Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          SJAYjVu71QfAGF+w6c5msvjiv7eGid/XBugAqpI+iO4=
Subject key identifier:   27:C1:BB:05:51:C2:BA:30:68:A8:D9:97:9B:95:D4:3D:CC:A8:09:46
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       7F5B9DE79983EF7961B05A04DF87001ED59E6D59
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:33 +0000
ROA not before:           Wed 03 Apr 2024 20:46:33 +0000
ROA not after:            Wed 02 Apr 2025 20:51:33 +0000
asID:                     52916
IP address blocks:        2804:2b10::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5b:9d:e7:99:83:ef:79:61:b0:5a:04:df:87:00:1e:d5:9e:6d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:33 2024 GMT
            Not After : Apr  2 20:51:33 2025 GMT
        Subject: CN=27C1BB0551C2BA3068A8D9979B95D43DCCA80946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:7d:df:d0:7b:29:b1:98:df:90:8c:4e:44:
                    ae:f4:ce:44:ca:22:91:c9:ec:7e:be:4e:69:49:8e:
                    ec:bf:c3:12:7c:71:22:6e:dd:b5:54:4c:28:56:72:
                    8c:39:68:3f:64:e9:a7:ef:53:1f:3f:eb:b9:55:1d:
                    29:b5:80:a7:da:af:64:02:9c:0e:03:e3:0a:cd:fc:
                    b6:28:bd:4e:48:9c:7f:9a:e4:49:d2:14:6a:85:af:
                    7e:7f:c1:0c:4a:e5:4c:e6:aa:d3:d2:03:a1:ad:d3:
                    11:40:cc:01:b8:fb:5c:e5:58:11:55:50:c5:7e:cb:
                    b3:e6:e6:ad:cc:ca:45:a2:c2:75:b0:e0:2e:2a:74:
                    fb:d4:e2:12:b1:01:87:13:2f:6a:a2:13:8e:7e:d6:
                    01:cf:56:6d:1e:32:19:71:09:a5:eb:b3:7f:fb:5d:
                    07:9e:61:09:94:72:cf:8f:1e:f1:b4:a4:cb:d7:d8:
                    6c:b2:d8:30:80:8b:26:ef:9a:1d:d0:b5:ee:ca:46:
                    e5:8f:80:04:3d:fe:03:25:70:9b:d0:99:ce:40:63:
                    9b:b1:5d:86:c2:8b:62:3b:45:d9:68:b9:6d:99:cd:
                    e6:2a:3f:36:46:e0:8c:5d:c2:eb:f3:2c:56:73:dd:
                    d8:82:50:9f:99:5a:de:28:22:54:25:e6:bc:34:05:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:BB:05:51:C2:BA:30:68:A8:D9:97:9B:95:D4:3D:CC:A8:09:46
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10::/39

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:23:72:ad:d8:fc:6d:e8:0d:aa:63:70:48:20:47:db:b8:
         d2:d9:ae:62:dc:2d:12:c2:70:1e:85:e9:9f:a6:e7:bd:68:47:
         6b:8d:18:11:d8:a4:dd:71:f2:95:b7:c1:0f:a3:2b:b7:63:3f:
         65:e1:94:d5:8b:41:b5:42:b6:22:c9:e2:ea:6b:63:74:1b:1c:
         1e:14:06:dd:0a:99:ef:0b:2c:7c:47:c1:c4:e8:91:f1:cb:ba:
         29:76:56:27:7b:d6:d2:40:d2:51:f8:5b:37:76:c9:09:30:a4:
         42:60:40:86:ec:b8:34:c2:2c:be:15:93:66:e2:da:21:11:b2:
         06:6b:4c:11:d1:bb:c9:d1:b8:12:10:50:42:56:fd:40:f2:64:
         69:b6:99:2f:82:bb:6d:2a:4a:75:df:c2:19:a7:6c:30:63:fc:
         33:60:8d:24:e0:c7:b1:98:2c:93:5e:f3:6a:c8:b8:9d:cd:dc:
         8b:6c:a7:d6:7d:94:c9:66:dd:73:3b:ff:32:4b:d1:64:f5:fb:
         86:57:3c:91:59:32:46:79:02:ba:fe:e6:70:cc:03:1e:3a:1b:
         b7:f4:20:20:9a:6b:cf:92:e6:85:b3:e1:ba:aa:e7:b5:c3:f7:
         0d:e4:eb:32:2a:6f:cc:a6:9b:17:46:85:54:17:8c:56:65:75:
         49:db:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org