Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa
File:                     323830343a373135343a3a2f33322d3332203d3e20323730373832.roa (raw, json)
Hash identifier:          XeHkalzN1lKTBO8pE0eyjkOt7frntUOy2S5Hg3Ev7AU=
Subject key identifier:   B2:55:8E:FB:1F:6F:B8:FC:CA:1A:31:6E:63:9B:FF:E0:E9:9E:4C:40
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       33DF25546EF1BA9B35BC9C9033C95463C20217C4
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa
Signing time:             Tue 24 Sep 2024 18:01:58 +0000
ROA not before:           Tue 24 Sep 2024 17:56:58 +0000
ROA not after:            Tue 23 Sep 2025 18:01:58 +0000
asID:                     270782
IP address blocks:        2804:7154::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 10:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:df:25:54:6e:f1:ba:9b:35:bc:9c:90:33:c9:54:63:c2:02:17:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Sep 24 17:56:58 2024 GMT
            Not After : Sep 23 18:01:58 2025 GMT
        Subject: CN=B2558EFB1F6FB8FCCA1A316E639BFFE0E99E4C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:e2:d7:cc:fb:85:74:ac:cd:cf:8c:e0:73:
                    42:37:ef:24:c4:77:bd:cf:c7:4c:6e:2c:19:1c:1b:
                    22:47:3c:09:bc:1e:b0:12:63:47:ef:7c:ef:fc:3e:
                    29:56:af:26:5c:96:4f:20:87:5d:21:e3:63:77:fc:
                    99:bd:3c:39:cc:be:d1:23:88:82:74:d9:dd:54:22:
                    ce:18:69:20:56:ad:9b:e8:b6:20:86:18:1b:71:9a:
                    17:5f:7d:5c:0e:82:58:a9:77:2d:00:49:ff:0c:c6:
                    d2:56:18:b3:b3:fe:06:cd:76:78:6f:7f:83:90:5f:
                    09:45:a4:24:5a:de:10:0d:7f:c7:26:67:fc:4a:49:
                    9c:70:8d:62:28:52:43:93:43:d1:d8:79:58:ef:e1:
                    3b:bd:18:aa:62:87:5a:10:c4:86:09:ae:c1:94:d1:
                    88:a1:39:d5:b3:99:2f:91:b6:f4:be:8d:d3:29:42:
                    22:3e:fc:01:5f:86:70:19:53:2a:8b:8c:48:8f:45:
                    80:14:b3:bc:5a:0a:8f:01:21:ba:a5:b8:72:07:13:
                    46:ca:48:23:02:4f:bd:dc:53:c7:f9:6c:50:6b:10:
                    76:18:b7:75:5e:96:97:c7:ec:0a:f1:06:b0:cd:ac:
                    6b:42:4e:96:63:7d:88:f8:6a:01:94:2c:c1:96:57:
                    eb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:8E:FB:1F:6F:B8:FC:CA:1A:31:6E:63:9B:FF:E0:E9:9E:4C:40
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7154::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:1d:25:08:c0:cf:cf:4c:11:93:bd:b5:51:8b:08:c0:76:63:
         05:40:f8:85:81:ed:0e:f5:15:5a:95:b0:44:b3:c7:c2:c1:f7:
         8b:83:50:46:8f:72:a4:8c:9e:76:30:ae:d0:e1:fc:d7:94:5b:
         df:ba:9f:83:1b:9f:b0:0e:9d:15:80:82:4a:5c:d5:1d:a3:d1:
         11:0a:31:7f:78:b0:84:98:5a:c2:bc:32:3b:c6:2d:b4:a7:a1:
         be:16:cd:15:a0:ed:61:aa:7d:39:bc:23:15:18:49:a9:e9:7e:
         c6:80:32:ae:1f:53:54:20:ee:b8:99:22:a7:6d:36:9d:a8:50:
         a2:ce:8b:de:2f:10:31:28:f6:ad:63:7c:7d:19:1a:37:e0:68:
         0f:50:da:87:c8:cc:85:43:dd:a7:60:17:0b:5e:31:47:5e:75:
         b4:24:80:5e:01:97:e0:92:e2:75:27:d0:e6:30:79:4b:50:66:
         7e:6c:9f:82:2d:0e:41:5a:21:c3:3b:2d:97:f2:ee:db:14:28:
         8c:f0:fc:c7:36:b5:c1:5f:7c:e7:de:7c:10:cd:f7:29:70:a3:
         81:ff:ac:06:05:62:2d:aa:d2:e0:b0:d8:73:9e:c6:bc:4f:d7:
         0a:c9:e5:9d:77:40:c0:c6:ce:bd:02:27:79:d6:4f:b3:56:f0:
         6b:f7:f8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:17 2025 by rpki-client