Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633634383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633634383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          NOIdTbsepyxa1ed1GdeDo0JgZuoxjunA3izrWE9hTXw=
Subject key identifier:   01:78:C0:B8:5E:7A:1D:B3:B8:CB:DF:65:95:0C:0B:27:45:58:87:D8
Certificate issuer:       /CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
Certificate serial:       1A5DFFBA1B5DFB8866906C554ECDBC24D8591E2D
Authority key identifier: 66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633634383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:27 +0000
ROA not before:           Sun 14 Apr 2024 02:00:27 +0000
ROA not after:            Sun 13 Apr 2025 02:05:27 +0000
asID:                     262493
IP address blocks:        2804:fec:c648::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jul 2024 12:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5d:ff:ba:1b:5d:fb:88:66:90:6c:55:4e:cd:bc:24:d8:59:1e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
        Validity
            Not Before: Apr 14 02:00:27 2024 GMT
            Not After : Apr 13 02:05:27 2025 GMT
        Subject: CN=0178C0B85E7A1DB3B8CBDF65950C0B27455887D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:32:89:6c:1a:6b:80:4b:dc:6a:74:10:c5:
                    70:01:4b:7e:74:77:35:1c:01:b4:af:14:bd:65:a9:
                    0b:e9:08:bc:d1:96:01:06:3f:1b:87:41:cb:46:c6:
                    b1:27:0b:a4:3b:20:a7:60:4c:10:bd:82:27:f0:ad:
                    9d:03:6e:b1:21:b9:ed:0a:7a:c6:4f:4a:7c:5b:d7:
                    b5:91:79:f2:2a:4f:99:f1:d5:23:ed:26:5c:85:26:
                    29:d8:54:a6:d0:c6:f5:2c:0d:42:2b:8c:30:97:2d:
                    73:f0:33:65:52:2a:61:70:f8:55:6c:1d:64:6c:7b:
                    72:9d:11:dd:0a:b2:f3:e3:7a:b5:2f:0d:0b:a9:e3:
                    23:a6:f1:95:4b:c8:cb:5c:be:03:f5:e0:36:2a:f6:
                    86:73:e2:52:51:28:85:ce:7e:ec:48:23:92:e4:b9:
                    17:b7:60:7d:5b:a5:f5:55:f8:a8:00:71:a4:b9:c4:
                    0b:7c:20:35:4b:da:10:47:27:41:c8:05:98:7c:2b:
                    91:d9:05:23:65:aa:72:8b:a6:d5:0b:ab:b9:07:06:
                    c2:54:89:83:c3:85:dc:63:ab:c1:1c:4a:96:56:f0:
                    38:e1:8c:ec:f8:38:2d:66:6a:4c:98:e1:14:de:e2:
                    1f:97:f6:f5:79:c0:5c:f4:f0:6a:31:cf:78:7a:ca:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:78:C0:B8:5E:7A:1D:B3:B8:CB:DF:65:95:0C:0B:27:45:58:87:D8
            X509v3 Authority Key Identifier:
                keyid:66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633634383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c648::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:ca:32:8e:ac:21:4e:13:f1:18:66:fe:d2:49:b2:75:bf:ca:
         cb:58:71:dc:bb:17:fb:47:9d:55:53:78:23:36:58:b0:fc:4a:
         88:6d:bc:b1:47:1f:fc:c4:00:ba:36:10:8a:3c:da:08:75:95:
         c0:80:79:f0:9e:15:9c:81:55:3b:b1:0b:3a:ca:60:69:99:f3:
         99:a0:34:73:5a:a7:f5:1b:17:fc:12:6f:5e:b4:5e:60:5c:1f:
         50:86:50:82:f5:8d:07:23:90:ea:be:9f:b4:5a:26:e0:7e:0c:
         84:6e:a9:f8:4a:70:e3:95:8c:6e:0d:dd:01:c8:ef:fa:9b:5e:
         e1:d6:12:68:4e:62:fb:ff:b2:1e:80:1b:b0:84:48:9e:f8:68:
         04:75:09:5b:db:1a:e2:c6:f4:f1:a3:cc:29:e1:92:b3:f8:c1:
         dd:9a:28:82:aa:3c:3b:20:a8:eb:a7:b6:af:92:12:5f:a1:08:
         32:7d:25:f1:67:11:09:d9:6d:5d:bc:80:de:f0:54:c9:e9:06:
         3f:99:a8:b0:8f:7e:d2:ea:37:d4:e3:6b:f9:bd:7e:76:47:80:
         de:27:7a:e0:77:95:5c:49:df:5f:b0:e1:94:c4:d3:1d:bd:f6:
         c6:0a:b8:0f:66:66:65:57:46:4d:17:5c:69:47:3c:a9:f6:61:
         6e:4d:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:28:32 2024 by rpki-client on console-fra.rpki-client.org