Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3638303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830343a3638303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          z6elIRTlN+/wPcHckE1J1R+aeAm8EkhEVnvLLeow+44=
Subject key identifier:   45:03:58:46:61:EB:EC:06:4D:21:63:B2:8E:5E:47:C7:46:78:41:75
Certificate issuer:       /CN=F44EDF36C881BC97A766BDEEFF070251613E095D
Certificate serial:       16D71DE7B82F8038FAD3C8F5524CA7B278088F0D
Authority key identifier: F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3638303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Fri 05 Jan 2024 16:18:47 +0000
ROA not before:           Fri 05 Jan 2024 16:13:47 +0000
ROA not after:            Fri 03 Jan 2025 16:18:47 +0000
asID:                     262589
IP address blocks:        2804:680::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Mar 2024 02:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d7:1d:e7:b8:2f:80:38:fa:d3:c8:f5:52:4c:a7:b2:78:08:8f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F44EDF36C881BC97A766BDEEFF070251613E095D
        Validity
            Not Before: Jan  5 16:13:47 2024 GMT
            Not After : Jan  3 16:18:47 2025 GMT
        Subject: CN=4503584661EBEC064D2163B28E5E47C746784175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:83:78:03:69:c5:e3:57:de:29:cd:54:f1:
                    55:f1:4d:d1:3d:a6:00:fe:7b:2e:16:6e:d4:96:8d:
                    7a:76:8f:f5:25:c2:36:fa:85:ac:6a:72:a2:35:94:
                    09:0e:ba:ee:4c:9d:20:5c:b7:6a:2d:fb:21:5b:02:
                    64:c8:b3:81:02:35:81:b4:71:7b:4e:47:1b:89:d2:
                    ce:12:51:69:59:f2:0e:96:ef:83:c8:bd:b5:3e:64:
                    ab:84:fa:3d:80:f1:d7:1a:d1:c4:55:ad:ad:f9:01:
                    24:d1:0d:5b:9f:c0:6f:b5:85:0b:9f:93:91:8e:6f:
                    2a:9d:9e:93:37:fe:f1:fa:34:08:0a:dd:cf:03:79:
                    f5:d7:1a:8f:2d:16:be:98:14:bd:42:de:fa:2d:ee:
                    a8:87:3c:92:a6:78:4b:e0:87:81:82:23:84:0a:1c:
                    ee:34:ef:d3:e0:9d:73:c9:35:2b:94:39:fd:c0:b4:
                    e3:87:01:ad:00:2f:95:c0:7d:cb:fc:40:f0:50:95:
                    cf:4f:4b:34:14:ef:d0:c0:88:d2:3e:fa:44:f0:13:
                    b0:dd:24:42:7a:39:1c:84:c0:c0:64:be:a9:d4:2c:
                    f1:09:54:76:4f:d7:c1:e9:81:cd:ba:e6:46:dd:60:
                    ae:b1:02:d0:e1:39:89:b4:f2:9a:da:0a:54:6e:88:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:03:58:46:61:EB:EC:06:4D:21:63:B2:8E:5E:47:C7:46:78:41:75
            X509v3 Authority Key Identifier:
                keyid:F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3638303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:43:66:54:39:fc:69:af:03:61:e2:39:bf:62:24:ab:57:9a:
         50:c6:fa:81:19:e9:12:d8:28:5a:49:d4:eb:92:ee:7d:d0:0b:
         28:4c:f1:f4:8b:06:18:14:82:b5:94:dd:52:db:1c:0d:39:3f:
         2c:38:06:9f:f6:a9:d6:0e:2d:ef:4d:d9:51:3c:bd:2c:1d:67:
         29:a0:ab:a0:64:0a:48:a5:ea:c3:2a:4f:f6:76:f8:49:e3:83:
         90:28:8c:99:80:80:82:d8:f1:2d:af:3b:3d:5e:d9:09:52:b6:
         ef:3f:59:02:c2:c7:60:d4:8a:06:4b:4b:80:16:1a:50:bb:b8:
         4e:d1:0d:ff:e9:c6:ce:16:72:f0:cb:de:5a:03:34:fa:be:f4:
         36:11:c0:c7:76:2e:7e:9d:b1:c1:9e:a2:4b:3e:d2:13:49:a7:
         34:3b:2f:6b:d9:a2:23:89:57:b3:66:59:00:2a:9a:15:1b:30:
         48:04:c4:00:41:ea:99:16:b6:03:dd:53:b3:ea:f1:40:57:ee:
         de:98:d9:05:5e:5a:e9:81:07:cd:b2:91:0d:f1:c7:69:75:7f:
         f4:f4:f6:7b:08:a4:63:02:bf:ed:72:79:62:5d:94:08:fe:75:
         96:1a:ce:cd:8d:de:aa:ea:1c:4f:7a:c5:3e:ae:d9:8d:eb:bb:
         0d:12:e1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:57 2024 by rpki-client on console-ams.rpki-client.org