Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d313238203d3e20323637313233.roa
File:                     323830343a343837383a3a2f33322d313238203d3e20323637313233.roa (raw, json)
Hash identifier:          IrL4P9SyN82/CG2a/jvaoYLlrp5Lo+QTVfY8Hkhm7mY=
Subject key identifier:   77:FF:92:0F:F9:D0:6B:3B:E3:54:41:3A:43:24:2C:19:D8:35:E1:0E
Certificate issuer:       /CN=2C08147EB7EFC2FB4081B4773408FC67E99529BC
Certificate serial:       67169D574ECAF36BE7DB70E1E4455C219E083D64
Authority key identifier: 2C:08:14:7E:B7:EF:C2:FB:40:81:B4:77:34:08:FC:67:E9:95:29:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C08147EB7EFC2FB4081B4773408FC67E99529BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d313238203d3e20323637313233.roa
Signing time:             Wed 29 May 2024 23:49:04 +0000
ROA not before:           Wed 29 May 2024 23:44:04 +0000
ROA not after:            Wed 28 May 2025 23:49:04 +0000
asID:                     267123
IP address blocks:        2804:4878::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/2C08147EB7EFC2FB4081B4773408FC67E99529BC.crl
                          rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/2C08147EB7EFC2FB4081B4773408FC67E99529BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C08147EB7EFC2FB4081B4773408FC67E99529BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:16:9d:57:4e:ca:f3:6b:e7:db:70:e1:e4:45:5c:21:9e:08:3d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C08147EB7EFC2FB4081B4773408FC67E99529BC
        Validity
            Not Before: May 29 23:44:04 2024 GMT
            Not After : May 28 23:49:04 2025 GMT
        Subject: CN=77FF920FF9D06B3BE354413A43242C19D835E10E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:17:d4:9d:dc:45:c2:34:d7:9c:87:ec:27:
                    e9:7d:8a:b4:1f:cc:2b:c4:81:b0:cd:eb:d9:a7:cd:
                    88:4b:42:7d:73:27:82:c8:70:c0:50:de:94:6c:20:
                    eb:91:a7:a1:2d:e0:91:41:6c:64:70:91:65:dc:80:
                    a9:22:59:7a:9a:3f:7f:7e:2a:c3:e7:0c:e9:98:be:
                    2b:4b:e4:96:9c:56:f5:6d:47:ef:21:ca:53:4f:b8:
                    b6:8c:dd:0e:54:67:6f:26:b4:d1:2c:94:4c:8c:be:
                    bd:53:d9:87:fd:ce:20:aa:49:7c:24:24:71:58:7a:
                    fa:21:37:5a:07:a3:66:25:66:af:33:58:74:22:03:
                    9f:78:82:3e:fc:96:5f:c1:14:b6:8a:f8:7e:54:43:
                    0c:65:b5:7f:48:0a:cd:64:6d:03:35:96:31:b5:d2:
                    d1:32:6e:59:7f:a5:57:57:dc:1e:4b:fc:3a:f4:71:
                    54:0d:ff:b3:b7:f5:1f:1c:cc:44:bb:79:27:67:0c:
                    e4:04:50:54:ae:f0:07:14:1d:35:65:c0:a1:ef:ed:
                    46:2c:87:aa:30:fc:32:ec:45:9a:a5:ba:da:0e:15:
                    7d:c3:e1:fa:d1:81:1e:c8:76:0c:ec:33:c8:2d:18:
                    26:48:2c:fa:c9:53:56:9f:e2:79:31:af:e1:01:f2:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FF:92:0F:F9:D0:6B:3B:E3:54:41:3A:43:24:2C:19:D8:35:E1:0E
            X509v3 Authority Key Identifier:
                keyid:2C:08:14:7E:B7:EF:C2:FB:40:81:B4:77:34:08:FC:67:E9:95:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/2C08147EB7EFC2FB4081B4773408FC67E99529BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C08147EB7EFC2FB4081B4773408FC67E99529BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d313238203d3e20323637313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4878::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:92:2f:fb:16:d0:89:f0:fb:e0:2d:c8:e6:48:38:79:57:07:
         6f:88:58:22:2b:a9:12:d7:52:6f:2f:83:e6:1c:64:7d:2d:ae:
         58:e8:7d:1e:ea:bb:3f:86:6b:0e:85:3a:c9:40:3e:49:9e:7b:
         30:39:eb:f8:95:d7:87:c1:0a:73:9a:01:a3:a7:d5:05:ff:83:
         d6:85:88:8c:c5:88:e8:cc:81:a4:f1:ee:19:a3:b0:21:bc:af:
         cc:a6:2f:bd:fe:d2:4b:6a:d6:17:41:2a:94:d0:b5:c7:13:46:
         d7:9d:5d:8d:c1:89:2e:4b:3a:46:08:d7:7f:1c:5c:16:a9:24:
         91:a0:8c:57:61:ea:3e:9d:4c:b8:3b:e3:bd:83:93:c6:3f:c0:
         56:a3:ca:33:cc:8e:f9:9b:97:b3:32:c7:62:e0:00:1d:7a:41:
         50:cc:30:f0:77:0a:ad:71:f0:9c:0e:2b:fc:77:f2:96:9d:a1:
         24:62:3e:06:1b:cb:13:b8:4b:62:47:60:f6:d7:5a:da:11:64:
         6b:db:59:4d:d9:ed:03:8d:76:29:7f:2c:cc:42:ae:d7:e8:d1:
         1b:b9:ac:17:14:8d:61:28:87:7c:8c:0e:e3:c3:ae:df:41:85:
         35:6b:56:9b:57:df:77:85:4f:85:9f:17:14:72:75:90:85:83:
         24:7a:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:20 2024 by rpki-client on console-ams.rpki-client.org