Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633434383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633434383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          nGdyGTlyTT9Nh0jtwP5MCWcruvou1WHjMpWbgOQmkZo=
Subject key identifier:   87:D7:0D:AB:86:1C:D2:1B:66:96:6C:EA:15:D3:8C:F0:EC:AD:D8:19
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       1117BF6ECE2A273B1C8D7FD4D5CD706341BDBA2D
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633434383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:38 +0000
ROA not before:           Thu 07 Nov 2024 20:49:38 +0000
ROA not after:            Thu 06 Nov 2025 20:54:38 +0000
asID:                     262493
IP address blocks:        2804:fec:c448::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:17:bf:6e:ce:2a:27:3b:1c:8d:7f:d4:d5:cd:70:63:41:bd:ba:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:38 2024 GMT
            Not After : Nov  6 20:54:38 2025 GMT
        Subject: CN=87D70DAB861CD21B66966CEA15D38CF0ECADD819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:a1:3c:4f:0c:55:b1:e8:13:ed:e9:c4:05:
                    20:ad:7f:82:53:df:19:9b:e7:ea:08:e9:f5:8d:03:
                    91:3d:b7:1c:c0:5d:09:24:93:8e:ca:e4:ab:69:9e:
                    4f:e2:e3:a0:58:1c:d5:a3:77:94:8e:60:c4:e7:f2:
                    d5:02:75:ce:41:3a:52:1a:57:63:39:6c:f4:6c:04:
                    75:50:57:c3:62:9e:50:2f:97:a6:0d:2e:37:78:bc:
                    80:af:d1:9a:ef:bf:ec:c5:9c:ff:52:b1:18:30:df:
                    d6:e8:0f:61:c1:88:c8:8d:c9:e0:9d:a3:28:81:c6:
                    ea:78:9b:aa:5e:26:8e:90:01:a5:ed:b8:42:8b:2b:
                    ff:10:90:55:d4:31:1d:dd:37:02:bc:9f:e6:1d:27:
                    65:2a:71:08:ea:91:94:be:57:c1:35:19:20:65:13:
                    cd:00:69:38:4b:d0:fd:30:f6:d9:a3:ad:00:bc:71:
                    b0:c2:dd:8c:ee:f5:b2:d9:ac:e2:94:93:00:e5:08:
                    ac:32:75:7f:c5:c0:d0:49:70:ae:23:00:86:c3:07:
                    99:26:fa:e7:cb:42:a3:9c:2d:1b:b3:88:0a:53:a0:
                    6c:8d:94:06:8c:74:90:df:af:74:73:89:c7:d3:a9:
                    39:b8:ad:3b:44:6a:36:07:b7:23:13:3f:1f:a1:e2:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:0D:AB:86:1C:D2:1B:66:96:6C:EA:15:D3:8C:F0:EC:AD:D8:19
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633434383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c448::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:34:59:80:77:91:f7:e0:cc:9d:eb:d8:03:37:6b:e7:ed:fb:
         ad:28:b2:5d:64:8f:23:33:4c:b3:23:98:44:7f:75:b3:48:63:
         05:92:68:fe:d8:aa:19:ac:ca:b1:bf:8d:c2:b0:af:3d:78:85:
         66:4a:cd:3f:2e:86:97:a0:10:5c:a7:c2:2b:c1:d0:ab:cb:8d:
         6a:6b:14:56:30:16:25:35:9a:90:55:a5:98:d8:b3:5c:c3:db:
         06:52:28:f4:82:65:d6:45:2d:47:71:77:1a:c0:b8:69:18:f4:
         f5:e1:55:17:bd:bb:56:e4:be:15:c5:34:cb:64:86:32:8f:e0:
         35:2a:45:91:50:bb:4e:d3:16:3d:fc:df:44:65:40:c2:d8:be:
         70:a3:df:4f:4a:e9:62:b6:28:d5:9e:2d:df:05:25:6a:c6:50:
         7e:a9:8d:a7:2d:19:e9:8d:e3:e5:21:3d:94:57:5d:f4:e3:7c:
         32:b9:ac:64:20:dc:24:51:72:35:c4:bf:ff:12:fd:ec:02:f5:
         44:f4:3e:25:53:9e:34:a4:a1:39:7c:ec:0a:82:e2:34:ca:62:
         5f:a2:48:ad:c3:a5:b6:a0:e8:4e:a3:d2:11:76:28:2c:81:8d:
         0b:b5:7f:fe:43:8b:0e:6b:77:f2:28:89:43:d1:91:90:87:f5:
         a6:7e:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org