Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643930303a3a2f34302d3430203d3e20323632343933.roa
File:                     323830343a6665633a643930303a3a2f34302d3430203d3e20323632343933.roa (raw, json)
Hash identifier:          0eCPmr467/0n3j16CD/jw3jyFGesldgEg1KELKP9jw4=
Subject key identifier:   BD:7F:3B:08:8D:9E:03:DB:76:5A:FE:72:44:B4:E7:D6:E9:ED:DA:29
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       7EC96F9C4478D4973E45A1CC3954E21E8606326C
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643930303a3a2f34302d3430203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        2804:fec:d900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c9:6f:9c:44:78:d4:97:3e:45:a1:cc:39:54:e2:1e:86:06:32:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=BD7F3B088D9E03DB765AFE7244B4E7D6E9EDDA29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:9f:d1:25:ec:0c:28:bb:01:09:bd:d6:74:
                    e7:3a:7f:39:64:12:3f:a4:49:97:5c:72:26:41:97:
                    37:6c:7c:4e:66:2f:8f:12:f7:89:b7:ba:0c:1f:4b:
                    64:cb:92:a0:f2:08:5e:d3:44:7d:d1:2c:f0:f0:7a:
                    89:70:8e:48:92:d2:f4:c2:a9:a3:55:bb:61:42:75:
                    8b:dd:c6:13:ae:51:af:03:32:4a:2c:ff:2d:ea:a1:
                    f1:42:fe:62:16:ea:e4:ce:e7:ff:93:01:7a:d3:6b:
                    07:f1:12:56:ff:a6:cc:78:27:2f:3e:0b:91:bb:1f:
                    fa:99:0e:3e:ee:b2:a4:d4:b1:5c:8f:d1:a7:d9:de:
                    39:8b:5e:c0:15:38:a1:ff:75:d9:5e:b4:b7:6a:52:
                    ad:8a:df:57:3a:88:e0:29:5d:41:f1:57:d3:78:5d:
                    65:30:29:e2:9e:76:4e:1c:48:c5:ad:e4:9e:aa:85:
                    ab:16:3b:01:e2:1c:9e:b0:0c:cc:eb:33:6e:e8:ae:
                    95:eb:8f:e7:18:2a:cb:86:bd:2f:c4:df:b0:90:82:
                    7e:58:e9:1b:dc:08:c4:42:03:29:5e:c2:95:1c:e5:
                    e8:b5:92:7c:68:9c:26:aa:7a:cd:ce:67:1b:d1:5b:
                    4b:31:a9:ea:16:f8:37:aa:74:9a:08:41:ca:48:98:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7F:3B:08:8D:9E:03:DB:76:5A:FE:72:44:B4:E7:D6:E9:ED:DA:29
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643930303a3a2f34302d3430203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:d900::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:70:73:6a:84:c1:9a:37:6d:a5:e5:bd:01:61:3d:f8:d3:
         2f:da:30:16:dc:92:5b:c9:a1:28:8f:8e:81:14:46:c1:20:81:
         e1:f1:ce:5b:cf:38:71:49:e0:79:12:d4:51:c3:86:d4:ba:eb:
         8e:9c:13:86:d2:57:ea:5c:50:a7:9a:1e:df:59:0f:36:7e:7e:
         56:b1:10:d4:d3:cd:c1:3a:78:37:d6:ea:0d:81:25:fe:27:a1:
         2d:3c:37:95:71:56:5b:fa:64:56:d4:b3:08:5b:57:eb:93:78:
         54:da:80:0f:b5:06:54:dd:f1:b3:f6:94:37:74:ec:bd:33:0d:
         47:ed:ea:bb:54:c7:51:9b:55:04:b2:05:83:97:10:cd:38:65:
         63:0b:a2:1e:1f:c6:4c:69:e3:0c:29:de:8e:66:16:f9:81:c2:
         3e:ed:b8:b1:aa:81:1f:41:c6:16:d5:67:09:1e:57:aa:f8:90:
         88:5d:e7:0d:37:e7:d7:a6:1c:61:38:42:95:b2:3d:04:f4:05:
         41:0e:07:d4:c6:4d:5b:ed:7d:4e:3d:d8:06:7c:b1:d3:a2:bb:
         cc:e3:92:33:77:f9:38:05:2b:01:2a:2a:e5:c3:e6:2a:e0:8a:
         c7:f3:a6:47:36:44:ef:1f:23:c6:fd:23:eb:9d:5f:11:b2:78:
         1e:a7:bf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org