Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633334383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633334383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          0wwneyytZl+oXvB77j3okoHcOVOkDVsedDjxjRzr+4Q=
Subject key identifier:   21:AA:C7:FB:CB:3A:2B:E7:A4:BD:75:85:22:16:BB:8E:C5:C8:EA:83
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       62504B122E1EE48ED7FEDAF15713F1E06675BAAB
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633334383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        2804:fec:c348::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:50:4b:12:2e:1e:e4:8e:d7:fe:da:f1:57:13:f1:e0:66:75:ba:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=21AAC7FBCB3A2BE7A4BD75852216BB8EC5C8EA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:6f:29:bc:5a:f8:71:f8:3c:df:1a:df:14:
                    e7:58:80:19:9e:49:70:8f:0e:cc:81:5c:af:79:a2:
                    1b:cf:64:bc:0b:19:6d:83:3e:10:ff:5e:d2:15:f1:
                    9a:3f:12:49:7d:9b:48:52:ac:08:76:61:19:57:e1:
                    40:90:25:b6:d7:c5:98:d9:05:ab:da:07:e6:2c:98:
                    44:2b:66:f9:14:01:5a:76:e0:f9:7f:a4:af:29:5e:
                    d2:66:d7:b0:33:9f:d0:bd:ca:b6:72:db:5e:ee:84:
                    3b:03:6b:9e:df:26:b1:93:90:8c:49:80:a6:85:06:
                    20:00:8b:fe:19:8a:c1:bc:a7:a3:11:08:8e:1d:a7:
                    a0:90:1c:d1:92:f3:e7:36:f6:a4:ba:c2:ba:f5:2e:
                    3a:ba:91:00:14:fe:c3:7e:b0:4e:ef:9d:40:02:40:
                    bc:2a:e9:f9:b0:9d:cb:1e:81:80:e0:7a:51:d7:84:
                    b2:02:72:db:33:f2:31:92:ab:01:1f:54:ef:68:c4:
                    86:22:80:53:f1:98:bd:fe:65:6e:02:18:ad:70:63:
                    e3:3a:d0:b7:c5:59:a3:df:c5:c9:90:82:a7:d8:40:
                    94:66:54:44:3f:f2:9d:8f:4f:4a:95:46:05:22:23:
                    0d:3c:b3:c5:75:02:9b:1d:4a:94:57:b5:e6:03:6f:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AA:C7:FB:CB:3A:2B:E7:A4:BD:75:85:22:16:BB:8E:C5:C8:EA:83
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633334383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c348::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:95:c6:df:c4:58:79:22:9c:a8:07:6a:19:50:26:06:61:53:
         70:a2:be:51:ad:91:f5:60:1c:e4:7a:4d:9d:9c:d1:a0:51:e2:
         6a:92:f1:c7:cf:90:ed:4e:70:2c:e0:ae:06:85:ad:59:50:66:
         17:99:e9:d0:99:69:d0:62:5a:9f:0c:a7:d9:1d:bc:d0:3b:ed:
         45:23:d9:b5:40:3b:f2:14:f6:aa:66:be:3a:c3:60:ac:e0:96:
         46:21:42:63:92:c2:a7:97:62:00:4d:9e:fa:e6:f5:6c:cb:28:
         37:f1:77:55:e9:4d:19:16:e0:2c:19:56:36:57:ae:88:e7:f9:
         60:c1:35:ac:84:9f:eb:67:97:aa:0e:a2:bf:fe:2c:50:45:f5:
         e7:6b:50:3c:f3:53:85:37:30:8f:f7:d8:2e:bb:aa:9b:54:18:
         5a:96:57:9c:de:43:59:a9:d2:56:57:90:a4:c4:1b:8e:0f:11:
         10:10:d4:46:15:ad:d2:39:26:e9:b8:0f:9c:87:7c:da:7c:df:
         18:3d:58:de:ad:a8:f4:56:29:4b:0b:af:72:6c:7f:50:23:b7:
         d2:fb:98:09:b9:ca:f6:7a:6e:3a:65:29:3d:f9:88:0f:04:b0:
         92:d9:fe:48:ac:10:2d:79:16:0a:55:70:55:b2:05:71:d4:b7:
         51:0d:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:43 2024 by rpki-client on console-fra.rpki-client.org