Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/323830343a366633303a3a2f33322d3334203d3e20323730363434.roa
File:                     323830343a366633303a3a2f33322d3334203d3e20323730363434.roa (raw, json)
Hash identifier:          qTHk/58L/nzkOgXWy/iDVE1t+xtheoyV70qsHe3Kkms=
Subject key identifier:   CE:52:99:52:E7:F8:68:27:9C:60:68:59:99:AD:C0:FA:5C:ED:2D:5D
Certificate issuer:       /CN=92A3C27E684BD91C2CF684E7FDDD48433051191D
Certificate serial:       729EE9E447D511FD7D9EA36D823E02918EDF6F53
Authority key identifier: 92:A3:C2:7E:68:4B:D9:1C:2C:F6:84:E7:FD:DD:48:43:30:51:19:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/323830343a366633303a3a2f33322d3334203d3e20323730363434.roa
Signing time:             Thu 04 Apr 2024 16:12:10 +0000
ROA not before:           Thu 04 Apr 2024 16:07:10 +0000
ROA not after:            Thu 03 Apr 2025 16:12:10 +0000
asID:                     270644
IP address blocks:        2804:6f30::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.crl
                          rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9e:e9:e4:47:d5:11:fd:7d:9e:a3:6d:82:3e:02:91:8e:df:6f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92A3C27E684BD91C2CF684E7FDDD48433051191D
        Validity
            Not Before: Apr  4 16:07:10 2024 GMT
            Not After : Apr  3 16:12:10 2025 GMT
        Subject: CN=CE529952E7F868279C60685999ADC0FA5CED2D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:43:05:cd:93:ec:49:8d:26:42:ab:cf:8b:a1:
                    5d:45:4c:41:eb:a2:f6:d5:e6:ce:6c:3f:90:09:0d:
                    15:18:d3:b5:f8:48:ec:28:a7:ba:ce:d3:b4:c8:cf:
                    35:3d:c5:72:0e:93:d7:3e:28:61:09:09:9d:2e:43:
                    27:b5:2a:d1:0d:86:4e:3a:7d:81:b8:ae:81:eb:51:
                    ed:04:80:15:08:d9:f9:62:07:c6:c5:9e:6e:34:15:
                    36:bc:43:61:ae:89:82:a2:bc:b6:59:db:9b:24:70:
                    4e:e4:8c:5b:5d:2c:be:56:06:80:03:f8:35:6e:f6:
                    27:ca:4d:79:4d:43:8c:48:e7:6a:2b:0f:a9:88:0b:
                    f3:f7:2b:3b:c2:a6:7b:de:4e:cb:44:5f:04:2b:b1:
                    3f:c1:67:92:20:c5:bf:eb:ce:fe:c7:d3:4d:79:0b:
                    f0:bf:4f:34:38:84:85:03:12:fa:fe:d0:46:fc:d2:
                    95:0e:ab:8a:12:7d:69:19:8f:ca:a4:b4:eb:94:62:
                    cb:b8:ca:06:f0:c5:67:8a:50:7b:56:ac:2a:6c:1f:
                    fc:97:1e:32:f5:0b:cf:e0:6b:55:8d:b1:e7:d5:7a:
                    39:1c:1c:cb:e0:ec:8c:fe:55:87:08:c5:2b:94:6f:
                    db:e7:6c:66:ce:91:ec:71:99:27:84:d8:8d:c6:7b:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:52:99:52:E7:F8:68:27:9C:60:68:59:99:AD:C0:FA:5C:ED:2D:5D
            X509v3 Authority Key Identifier:
                keyid:92:A3:C2:7E:68:4B:D9:1C:2C:F6:84:E7:FD:DD:48:43:30:51:19:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/323830343a366633303a3a2f33322d3334203d3e20323730363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f30::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:f6:f4:cf:5e:0e:e3:b5:4c:86:c9:0c:21:d4:fb:18:dc:
         a3:ad:50:37:1f:16:47:71:57:1c:0e:d9:ed:2b:f2:5c:56:b1:
         a1:1b:59:ea:4c:3f:c9:7d:58:d0:25:04:5c:0c:0c:33:b8:0e:
         e2:51:25:31:ec:d1:16:db:d2:ea:44:a4:4a:c2:8d:0c:32:d7:
         73:f3:cc:3a:a6:7b:57:cf:b7:bd:73:7e:3d:8f:3f:8f:cc:71:
         b4:0a:f0:e9:ab:2b:40:2b:2b:36:ae:f4:de:1a:b5:31:ec:11:
         a1:9e:cb:dd:26:10:31:83:83:11:89:14:dc:97:44:f0:23:20:
         f9:6b:15:34:d0:d3:5e:7a:d8:17:35:54:33:da:5e:11:e1:5f:
         94:8b:b3:f5:c3:03:71:03:d0:c3:8f:2c:b4:09:9a:0e:34:08:
         fe:22:c8:aa:bf:8c:6f:6c:99:ec:9a:ad:b5:83:8c:9c:c2:18:
         a5:22:4c:be:79:30:cb:3d:70:86:94:09:16:ab:85:48:23:88:
         ab:fa:ae:c5:19:5f:f8:78:93:a5:de:8d:00:a0:81:f7:a1:24:
         92:a5:f4:11:f3:2e:be:65:b5:7e:47:7a:e7:ac:61:f5:a0:cb:
         00:04:8c:0e:66:0d:60:34:e2:c0:2b:f7:e1:60:d2:58:de:25:
         f4:65:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org