Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/323830343a323435303a3a2f33322d313238203d3e20323634323134.roa
File:                     323830343a323435303a3a2f33322d313238203d3e20323634323134.roa (raw, json)
Hash identifier:          NHjD8OCsN6lRjwGnektSb0c89CHE4kPMHI+80DJEGHg=
Subject key identifier:   9A:65:CD:27:B9:83:76:E8:C5:FD:0B:86:5F:49:72:7F:00:CE:A4:6C
Certificate issuer:       /CN=02642BE58C8AD035AC6C68EC6B4B82849440F6D3
Certificate serial:       1ED4E2DBFCDA3AB492D38B929BC32837AE1EB0C7
Authority key identifier: 02:64:2B:E5:8C:8A:D0:35:AC:6C:68:EC:6B:4B:82:84:94:40:F6:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/323830343a323435303a3a2f33322d313238203d3e20323634323134.roa
Signing time:             Tue 20 Aug 2024 15:56:39 +0000
ROA not before:           Tue 20 Aug 2024 15:51:39 +0000
ROA not after:            Tue 19 Aug 2025 15:56:39 +0000
asID:                     264214
IP address blocks:        2804:2450::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.crl
                          rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d4:e2:db:fc:da:3a:b4:92:d3:8b:92:9b:c3:28:37:ae:1e:b0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02642BE58C8AD035AC6C68EC6B4B82849440F6D3
        Validity
            Not Before: Aug 20 15:51:39 2024 GMT
            Not After : Aug 19 15:56:39 2025 GMT
        Subject: CN=9A65CD27B98376E8C5FD0B865F49727F00CEA46C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:cf:15:ba:6d:d3:0e:dc:af:53:dd:c7:65:
                    07:a0:bf:d7:c6:57:8f:4c:77:23:08:9b:3a:18:00:
                    58:9d:95:90:ca:9f:00:60:ef:bc:ca:20:93:0a:ce:
                    ed:54:b6:c4:6e:6c:79:fc:7f:61:c8:91:fd:ae:79:
                    51:2f:a9:40:93:67:7b:51:dd:55:d0:5b:51:4e:20:
                    de:5e:fe:eb:7d:a9:a5:ad:9e:5f:b8:39:ec:50:03:
                    48:8d:1a:51:c4:7d:4c:bf:47:ce:1e:b1:82:02:b7:
                    03:f7:cf:5f:de:c5:79:a9:4f:13:3a:6f:68:9e:a5:
                    0e:82:f8:5a:93:8f:a0:38:36:b1:a0:cb:b2:f3:75:
                    cb:c3:4a:59:97:14:2b:3e:af:03:bb:73:0f:6a:65:
                    54:53:7e:f3:c1:06:c7:15:43:4f:ac:6a:0c:ab:7f:
                    19:36:2e:3d:cd:ca:cc:4a:f6:69:82:bd:e3:b1:d4:
                    40:b9:61:5d:96:11:af:80:22:2c:c9:51:86:ff:f3:
                    b0:de:15:3a:20:79:9a:a4:df:7f:7d:2b:a3:27:ac:
                    9c:a0:7b:bc:ae:46:44:cb:11:0d:40:89:29:3f:a7:
                    d5:d6:7f:11:b8:ab:01:61:c2:54:43:e0:3d:85:11:
                    7b:57:54:69:e2:4c:7c:5b:59:68:1a:06:9e:7c:59:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:CD:27:B9:83:76:E8:C5:FD:0B:86:5F:49:72:7F:00:CE:A4:6C
            X509v3 Authority Key Identifier:
                keyid:02:64:2B:E5:8C:8A:D0:35:AC:6C:68:EC:6B:4B:82:84:94:40:F6:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/323830343a323435303a3a2f33322d313238203d3e20323634323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2450::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:4a:ef:68:84:5f:17:22:ae:42:59:9d:e7:e8:f0:37:14:
         fc:f6:77:eb:1b:ce:f9:9e:85:bb:21:bc:9e:16:d4:ce:3c:e2:
         9f:15:0e:15:af:d0:06:15:c2:f6:27:87:c4:05:48:12:94:a2:
         8e:c1:ee:8c:44:40:76:24:85:80:c6:6e:b2:4b:16:8e:21:06:
         bf:81:6c:dc:99:e2:a5:bb:2a:bf:ce:b2:c6:c1:23:d2:d3:11:
         71:27:ab:be:8a:20:fe:cf:64:62:5c:15:3b:76:fc:2e:a6:17:
         93:fe:60:3c:fc:99:60:e7:1b:dc:e1:9b:66:79:58:bc:af:9b:
         5a:9e:ec:e0:05:f4:75:39:2f:0d:b6:3a:20:e2:95:c5:bc:c8:
         49:2a:e8:46:af:70:d2:a7:72:17:ee:76:5f:5c:89:55:e4:22:
         d7:39:9a:7f:68:a0:94:a0:bb:29:65:eb:af:d4:5e:f0:42:2e:
         e5:b6:b3:ab:28:fa:2f:59:19:61:1a:27:f9:5e:b0:eb:4c:d3:
         df:82:47:36:75:0f:b6:e0:c2:fa:bc:7c:8d:a6:0e:0c:43:20:
         7f:81:66:66:14:cf:bb:89:c3:65:32:5d:2f:dc:05:5d:3a:f2:
         25:5e:32:c3:a2:6b:af:1e:4c:58:52:c7:e1:18:3b:9d:fe:93:
         bd:6a:5b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:54 2024 by rpki-client on console-ams.rpki-client.org