Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/323830343a6137383a3a2f33332d3333203d3e20323632343738.roa
File:                     323830343a6137383a3a2f33332d3333203d3e20323632343738.roa (raw, json)
Hash identifier:          EqdJavL2kOJSeGG0n+q9lJJllEm+UkieZaSHRPKlhpA=
Subject key identifier:   EC:D3:B4:48:E1:B7:88:3B:AB:79:EF:9C:77:DF:4E:80:8B:A0:5A:43
Certificate issuer:       /CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
Certificate serial:       146C9CFF4962D7547F2003FDF38FF90F24A5165A
Authority key identifier: 30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/323830343a6137383a3a2f33332d3333203d3e20323632343738.roa
Signing time:             Fri 05 Apr 2024 02:36:24 +0000
ROA not before:           Fri 05 Apr 2024 02:31:24 +0000
ROA not after:            Fri 04 Apr 2025 02:36:24 +0000
asID:                     262478
IP address blocks:        2804:a78::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6c:9c:ff:49:62:d7:54:7f:20:03:fd:f3:8f:f9:0f:24:a5:16:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Validity
            Not Before: Apr  5 02:31:24 2024 GMT
            Not After : Apr  4 02:36:24 2025 GMT
        Subject: CN=ECD3B448E1B7883BAB79EF9C77DF4E808BA05A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:89:45:74:be:04:fc:05:d6:8b:1f:6e:81:
                    d9:0b:ff:c3:16:f4:9b:8d:33:32:44:19:90:57:b4:
                    3a:c3:6f:f2:77:ec:3c:fb:db:4b:ed:97:26:c2:ff:
                    e7:14:1e:23:36:5b:fe:75:01:20:12:7e:d8:be:55:
                    32:66:2d:ed:88:02:da:74:4a:f0:3f:1d:ad:7d:6e:
                    36:f7:2c:87:97:80:0c:31:69:2e:57:4b:e6:a2:20:
                    8e:38:7d:47:d3:5b:34:c2:c4:45:68:39:e9:c0:93:
                    ab:6e:b1:02:9b:e0:be:ae:c7:17:e3:33:c7:b6:29:
                    11:ee:d0:ea:bc:6d:31:fa:72:8f:e4:b6:38:46:28:
                    c5:90:59:e3:dd:4a:56:ba:9b:f7:02:ef:f5:66:6d:
                    fd:05:c7:9f:76:9e:7d:e4:a9:f6:ba:f3:eb:1d:f0:
                    12:78:56:4a:1e:6b:bf:de:de:4b:30:b8:d4:25:30:
                    de:19:e9:be:13:ad:66:43:87:51:ca:b1:56:0b:54:
                    4a:12:a7:76:08:e8:06:98:92:c6:da:90:a8:e2:ee:
                    ca:53:47:77:76:bc:5c:26:b4:0b:ec:6c:7f:dc:9f:
                    8a:f6:f7:15:83:e8:9d:26:02:1d:8e:d5:52:db:e7:
                    47:9d:f8:c2:c7:26:85:e1:6b:a5:c0:87:97:6d:04:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D3:B4:48:E1:B7:88:3B:AB:79:EF:9C:77:DF:4E:80:8B:A0:5A:43
            X509v3 Authority Key Identifier:
                keyid:30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/323830343a6137383a3a2f33332d3333203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a78::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:50:4a:33:92:35:59:b8:50:17:96:db:83:61:16:cc:22:41:
         4b:25:10:41:1d:07:5b:37:87:60:73:dd:88:56:36:9b:83:03:
         dc:18:00:e4:82:1e:d0:ca:37:79:47:08:86:de:78:b7:bf:35:
         22:02:89:c9:0a:a1:81:46:4f:71:ca:37:f5:d6:5e:53:6e:85:
         b3:88:dc:7e:bc:48:a9:b1:5f:76:67:98:22:17:24:68:af:99:
         eb:41:0a:fc:a5:28:32:44:79:a8:3f:8b:a5:b4:f2:cf:1f:df:
         c4:90:0b:e8:6b:21:4c:d3:5b:ad:60:b1:14:5e:4d:94:78:db:
         cb:c0:e0:94:c1:5b:d3:16:d5:6e:8a:e3:08:ba:eb:1b:de:db:
         bb:ce:28:5d:0b:9d:7b:a3:ba:2b:91:9d:b0:ba:87:53:fa:ff:
         be:5a:a6:58:5f:85:0e:3e:78:f1:fb:3e:ab:e1:92:fb:03:20:
         bc:d8:8f:b9:88:89:d8:f9:0c:db:0d:13:a9:ad:5e:ae:4c:a1:
         f7:0c:2d:4f:cf:ac:a9:a0:c7:c1:1d:83:29:35:2a:64:d7:74:
         f3:7b:8c:1c:18:b8:67:26:ab:25:f8:0f:a9:8c:76:97:12:69:
         04:67:2f:4f:af:b0:35:ef:33:cf:78:36:bc:2d:26:62:aa:ca:
         9e:01:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:41 2024 by rpki-client on console-ams.rpki-client.org