Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3830303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a3830303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          Nj3CBWU8vrSQQ7K94QyrBiNa6AZwcF4ep0dmd69Pym8=
Subject key identifier:   B2:C0:E9:B4:1B:ED:6B:5C:7C:2E:3A:2F:AC:27:B3:B4:8B:AE:50:45
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       2C88C7070CE084C3406A8EB2C8776FDFA3F5E113
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3830303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:34 +0000
ROA not before:           Wed 03 Apr 2024 20:46:34 +0000
ROA not after:            Wed 02 Apr 2025 20:51:34 +0000
asID:                     52916
IP address blocks:        2804:2b10:800::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:88:c7:07:0c:e0:84:c3:40:6a:8e:b2:c8:77:6f:df:a3:f5:e1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:34 2024 GMT
            Not After : Apr  2 20:51:34 2025 GMT
        Subject: CN=B2C0E9B41BED6B5C7C2E3A2FAC27B3B48BAE5045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:0c:65:7e:d0:4d:ad:0a:56:21:0c:24:86:
                    db:e8:c4:cd:6b:b7:72:b3:4e:30:a8:ff:8d:be:70:
                    5b:67:ad:c1:d6:c1:88:ad:40:90:e6:40:5a:b1:0a:
                    70:5a:59:17:97:f3:29:1e:93:a6:b3:1e:84:9d:59:
                    85:bb:50:11:db:1d:a8:2e:27:0e:bf:2d:89:87:46:
                    43:c4:19:50:42:af:9a:70:4a:64:07:63:8c:cb:24:
                    fb:0e:fd:31:87:2b:25:61:10:18:67:24:84:d7:81:
                    68:f4:c9:1a:c8:67:da:0c:70:6e:e6:76:f4:b6:35:
                    11:26:64:d7:05:6e:3e:1b:b1:e5:1c:4b:06:ce:c7:
                    10:d5:83:f1:df:44:bf:55:48:95:47:13:f8:ee:d5:
                    4d:25:50:2e:ec:7d:c7:03:23:40:a7:04:ae:1f:0a:
                    38:b0:a0:5a:5e:15:e8:d6:d7:94:d9:f6:d2:7a:a2:
                    f6:73:bf:0c:d6:77:61:98:3c:5a:ec:38:ab:79:a9:
                    e4:b8:5c:50:32:28:a2:48:6a:6c:38:1a:e3:79:83:
                    66:87:6b:68:96:e5:63:1f:16:19:0a:96:17:17:92:
                    3a:c7:09:3c:ee:b9:1a:f2:9c:57:1d:16:72:b5:d4:
                    b0:43:b1:c3:41:eb:c2:21:d5:1f:42:d0:39:df:87:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C0:E9:B4:1B:ED:6B:5C:7C:2E:3A:2F:AC:27:B3:B4:8B:AE:50:45
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3830303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:800::/39

    Signature Algorithm: sha256WithRSAEncryption
         42:24:9f:ed:87:a1:72:5d:5f:47:42:ff:42:07:10:eb:3b:40:
         1a:f1:43:6a:78:54:6b:dd:9d:c8:7f:bb:9f:c2:29:f3:34:49:
         9f:0d:e6:b7:37:00:46:e9:e0:09:88:ef:4e:a4:84:e2:4f:46:
         8d:9b:ef:ea:b3:d6:5e:ee:cd:75:f1:1f:6e:f9:01:1f:69:84:
         00:5c:4d:0b:c3:3c:a3:55:46:cd:de:b4:11:9a:d9:b3:40:86:
         fc:45:9d:a6:b6:37:be:4a:15:3d:b6:20:56:40:2b:bb:d3:be:
         44:57:ff:06:29:a9:8d:9d:00:b4:3d:a3:dc:6b:a3:32:20:a5:
         7e:76:2b:9e:90:98:33:54:4c:c4:4a:fe:10:ee:92:2a:cf:86:
         c8:7f:6c:9e:19:4c:7b:6d:17:13:bc:8f:64:ee:88:53:b5:67:
         c2:f2:96:74:61:fc:25:de:49:0e:24:a5:5e:a6:e1:fa:98:76:
         37:e3:e3:72:11:59:80:f1:36:02:ea:e4:63:a9:4c:ae:4b:16:
         10:d2:7b:4d:6b:f5:f7:ef:18:a5:11:03:ff:bf:db:28:87:f1:
         7e:6d:0b:95:72:ab:48:73:fd:63:03:aa:e1:bb:e9:4f:23:cb:
         9e:ce:e0:2f:55:1b:8c:43:32:c3:c4:4e:e8:09:7b:31:23:e9:
         8d:e7:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:06 2024 by rpki-client on console-ams.rpki-client.org