d313238203d3e20323637353835.roa
File:                     323830343a343362343a3a2f33322d313238203d3e20323637353835.roa (raw, json)
Hash identifier:          9b/2EmSaY5NO78FBpyMhQ4sdT1aYh6AFgnNu11G1EFk=
Subject key identifier:   E2:DE:17:C4:57:A6:21:F1:12:D8:E7:C8:71:DD:14:77:DD:E6:50:66
Certificate issuer:       /CN=948EF1405CB732BA0AB9FB155E951539CF495561
Certificate serial:       141970B3A1DEC2CC8E865D9BB3945E6018E13DB8
Authority key identifier: 94:8E:F1:40:5C:B7:32:BA:0A:B9:FB:15:5E:95:15:39:CF:49:55:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948EF1405CB732BA0AB9FB155E951539CF495561.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/323830343a343362343a3a2f33322d313238203d3e20323637353835.roa
Signing time:             Thu 01 Aug 2024 17:11:11 +0000
ROA not before:           Thu 01 Aug 2024 17:06:11 +0000
ROA not after:            Thu 31 Jul 2025 17:11:11 +0000
asID:                     267585
IP address blocks:        2804:43b4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/948EF1405CB732BA0AB9FB155E951539CF495561.crl
                          rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/948EF1405CB732BA0AB9FB155E951539CF495561.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948EF1405CB732BA0AB9FB155E951539CF495561.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:19:70:b3:a1:de:c2:cc:8e:86:5d:9b:b3:94:5e:60:18:e1:3d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948EF1405CB732BA0AB9FB155E951539CF495561
        Validity
            Not Before: Aug  1 17:06:11 2024 GMT
            Not After : Jul 31 17:11:11 2025 GMT
        Subject: CN=E2DE17C457A621F112D8E7C871DD1477DDE65066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:ef:fa:80:5c:2d:41:17:cb:88:82:43:19:
                    6e:48:5f:f4:af:94:75:4c:37:34:71:3b:e1:ab:57:
                    47:ea:f5:35:00:ef:ca:e4:a9:b5:94:fe:92:f6:24:
                    06:02:c6:b5:16:86:3e:0e:5f:f9:0a:55:d0:eb:04:
                    5f:4e:9a:3a:c5:cc:15:fc:03:ff:0b:9a:3a:76:5c:
                    4c:54:cc:4f:d6:6e:bb:50:a4:39:94:cf:da:92:b2:
                    17:cc:9f:6a:b4:f5:60:e7:64:af:39:44:a5:14:56:
                    5f:cb:4a:f1:b1:30:41:4c:9a:da:e3:e7:64:29:94:
                    33:59:dc:75:56:3e:2b:3b:80:5a:c8:74:5b:05:d6:
                    a3:78:c2:67:49:9b:a3:67:e5:64:3c:c8:50:9b:dc:
                    e9:bf:59:b6:3c:69:99:90:46:2c:ab:b4:ca:a6:8e:
                    f0:23:3b:c6:5f:b5:1b:a6:12:3b:71:0b:53:4f:5b:
                    e6:41:6f:11:f6:b0:81:7d:3c:80:34:7b:97:1d:99:
                    73:15:1f:2c:fa:69:1f:bb:7a:84:87:e6:44:0a:b1:
                    1b:b1:3c:93:41:93:fb:ec:99:b0:93:2f:2e:10:d6:
                    8b:d3:11:ba:8d:a0:0c:f9:00:0e:67:dc:d5:99:bb:
                    29:9c:6c:fd:f1:41:07:f3:e8:fc:a3:b4:c6:77:b7:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DE:17:C4:57:A6:21:F1:12:D8:E7:C8:71:DD:14:77:DD:E6:50:66
            X509v3 Authority Key Identifier:
                keyid:94:8E:F1:40:5C:B7:32:BA:0A:B9:FB:15:5E:95:15:39:CF:49:55:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/948EF1405CB732BA0AB9FB155E951539CF495561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948EF1405CB732BA0AB9FB155E951539CF495561.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/323830343a343362343a3a2f33322d313238203d3e20323637353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:be:9f:29:e4:95:76:72:bd:de:43:52:a8:b6:b0:62:ba:2d:
         ae:a8:20:f8:41:c3:12:c3:7a:48:36:b9:aa:f8:b1:a4:3e:1a:
         ae:69:65:c7:c8:9b:01:81:22:7d:51:dd:ce:d1:ff:52:f9:81:
         79:d6:c5:72:07:f3:f0:82:78:52:dd:77:5d:9c:60:7e:eb:93:
         31:f6:23:e5:82:fb:1e:0c:c3:ea:89:18:6b:8e:b9:db:99:6e:
         be:21:38:3f:0d:1f:23:ea:28:76:48:61:eb:c8:8e:c8:29:85:
         53:03:7c:c3:ba:b5:8b:5e:74:74:4d:e9:0f:a8:e7:83:91:be:
         46:f5:1a:73:bb:33:33:a2:93:7d:9b:5b:81:14:ed:94:d0:89:
         04:10:5f:60:7f:de:f4:86:5f:a4:f3:cf:c0:ad:1a:9e:53:a9:
         17:84:fa:a2:e6:83:88:fb:0a:5d:04:37:d6:0e:80:df:1e:3a:
         ad:87:af:18:5e:71:79:97:ac:de:85:33:78:fd:6e:a8:42:6d:
         d0:86:ed:34:69:55:b7:b0:12:f6:c0:05:5c:90:70:fc:cb:97:
         f6:b7:61:ba:ee:94:19:9e:7a:4e:a9:66:57:d7:e7:0b:9c:7f:
         22:f2:14:f5:08:e3:2e:f9:a8:4b:dd:e8:89:20:80:4f:02:9b:
         32:9a:2e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:32 2024 by rpki-client on console-ams.rpki-client.org