Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
File:                     323830343a326231303a3a2f33372d3337203d3e203532393136.roa (raw, json)
Hash identifier:          3Qu1mFN9echvq143CbadtkATwovytzi4lgmOhi5oYIQ=
Subject key identifier:   6C:BC:FF:8B:21:45:AD:88:DE:B0:8D:60:CD:69:47:94:54:A0:1E:8A
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       0E2A013B98876B38EE98C17570979037A90851A7
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:33 +0000
ROA not before:           Wed 03 Apr 2024 20:46:33 +0000
ROA not after:            Wed 02 Apr 2025 20:51:33 +0000
asID:                     52916
IP address blocks:        2804:2b10::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2a:01:3b:98:87:6b:38:ee:98:c1:75:70:97:90:37:a9:08:51:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:33 2024 GMT
            Not After : Apr  2 20:51:33 2025 GMT
        Subject: CN=6CBCFF8B2145AD88DEB08D60CD69479454A01E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:15:f1:5a:4d:e0:19:42:9c:88:22:1b:ba:
                    35:74:a8:30:75:24:1f:29:4a:58:b2:64:e2:de:8e:
                    ee:1c:80:b8:cc:25:b9:fc:6c:3a:3a:66:8d:92:ee:
                    75:03:65:f1:46:8b:94:79:d7:0b:30:62:4c:d1:bf:
                    40:59:1b:60:cb:5b:3d:ba:f6:14:cb:dc:b7:1b:74:
                    a0:18:23:33:28:12:6f:75:99:3f:55:41:fe:bb:63:
                    6b:ee:06:d5:51:0b:46:5b:65:06:40:15:8b:63:93:
                    7e:9e:ca:dd:46:23:77:4f:dd:83:3c:83:b7:b6:c1:
                    7d:db:05:1e:25:34:f8:30:67:da:13:e2:ba:a9:7b:
                    c4:8e:1e:89:09:c4:5f:9c:8c:c6:19:0e:2b:fc:25:
                    ee:14:64:f5:81:70:6a:98:5c:f1:fa:78:1e:e3:0d:
                    29:bc:31:8a:8c:ab:e1:db:6b:ff:34:fc:68:04:bd:
                    d0:14:86:9b:4f:d1:22:59:32:e3:b2:b3:54:d4:2f:
                    48:cb:88:2d:90:37:5a:19:53:c5:63:4b:18:d6:39:
                    80:01:d5:71:b6:fb:29:c3:f2:de:18:c4:8f:ee:b9:
                    e1:48:72:d4:c7:30:49:7b:ab:f3:2b:48:a7:18:90:
                    98:7f:59:b7:46:c1:17:b7:4c:75:68:2b:4e:64:9d:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BC:FF:8B:21:45:AD:88:DE:B0:8D:60:CD:69:47:94:54:A0:1E:8A
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10::/37

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:38:e0:4c:d4:b2:00:cd:72:80:d0:77:66:82:8d:3d:ea:
         15:92:d0:f5:11:db:13:37:69:85:1d:00:44:ad:04:a1:9b:3e:
         78:bb:90:af:84:00:d5:7f:8f:8e:4f:b7:c4:67:78:c9:06:d9:
         34:1f:3f:fe:c1:55:b6:35:8c:44:3e:93:b2:fa:16:de:32:f2:
         cf:07:47:7e:39:ea:43:41:25:cf:98:d5:12:15:77:19:5f:cc:
         80:de:41:4a:6a:d7:4f:77:e3:6e:17:5a:96:f8:58:e2:fe:d7:
         a2:51:58:0a:60:83:53:9f:fd:5e:79:66:b6:ef:39:20:66:e8:
         47:6e:24:6d:53:a8:6b:2a:6a:61:de:1c:de:cc:c9:14:fd:63:
         0f:c1:ba:ab:6b:c6:b5:07:5b:a6:40:bd:50:17:12:3d:83:a7:
         91:e1:af:2f:92:c0:9c:69:ba:b2:03:8d:c2:10:7c:cf:b7:3f:
         7f:06:fe:55:87:74:71:9b:2b:04:1c:a8:8e:cb:ed:ff:59:17:
         56:98:a2:61:a7:27:de:96:3f:db:e9:e2:d8:d3:93:12:c7:0d:
         3e:f8:51:5a:83:8f:5a:af:dd:72:1b:b7:a1:e1:f4:44:7a:32:
         86:ce:9d:8a:43:ac:44:0f:56:04:aa:de:09:81:ad:41:f7:47:
         3a:28:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:40 2024 by rpki-client on console-ams.rpki-client.org