Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33332d3333203d3e20323633393637.roa
File:                     323830343a323838383a383030303a3a2f33332d3333203d3e20323633393637.roa (raw, json)
Hash identifier:          D6ae8ATwzZzel8xZFAb0j3Fn3MznXzxfgJK2HWdATEU=
Subject key identifier:   CF:AF:11:1E:AC:8D:6C:96:E7:75:59:75:36:55:4A:70:C5:6E:71:9E
Certificate issuer:       /CN=B224D943E8065A18929A784B51D1633209C1CC91
Certificate serial:       78D5D6E8AACE3B17EEEA44AEAF232809685E0B4D
Authority key identifier: B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33332d3333203d3e20323633393637.roa
Signing time:             Thu 04 Apr 2024 04:46:47 +0000
ROA not before:           Thu 04 Apr 2024 04:41:47 +0000
ROA not after:            Thu 03 Apr 2025 04:46:47 +0000
asID:                     263967
IP address blocks:        2804:2888:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl
                          rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d5:d6:e8:aa:ce:3b:17:ee:ea:44:ae:af:23:28:09:68:5e:0b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224D943E8065A18929A784B51D1633209C1CC91
        Validity
            Not Before: Apr  4 04:41:47 2024 GMT
            Not After : Apr  3 04:46:47 2025 GMT
        Subject: CN=CFAF111EAC8D6C96E775597536554A70C56E719E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e7:11:ca:78:6f:ce:d3:15:fb:2a:6a:68:ad:
                    88:71:88:e9:c9:62:7f:a7:2b:7d:12:47:c3:27:c3:
                    6d:5d:28:41:24:8b:22:90:17:34:0d:ae:c9:ad:36:
                    66:1c:e2:94:fa:0c:74:be:df:e9:f8:96:5d:3c:90:
                    3a:cd:a7:a8:d2:30:77:e2:4f:f3:99:e7:18:d4:62:
                    c5:ce:77:70:a2:8b:78:47:bb:72:0e:98:05:22:63:
                    98:8b:d4:27:65:b8:ff:cf:38:db:de:ba:dc:67:7b:
                    77:a7:7f:26:64:40:a4:8b:6c:91:c0:a3:94:41:0d:
                    a0:25:28:29:ec:56:26:85:1e:d9:03:96:de:03:79:
                    ce:e8:95:aa:91:f0:75:59:fa:5c:2e:13:b1:90:ca:
                    af:91:d9:a1:e5:07:72:18:ef:4d:c3:93:6a:25:73:
                    af:2d:c7:3e:45:a0:21:5d:bd:c2:57:c8:26:68:84:
                    e3:7a:10:90:07:69:65:4f:a8:10:29:01:01:24:f6:
                    af:66:fb:7f:06:23:5b:f1:d5:58:9a:d4:1b:82:90:
                    92:22:ed:ef:e4:18:0b:55:1a:2a:b6:2a:7e:2e:94:
                    9b:a5:97:e8:8d:d7:81:02:93:92:d7:10:40:da:2e:
                    13:51:9e:8a:91:85:b0:c6:ff:cd:bb:cd:f3:24:99:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AF:11:1E:AC:8D:6C:96:E7:75:59:75:36:55:4A:70:C5:6E:71:9E
            X509v3 Authority Key Identifier:
                keyid:B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33332d3333203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2888:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:0b:e0:88:6a:cc:96:af:2e:c7:99:28:d5:9a:f1:5d:e2:
         16:86:44:f1:e4:fc:f2:9f:0c:b7:99:5b:07:b8:8a:62:dd:6e:
         36:04:22:aa:95:6f:62:00:a2:15:af:bc:46:91:60:c8:ec:79:
         75:75:d9:a8:31:44:cf:57:d2:48:c5:19:7c:1a:d3:bb:5c:04:
         9a:58:97:58:dc:01:1b:ef:b0:b6:a5:87:6c:6a:4e:62:3c:07:
         fd:84:d2:b4:af:3e:b3:25:d0:17:24:02:f2:86:88:53:4a:1e:
         0c:6a:e2:6e:c9:60:d2:95:57:fd:bf:99:2a:8b:04:dc:16:79:
         5b:dc:dd:63:77:03:7e:bc:fd:4f:33:c8:05:bb:40:e5:39:08:
         1f:4b:4d:31:a8:42:d2:9c:36:a1:40:b4:f6:bb:40:23:ee:0d:
         23:78:63:00:8b:13:0a:af:36:3a:16:16:04:82:65:1c:c0:53:
         98:ed:5b:25:6e:65:25:16:0c:69:be:9e:6a:a2:5e:cd:4c:e4:
         45:57:51:16:cc:8a:41:14:d4:fd:d4:4b:f8:88:e9:88:a8:10:
         99:35:59:fa:a7:f9:e9:c9:51:ca:2a:89:a2:0f:9a:e1:d9:cc:
         7d:c3:e5:ae:23:8a:f1:3f:15:d0:ca:c1:4c:2d:92:62:9e:ce:
         b1:ab:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:57 2024 by rpki-client on console-ams.rpki-client.org