Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/323830343a6432383a3a2f33322d3430203d3e203532363034.roa
File:                     323830343a6432383a3a2f33322d3430203d3e203532363034.roa (raw, json)
Hash identifier:          M92MHuF8TOo+umw61qcg6d4xylqNv8HMCFVGluwwZBg=
Subject key identifier:   18:65:3E:55:E5:F6:6C:72:9F:D1:AB:BD:23:82:13:FE:BF:2A:46:D3
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       72BE0ED36F1E5BD07DF1725DF8F21599A07F95F4
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/323830343a6432383a3a2f33322d3430203d3e203532363034.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     52604
IP address blocks:        2804:d28::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:be:0e:d3:6f:1e:5b:d0:7d:f1:72:5d:f8:f2:15:99:a0:7f:95:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject: CN=18653E55E5F66C729FD1ABBD238213FEBF2A46D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:ca:72:50:0b:18:ff:bd:19:96:04:f2:54:
                    e8:14:c8:54:72:90:bf:99:77:e2:04:4c:f0:fc:de:
                    2d:e8:9c:0d:d9:ac:cc:88:b6:b6:c7:e4:5f:59:10:
                    44:44:6a:31:17:56:21:c5:7e:72:bb:ee:01:4b:32:
                    c9:10:c2:37:95:21:f7:e3:09:94:db:7a:7c:b6:fa:
                    30:98:77:db:58:07:9c:2f:cb:82:a0:26:44:b8:4e:
                    a9:68:2f:ed:7c:46:4d:51:3a:a7:03:ac:91:7c:99:
                    87:08:08:e9:99:42:be:99:f9:bb:e8:4a:b8:f7:a7:
                    ad:33:2c:56:18:65:a9:6f:1c:6f:11:f2:da:7b:7b:
                    c9:0c:28:b4:b7:a8:35:f1:c2:0c:52:b0:dd:3f:9a:
                    a9:0b:d3:4e:90:91:30:e5:fb:81:b2:65:43:86:c7:
                    29:51:d2:a5:2c:33:ae:63:a6:21:ee:66:62:8c:d9:
                    b8:e2:3c:66:85:b3:e1:64:e6:67:58:82:40:0f:d9:
                    75:aa:82:ce:10:0d:4e:75:ee:91:85:16:5f:d9:7a:
                    a5:73:76:80:b3:f6:2c:6d:f5:90:70:d5:1c:53:3d:
                    ea:0e:d8:f7:85:10:eb:65:69:78:3a:fe:d6:84:60:
                    79:b3:e0:cc:e3:f5:23:8c:4d:d9:2c:a9:a2:af:c3:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:65:3E:55:E5:F6:6C:72:9F:D1:AB:BD:23:82:13:FE:BF:2A:46:D3
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/323830343a6432383a3a2f33322d3430203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:c7:f0:60:74:89:04:e4:f3:82:ab:8b:f2:44:56:31:6e:
         b3:3d:44:2f:e4:c6:e2:36:a9:ea:f9:a9:b3:95:db:7b:23:7d:
         34:b3:e0:e7:1b:05:e7:46:c8:d7:4f:74:9c:63:5a:e4:b5:68:
         2c:f5:33:9a:0d:64:46:4f:e0:e4:8f:49:d3:42:31:25:0c:dd:
         2a:ff:9f:e1:02:ee:2e:8e:27:81:d1:ab:6f:1f:58:ef:cd:ed:
         d7:40:62:1b:80:61:a9:62:40:13:2b:56:eb:38:0c:23:e6:0c:
         dd:4a:b4:85:df:a2:ac:ca:3c:4b:30:eb:42:a7:04:1d:e5:f3:
         23:00:5f:72:86:77:19:58:1c:c1:45:58:41:17:5e:9b:1a:00:
         a1:13:aa:52:7d:ad:e6:38:c1:3f:80:bf:9c:f1:19:01:97:7c:
         4d:5c:e6:6b:ce:a0:80:ed:f3:9d:c2:8e:ee:16:fc:72:3c:82:
         bb:e8:fc:98:7c:de:13:b9:91:c5:fe:88:84:10:a9:58:58:4d:
         07:5d:ea:ec:d0:d4:b4:a4:d2:4e:4e:da:a5:12:99:da:15:94:
         c1:47:97:d1:6b:e3:bf:4e:35:b5:6f:f3:ea:9b:a2:06:00:fb:
         7e:3c:18:27:5a:5d:9a:b0:e9:d1:30:19:ae:ee:0f:87:61:c2:
         3f:31:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org