Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33352d3335203d3e20323637363638.roa
File:                     323830343a343530383a343030303a3a2f33352d3335203d3e20323637363638.roa (raw, json)
Hash identifier:          45nXWOHgC9UxdfONMWcuWMbDBudTxX6o90p2HP9hLIw=
Subject key identifier:   87:33:DA:CA:7B:8E:80:DD:51:F3:9B:34:D2:06:AB:BE:5E:87:41:A9
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       613E7459FB78757E2546C360E66456849AE1FC75
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33352d3335203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:11:00 +0000
ROA not before:           Thu 15 Aug 2024 20:06:00 +0000
ROA not after:            Thu 14 Aug 2025 20:11:00 +0000
asID:                     267668
IP address blocks:        2804:4508:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3e:74:59:fb:78:75:7e:25:46:c3:60:e6:64:56:84:9a:e1:fc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:06:00 2024 GMT
            Not After : Aug 14 20:11:00 2025 GMT
        Subject: CN=8733DACA7B8E80DD51F39B34D206ABBE5E8741A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:37:da:0f:cb:4d:10:39:62:a1:f5:8e:ea:
                    8e:53:c6:68:a7:48:c4:de:0a:15:8b:3f:26:37:de:
                    45:99:fd:4d:c2:85:f3:57:c1:49:02:cf:fb:55:ed:
                    90:e4:07:4e:37:8f:32:b0:a1:16:29:d0:a1:fa:10:
                    59:90:40:d9:e8:27:51:08:26:5f:b7:4f:88:14:30:
                    47:c5:23:87:6b:83:25:d2:3f:a2:b3:5d:10:e5:c0:
                    e1:d9:54:93:5b:7f:46:d0:1a:14:e3:93:f7:2c:dc:
                    ef:da:a9:69:08:1b:99:88:fa:d4:55:c9:3c:9f:83:
                    86:a2:b6:b5:c0:c7:2b:f8:d0:33:ac:14:40:33:63:
                    62:a1:46:e8:ee:a6:86:b5:d7:dd:3d:d4:f5:69:4a:
                    54:80:f0:1b:db:bb:8e:16:0e:46:24:3c:d5:0b:07:
                    bd:2a:09:1c:2d:bd:31:8a:8a:dd:f1:93:7c:de:40:
                    73:77:63:f3:30:65:6d:db:5f:79:7f:7f:cb:27:de:
                    f3:2b:61:f1:a6:4d:1d:fb:51:07:ba:0a:c0:23:b2:
                    a5:cf:74:57:9b:75:2a:54:e5:3b:9b:cf:c0:af:d0:
                    34:2f:30:6a:25:73:e4:de:85:89:83:fe:9a:4b:93:
                    3b:8d:e2:25:22:08:02:68:fb:03:47:f1:b2:35:2e:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:33:DA:CA:7B:8E:80:DD:51:F3:9B:34:D2:06:AB:BE:5E:87:41:A9
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33352d3335203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         50:44:ba:71:47:b9:1d:f4:2c:2e:8a:9a:c9:b5:9d:8b:fb:d2:
         e1:89:2b:b7:dd:cc:09:6e:5a:c4:2a:85:52:ce:bc:c5:4b:1f:
         86:b6:a5:f0:04:c2:b3:c4:f7:8d:0d:de:92:6a:97:72:e2:e7:
         4e:80:35:e3:9f:af:ed:bf:10:19:50:ad:6a:73:e0:d0:d5:50:
         52:3a:df:be:43:6c:03:59:0e:21:50:9f:b4:da:99:a4:17:31:
         f5:35:b8:22:a7:ce:95:0a:75:7d:38:29:72:e4:9a:7b:21:ad:
         0d:12:86:7c:21:e5:6d:89:b4:d5:03:a7:03:d1:5a:d7:0c:ca:
         cd:53:5e:36:03:21:fa:b1:58:89:79:ee:54:26:f5:83:df:aa:
         c8:ca:eb:fd:0b:cb:c6:86:ea:da:fc:46:9e:87:e1:5c:40:77:
         94:68:a0:56:67:30:a5:bb:67:03:e5:bd:a1:e7:08:07:30:cf:
         b7:6b:28:88:f8:12:19:73:b2:40:c7:f0:4c:e1:37:c4:f1:e1:
         84:2b:31:22:17:00:d1:b4:b0:e3:c7:ef:52:9b:a8:4c:68:9c:
         d8:b7:00:fa:4e:a3:e2:00:7b:68:1f:c0:11:dd:0d:5f:ca:38:
         fd:bd:39:7e:f0:c3:2f:d0:cf:a0:5a:3b:e8:3b:79:81:13:11:
         d1:2d:73:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org