Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/323830343a343733303a3a2f33322d3634203d3e20323637303337.roa
File:                     323830343a343733303a3a2f33322d3634203d3e20323637303337.roa (raw, json)
Hash identifier:          ZhNIKjAqpR1k+QVlzbwbYRPcII5UvtMUB3UCy+WAxvI=
Subject key identifier:   D4:66:B9:34:89:C2:7F:4A:9B:97:F5:96:D8:CE:4E:6C:00:7D:C7:82
Certificate issuer:       /CN=03BF4AFF1AB77B0E0FD870EB679323489DF549B4
Certificate serial:       052C9F466D70C85B4CA51EABBDEFF6F973E46C25
Authority key identifier: 03:BF:4A:FF:1A:B7:7B:0E:0F:D8:70:EB:67:93:23:48:9D:F5:49:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/323830343a343733303a3a2f33322d3634203d3e20323637303337.roa
Signing time:             Tue 05 Nov 2024 18:23:22 +0000
ROA not before:           Tue 05 Nov 2024 18:18:22 +0000
ROA not after:            Tue 04 Nov 2025 18:23:22 +0000
asID:                     267037
IP address blocks:        2804:4730::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.crl
                          rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2c:9f:46:6d:70:c8:5b:4c:a5:1e:ab:bd:ef:f6:f9:73:e4:6c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03BF4AFF1AB77B0E0FD870EB679323489DF549B4
        Validity
            Not Before: Nov  5 18:18:22 2024 GMT
            Not After : Nov  4 18:23:22 2025 GMT
        Subject: CN=D466B93489C27F4A9B97F596D8CE4E6C007DC782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:ca:ed:a4:9e:d0:21:29:bf:70:d4:21:d8:
                    93:ff:cf:29:da:b9:e0:b8:d0:7f:00:9f:54:1a:07:
                    d2:1c:40:f0:74:08:8f:81:2f:22:f7:c1:7e:7b:f8:
                    03:80:f0:7d:cd:34:9f:d9:41:eb:78:21:a4:7a:4a:
                    07:59:26:16:16:34:09:b7:50:8a:1a:64:77:e9:34:
                    e5:eb:d7:fd:12:95:5c:62:60:86:7f:37:c9:ec:4b:
                    28:7f:49:11:f2:31:3f:21:30:07:1e:a7:fd:c7:f5:
                    c6:b6:0a:11:3c:cb:dc:a9:62:2d:92:b8:13:89:e9:
                    ff:52:36:1b:aa:f3:5d:8f:f0:8a:b7:57:62:fa:22:
                    6c:1a:63:11:85:5a:e4:26:a5:70:f8:a1:98:31:e3:
                    c4:4e:b5:ae:55:77:98:cb:a1:f5:d5:de:76:b6:a9:
                    b0:2e:78:0c:74:b8:18:5f:8e:4a:3e:d2:94:fe:10:
                    26:d7:55:73:3a:ba:d4:fd:63:b6:45:ca:c6:aa:0e:
                    62:f8:3e:83:f1:7b:ff:45:6d:37:10:f6:90:fe:9e:
                    46:00:b1:65:6e:8c:6a:6b:ac:21:9c:92:df:31:3d:
                    e7:8e:62:0a:ae:a6:a3:04:dd:76:d6:87:ad:9d:c6:
                    1f:40:ca:04:4c:6d:3a:24:32:18:43:6d:af:3a:16:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:66:B9:34:89:C2:7F:4A:9B:97:F5:96:D8:CE:4E:6C:00:7D:C7:82
            X509v3 Authority Key Identifier:
                keyid:03:BF:4A:FF:1A:B7:7B:0E:0F:D8:70:EB:67:93:23:48:9D:F5:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/323830343a343733303a3a2f33322d3634203d3e20323637303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4730::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:6a:3c:1c:3e:c7:ac:9c:42:f9:ef:ed:c8:fa:b0:ac:06:
         b1:47:99:b9:4b:90:49:50:a2:87:13:c8:93:ba:6a:75:73:26:
         8c:49:30:34:15:1e:0a:cf:9d:61:97:3f:9b:38:31:cc:ed:ae:
         c2:eb:7c:96:46:89:1d:91:61:8b:bb:61:5f:a9:4c:00:51:41:
         d1:28:03:4b:e4:10:67:b8:b4:3e:92:e2:e9:09:16:c3:59:5d:
         62:35:16:18:51:35:9b:64:55:7a:6e:cf:48:54:2d:81:68:05:
         cd:79:d8:79:ae:0b:7d:43:7b:6e:74:c2:58:91:61:1e:d9:af:
         60:fa:5a:8f:f3:07:6c:4b:aa:59:5b:ef:4a:93:da:01:33:fd:
         53:44:a8:2a:89:6c:e8:4f:fa:64:77:dd:a9:54:b0:14:06:60:
         24:d3:7c:02:6c:6a:21:9e:13:e8:1d:e0:5a:5f:17:b2:27:d2:
         49:9b:e2:7f:e7:4c:79:a0:db:2d:4e:e7:b0:fe:10:5a:3d:4e:
         be:b6:1e:06:42:9c:0e:d0:b0:33:96:0a:f5:49:0e:54:78:8e:
         e1:4e:c3:a6:cf:4f:ff:45:df:b0:6e:ec:47:02:85:80:a8:22:
         e3:46:81:2a:1a:24:94:86:bd:a4:5e:4b:44:55:df:00:e2:97:
         65:7d:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org