Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa
File:                     323830343a3836633a3a2f33322d3438203d3e20323632333639.roa (raw, json)
Hash identifier:          Ckk2/C3yX5sNIr7EK5kU0NqhxNP4ilrxVTM4BKyM7B4=
Subject key identifier:   AC:EE:72:ED:26:AF:65:20:0D:7F:F4:21:6E:62:4D:DB:DA:78:2E:77
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       75727090FB8AF8B9967625D36C6FD3BD418906B6
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa
Signing time:             Tue 12 Nov 2024 18:03:23 +0000
ROA not before:           Tue 12 Nov 2024 17:58:23 +0000
ROA not after:            Tue 11 Nov 2025 18:03:23 +0000
asID:                     262369
IP address blocks:        2804:86c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:72:70:90:fb:8a:f8:b9:96:76:25:d3:6c:6f:d3:bd:41:89:06:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Nov 12 17:58:23 2024 GMT
            Not After : Nov 11 18:03:23 2025 GMT
        Subject: CN=ACEE72ED26AF65200D7FF4216E624DDBDA782E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:34:a9:f9:23:28:3f:7b:09:f7:e8:78:b4:
                    b6:e2:e4:9a:d5:34:f2:f8:58:cd:95:67:c6:6a:60:
                    e8:dc:f0:19:1c:a0:98:f4:49:7c:d6:f7:69:62:2d:
                    eb:df:f8:11:66:3a:23:95:b0:c1:dc:48:42:17:e9:
                    c4:9c:5e:bb:d5:0b:0d:9f:ba:07:02:62:39:c8:b5:
                    de:f8:42:b0:f6:9d:b3:c6:44:4a:1f:df:49:73:e0:
                    e4:db:ce:74:89:31:6a:97:06:07:ec:29:05:95:85:
                    47:a3:76:ea:3d:f5:97:b4:26:e9:2e:a9:e4:6d:98:
                    fc:87:32:56:84:6a:16:51:8c:38:6c:65:9f:07:ed:
                    a3:44:32:2c:3c:c2:79:f6:a6:cc:b3:83:83:f1:dd:
                    a0:89:4e:db:21:ab:ec:34:9f:d8:04:f8:1a:ec:f5:
                    43:68:f1:2b:de:52:e8:c0:78:89:02:ff:bb:a5:09:
                    86:33:1d:fe:a7:3d:6f:68:2d:b3:06:de:bf:27:96:
                    13:af:41:cc:35:b8:a7:81:09:ed:02:ed:a2:fe:1d:
                    21:c3:89:20:65:9d:cf:e6:56:f9:36:76:c7:f7:bf:
                    32:66:1b:2b:2e:ba:8b:1c:01:7d:2b:e8:77:4b:45:
                    9e:6f:11:c7:56:0b:ac:2d:b7:30:b9:d1:2f:73:fd:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EE:72:ED:26:AF:65:20:0D:7F:F4:21:6E:62:4D:DB:DA:78:2E:77
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:24:4f:19:a8:33:2b:0e:1b:1a:67:32:51:5a:f3:5b:6e:16:
         37:98:96:03:10:5d:f7:2c:bb:50:85:35:bd:b5:dd:21:4d:77:
         9f:ac:d3:47:6a:3e:b5:55:00:41:ff:3b:94:a9:b1:31:be:e1:
         57:c8:2c:53:a4:0e:6a:5c:2c:d6:f0:f6:0a:c2:1f:df:7c:ef:
         07:6a:22:13:d0:a3:71:78:85:6e:3d:bb:5c:df:48:88:1a:8d:
         4e:ca:85:1b:f3:e6:cd:2a:5a:29:76:1a:82:3a:33:c1:98:45:
         85:3f:17:cf:51:d3:80:c7:d5:d6:31:ec:2d:19:0a:7e:45:03:
         d8:e7:7b:ac:9d:c6:e2:f2:64:c3:68:4f:62:41:b2:fa:c0:c4:
         4e:7c:e4:5c:3d:66:3e:87:0e:3e:fa:6c:5a:67:55:97:c4:d9:
         e3:84:b7:89:6c:3e:5e:66:43:66:ce:45:66:4d:4a:fa:d3:ce:
         8a:13:aa:55:99:22:b4:02:51:5d:5b:5f:9f:d1:67:35:40:41:
         93:6d:60:0f:59:0a:c2:fa:f4:af:c1:1e:ec:5f:fd:5f:b7:d4:
         09:af:13:32:10:15:41:64:41:48:7a:76:81:82:91:f0:c9:08:
         07:42:d4:d8:77:d6:68:26:68:a8:55:6c:f6:29:f9:c5:91:e2:
         f9:13:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:17 2024 by rpki-client on console-ams.rpki-client.org