Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3438203d3e20323633383733.roa
File:                     323830343a323731303a3a2f33322d3438203d3e20323633383733.roa (raw, json)
Hash identifier:          smh9UPENc4DB2SWap/7B3xNNoaaymsE4AUBHd6uEIOM=
Subject key identifier:   18:9F:80:A2:77:28:3D:EA:B2:AE:2D:C5:3F:E9:98:5F:CD:25:7E:CC
Certificate issuer:       /CN=184AC896B5572D83192F860B4C6AB497566468B5
Certificate serial:       62E9799937C06028969DD0AC72489C880FE7FE4E
Authority key identifier: 18:4A:C8:96:B5:57:2D:83:19:2F:86:0B:4C:6A:B4:97:56:64:68:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3438203d3e20323633383733.roa
Signing time:             Thu 04 Apr 2024 03:00:49 +0000
ROA not before:           Thu 04 Apr 2024 02:55:49 +0000
ROA not after:            Thu 03 Apr 2025 03:00:49 +0000
asID:                     263873
IP address blocks:        2804:2710::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.crl
                          rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:79:99:37:c0:60:28:96:9d:d0:ac:72:48:9c:88:0f:e7:fe:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184AC896B5572D83192F860B4C6AB497566468B5
        Validity
            Not Before: Apr  4 02:55:49 2024 GMT
            Not After : Apr  3 03:00:49 2025 GMT
        Subject: CN=189F80A277283DEAB2AE2DC53FE9985FCD257ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:7a:7d:96:df:32:55:ca:ad:72:9f:b4:ae:
                    c7:bb:97:21:e4:45:b1:40:46:04:c0:b6:4c:c6:58:
                    ab:88:b8:d1:d9:74:12:2d:64:6c:b4:23:b3:8d:b7:
                    87:3b:5e:c0:2c:6d:59:24:8d:cc:8f:81:2e:73:67:
                    6c:f7:67:81:d4:ef:f8:01:1a:80:0d:74:2f:f3:dd:
                    f3:f4:1b:26:2f:dc:a2:a4:bd:b4:13:2a:41:a7:1f:
                    cf:fb:09:42:8a:dc:14:99:d5:22:9e:d8:56:ef:47:
                    94:4b:bf:49:07:de:d3:17:15:5e:e7:2d:27:b7:a7:
                    19:c4:e3:0f:7f:60:18:5c:15:d6:7e:b9:4b:0e:8e:
                    13:e0:75:eb:e1:06:af:79:17:1d:36:73:54:74:bc:
                    c0:1c:31:9e:12:17:f1:8a:0c:fc:4b:4a:72:eb:01:
                    80:7d:0a:46:78:53:99:53:69:0b:a8:ca:c8:60:35:
                    76:0b:94:bd:0b:b6:d5:cf:98:0a:05:3d:cf:e9:16:
                    a9:2a:c5:ff:c7:2c:d1:30:7f:40:e9:b7:2d:a6:a7:
                    1e:58:e3:bf:20:7e:85:3e:69:2b:56:75:9e:ae:e1:
                    b6:0f:49:92:5c:0f:84:87:25:7c:51:40:6a:72:45:
                    17:c4:97:58:dc:87:a6:0a:99:6a:0c:41:02:e6:a2:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9F:80:A2:77:28:3D:EA:B2:AE:2D:C5:3F:E9:98:5F:CD:25:7E:CC
            X509v3 Authority Key Identifier:
                keyid:18:4A:C8:96:B5:57:2D:83:19:2F:86:0B:4C:6A:B4:97:56:64:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3438203d3e20323633383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2710::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:64:50:1a:81:f8:6a:f9:99:47:5e:5d:36:89:cb:d9:b7:05:
         f6:c1:b2:18:08:58:e7:b3:7a:10:a1:af:fd:f7:c9:ac:86:3a:
         90:dd:a7:35:4d:e1:0e:0d:e2:d9:3d:9d:76:e6:3b:24:37:19:
         f9:a0:e2:9e:0a:71:66:73:14:57:77:e6:08:7b:d2:d4:a8:e1:
         4d:c8:20:19:74:60:93:c0:72:f3:71:06:e0:77:45:90:7a:00:
         c3:7a:11:f0:2d:13:fc:c9:34:fa:ab:7c:b2:29:92:1c:58:47:
         6a:ac:8a:a0:61:91:f1:71:85:fb:2e:d6:8c:0b:02:f1:03:40:
         05:cd:b5:b3:ed:91:94:58:d6:73:f5:74:e8:50:3b:f2:0b:df:
         46:0b:73:a2:34:6d:9b:5c:c2:c4:60:f6:99:b3:37:5f:ff:2a:
         7c:da:09:09:db:6e:93:76:2e:80:d5:f6:85:7e:b0:67:1a:10:
         e9:fa:b7:2c:c1:bd:75:c4:95:2f:7e:8b:80:54:e4:40:1c:6c:
         4b:1b:b3:f3:d8:0d:d2:2a:31:5b:9f:a5:64:ef:f1:a1:d7:f3:
         ac:4f:c4:48:09:bd:ec:37:70:94:58:8f:0c:6f:b4:d8:98:9c:
         d3:ec:39:31:75:60:87:24:a8:42:4e:ec:6f:a4:e3:30:66:08:
         f5:36:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org