Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa
File:                     323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa (raw, json)
Hash identifier:          BfN4282Jsuepd3OUshCSbHugS9jQ/Yv8fVxno4REUBA=
Subject key identifier:   8D:9F:25:19:B0:D4:7D:8E:73:BF:BA:E4:A1:07:2E:EB:A9:28:A0:30
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       56667DD1220E00AA7EF3AF35C1CE711CADA30AAD
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:30 +0000
ROA not before:           Thu 04 Apr 2024 01:33:30 +0000
ROA not after:            Thu 03 Apr 2025 01:38:30 +0000
asID:                     263661
IP address blocks:        2804:1128:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:66:7d:d1:22:0e:00:aa:7e:f3:af:35:c1:ce:71:1c:ad:a3:0a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:30 2024 GMT
            Not After : Apr  3 01:38:30 2025 GMT
        Subject: CN=8D9F2519B0D47D8E73BFBAE4A1072EEBA928A030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:b7:f5:ca:ed:d2:a0:5f:24:c1:12:ef:cd:
                    29:6e:1c:1f:7a:b0:69:09:c9:f2:12:d1:16:af:be:
                    d6:2d:5f:43:50:de:c1:51:c0:c7:73:34:8c:ef:36:
                    57:52:8d:ec:66:68:a9:f8:84:c9:7e:9e:28:e2:23:
                    04:65:7c:72:35:55:9d:21:0d:20:13:01:a0:75:43:
                    3e:7c:2a:5e:68:84:07:1a:47:fa:6c:cd:f7:c4:de:
                    72:91:fa:5c:4e:2a:a9:5f:29:40:59:21:f6:12:76:
                    de:3b:17:6e:6c:96:99:f7:a7:be:29:66:b6:f7:3b:
                    55:e0:b4:7e:30:11:cc:e8:91:1b:d7:64:6f:f7:96:
                    f0:d6:3a:f8:34:7c:56:63:5b:0a:35:62:9d:d9:6c:
                    27:75:65:6d:a3:5e:12:c7:9c:f9:db:c8:c2:4b:f2:
                    ce:1f:5f:7b:5d:04:bf:0d:af:65:5f:b1:c1:bb:30:
                    58:71:bd:fa:1c:6e:d5:6c:ff:6e:e8:fd:bd:f1:d2:
                    b6:4a:1c:d6:d3:fd:43:f4:d1:c8:2b:36:ea:d0:f9:
                    43:5c:85:c5:eb:df:cb:78:49:c8:60:f4:44:a7:bd:
                    2f:25:35:ea:9d:c8:53:6f:8d:85:d1:15:39:01:c6:
                    50:94:c5:fa:61:93:31:82:ea:df:b1:6a:74:15:9f:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9F:25:19:B0:D4:7D:8E:73:BF:BA:E4:A1:07:2E:EB:A9:28:A0:30
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:ab:5e:72:02:16:0c:ff:d7:a3:b6:da:60:3d:fe:ed:74:
         04:ee:c7:66:18:02:82:a0:31:53:53:c0:00:07:eb:e6:b2:05:
         d7:01:ce:4c:82:56:7d:e1:45:1a:db:ab:c2:87:fd:aa:b1:39:
         8d:72:63:d3:ec:98:a5:b4:86:f3:b4:bb:65:73:91:13:01:79:
         46:15:79:bb:77:6d:35:44:d7:b0:fc:67:8a:ab:5e:5a:90:2d:
         51:08:9f:54:15:09:fa:f9:f6:f3:72:d8:77:89:13:3b:ed:e2:
         d6:38:84:c8:7f:e3:f1:6f:c1:b0:da:75:f0:bf:11:ed:cd:63:
         85:0d:53:0e:f0:d2:65:af:40:53:3d:d7:90:ca:67:d3:69:ac:
         f1:2a:e2:52:c2:81:66:39:b8:a7:76:e7:28:c0:54:0b:78:01:
         b0:37:a5:1e:0f:a4:1a:4a:09:8f:48:90:da:73:ce:46:4f:c9:
         a5:79:e4:0d:88:e7:26:e5:7b:c2:8f:77:6c:ee:af:b6:2d:77:
         8f:b9:bd:c7:bc:b8:73:a5:54:35:ac:67:90:5c:17:8b:1a:be:
         0b:28:1e:87:5b:40:fe:a2:c8:1c:69:c2:ed:80:7b:88:ca:9e:
         2f:cf:0d:44:c6:b3:93:7e:11:04:ea:f5:de:06:8a:91:83:c3:
         82:d9:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org