Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa
File:                     323830343a323265383a3a2f33322d3332203d3e20323634313330.roa (raw, json)
Hash identifier:          //SxxxyO1Yq0xrHYtHGDPrpcQ5eIbQwax+r+kWQydXE=
Subject key identifier:   F1:83:FE:7E:D0:32:51:89:BE:E6:35:FF:50:54:0A:F1:91:36:5C:EE
Certificate issuer:       /CN=7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9
Certificate serial:       6D8D9469177AF4D6C74F7BBA0A4A410393D66E15
Authority key identifier: 7B:3D:67:B8:BC:F8:6E:AB:99:78:72:5F:19:C0:82:8C:CC:57:B6:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa
Signing time:             Thu 04 Apr 2024 00:20:00 +0000
ROA not before:           Thu 04 Apr 2024 00:15:00 +0000
ROA not after:            Thu 03 Apr 2025 00:20:00 +0000
asID:                     264130
IP address blocks:        2804:22e8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.crl
                          rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8d:94:69:17:7a:f4:d6:c7:4f:7b:ba:0a:4a:41:03:93:d6:6e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9
        Validity
            Not Before: Apr  4 00:15:00 2024 GMT
            Not After : Apr  3 00:20:00 2025 GMT
        Subject: CN=F183FE7ED0325189BEE635FF50540AF191365CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f5:67:45:ca:73:85:a3:8c:30:0a:77:cb:9c:
                    b7:f0:47:8e:62:04:d9:7c:a1:b4:21:9a:bf:01:f5:
                    e7:19:e2:1e:5b:e3:e7:9b:5b:e5:ff:b0:83:52:6b:
                    42:ab:1f:c2:ef:9a:74:fd:69:27:59:eb:e7:8c:a9:
                    e1:84:08:84:d6:fe:b8:01:53:5b:bc:74:23:8b:9c:
                    a1:00:98:54:ec:05:36:4d:6e:07:f5:01:6a:29:d7:
                    77:81:9d:fb:87:68:54:be:48:6e:16:0a:52:3d:00:
                    1a:45:4d:09:a5:ae:79:e4:c2:9e:9d:f1:55:e8:92:
                    10:e0:ad:b8:03:db:49:8a:dd:af:79:62:e2:95:3a:
                    f2:c5:ab:00:b0:05:00:b7:fe:ef:bc:21:6e:ad:22:
                    67:99:73:fd:65:03:93:db:62:c5:8e:2c:67:76:fa:
                    35:45:53:9a:14:d0:e5:6e:62:71:a1:27:f6:5d:47:
                    32:ba:ac:d1:2c:5c:7a:36:94:63:d4:00:4d:33:b0:
                    b6:e2:0d:80:0c:aa:45:3f:53:02:08:a9:7f:86:00:
                    a1:a6:5a:66:ac:6e:df:13:13:ae:0f:9c:d6:d7:e1:
                    c6:5e:12:83:32:6d:39:8f:92:47:4a:c3:61:49:7e:
                    4c:84:c6:8a:c1:94:14:bc:8c:9b:d5:1b:7f:78:ab:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:83:FE:7E:D0:32:51:89:BE:E6:35:FF:50:54:0A:F1:91:36:5C:EE
            X509v3 Authority Key Identifier:
                keyid:7B:3D:67:B8:BC:F8:6E:AB:99:78:72:5F:19:C0:82:8C:CC:57:B6:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:60:fa:5b:16:dd:ce:51:0b:a5:83:c2:4c:20:31:f2:ba:14:
         1d:75:4a:70:9a:d0:2d:dd:2b:0c:d5:05:69:76:87:90:cc:a5:
         9f:58:b0:89:32:a5:37:01:59:b6:6e:5d:07:31:85:d6:19:3f:
         21:87:6d:b1:01:7a:55:89:d5:4f:e2:c3:c3:d9:41:73:3f:f1:
         6c:b8:8d:71:52:c9:ab:ae:c3:39:c7:8a:7f:41:9e:4f:34:24:
         f2:ad:93:52:cf:22:2c:2b:7f:f3:b2:01:b0:c1:74:04:97:19:
         32:3d:51:91:08:27:f5:16:45:13:ce:d8:73:9e:f1:b9:de:fa:
         d9:4c:b4:35:3b:3c:7d:b7:79:1d:85:20:ae:91:0a:2d:35:61:
         04:ad:2f:f1:1a:ac:55:f1:b7:18:46:66:36:19:23:e7:b0:32:
         2f:fe:48:59:0f:9e:f3:56:cb:7f:2b:6d:ac:dd:ab:a6:97:e7:
         22:b0:4a:cf:76:d3:df:b5:d5:52:b7:0c:cc:d4:da:5d:39:7c:
         78:b9:24:72:5e:72:dc:1b:a3:a6:1c:28:a7:7a:25:9d:2b:64:
         3b:ed:0d:18:82:e2:4c:e3:63:25:5c:3d:18:b8:32:6b:f0:01:
         b4:58:b5:4c:93:ab:1c:56:25:0f:7e:a8:9b:b8:f9:ba:d0:b1:
         f0:2b:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:26 2024 by rpki-client on console-fra.rpki-client.org