Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/323830343a326438303a3a2f33322d3438203d3e20323632333738.roa
File:                     323830343a326438303a3a2f33322d3438203d3e20323632333738.roa (raw, json)
Hash identifier:          0ezV3BzWVO+wECynC+Cv6vIXzUICc6tu2WfgvsoyivY=
Subject key identifier:   5B:B5:31:5D:F7:03:36:86:AC:45:C9:48:90:2E:0B:01:D5:0A:02:EF
Certificate issuer:       /CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
Certificate serial:       292EBE742760D82B8756438F1369DA14EE1381BC
Authority key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/323830343a326438303a3a2f33322d3438203d3e20323632333738.roa
Signing time:             Thu 04 Apr 2024 19:58:34 +0000
ROA not before:           Thu 04 Apr 2024 19:53:34 +0000
ROA not after:            Thu 03 Apr 2025 19:58:34 +0000
asID:                     262378
IP address blocks:        2804:2d80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl
                          rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2e:be:74:27:60:d8:2b:87:56:43:8f:13:69:da:14:ee:13:81:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
        Validity
            Not Before: Apr  4 19:53:34 2024 GMT
            Not After : Apr  3 19:58:34 2025 GMT
        Subject: CN=5BB5315DF7033686AC45C948902E0B01D50A02EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:a6:c8:73:47:03:4c:24:b2:f8:06:af:72:
                    38:de:10:91:22:ae:03:c1:b9:b2:ff:26:cb:61:64:
                    27:c3:e1:9e:dc:26:fa:ce:fe:94:45:13:cd:d8:a8:
                    e0:a8:d6:22:da:3d:fa:5b:9e:cb:26:69:28:db:69:
                    48:86:94:7f:61:de:dd:fd:8e:75:f6:7a:43:f8:b9:
                    fb:db:e1:c8:9e:af:22:c1:fa:93:5f:5a:17:86:1c:
                    a6:50:ce:01:da:8a:d6:00:19:ef:9d:09:3b:da:37:
                    e3:bc:bf:b5:d9:9e:0d:55:88:bf:39:14:3a:bc:73:
                    e7:1b:ed:2c:ef:b6:d5:98:66:98:22:1c:ee:c7:cf:
                    88:67:bf:af:b2:9c:9b:28:be:e9:d8:10:5f:e2:50:
                    78:0c:25:47:e2:73:bc:82:19:c8:70:64:1b:22:9c:
                    13:03:03:36:25:a7:7e:bb:18:20:4c:6b:ff:14:12:
                    6b:46:80:3d:ba:b9:31:09:54:d7:b0:41:5e:b1:67:
                    38:86:5a:e1:50:13:c2:db:1c:2a:37:c4:e3:a9:6d:
                    1c:02:0b:d8:80:41:ec:1f:22:e5:b6:ef:45:87:3c:
                    1c:87:b5:19:9a:93:41:3e:df:8a:d3:11:3e:7e:61:
                    48:b7:c8:a5:c5:f9:e1:09:30:7f:0b:d1:54:53:d6:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B5:31:5D:F7:03:36:86:AC:45:C9:48:90:2E:0B:01:D5:0A:02:EF
            X509v3 Authority Key Identifier:
                keyid:12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/323830343a326438303a3a2f33322d3438203d3e20323632333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:bc:9c:aa:2a:16:dc:6f:fa:b7:13:28:45:56:e7:85:a6:32:
         53:02:2b:3f:36:f5:a5:f7:88:f4:f8:f0:2f:66:1f:ad:69:4c:
         b9:e9:af:97:e4:c6:ee:61:b3:0f:70:9f:3b:0a:cb:c4:ed:a3:
         19:6e:9a:3b:b3:c9:ec:59:3b:7f:aa:d8:d4:8a:3f:cd:34:7e:
         1d:11:b0:cb:c8:29:1d:1b:e0:f7:21:9f:da:6f:dd:ec:90:fe:
         a5:91:48:4d:b8:04:36:68:3f:53:a4:af:dc:9e:8e:62:22:47:
         08:f1:a2:ef:2c:0d:13:26:c7:ee:a8:64:3b:66:2e:d9:b1:98:
         af:a9:2b:89:c0:2c:d0:d9:cb:a0:07:96:70:5f:3b:61:64:d3:
         c0:6e:09:1e:0e:3b:f0:05:3e:0b:e2:6b:d9:d8:2e:1f:05:f3:
         2b:4b:5b:1a:2c:6b:e8:f1:7a:a2:22:d9:08:10:71:06:04:e7:
         12:d5:6f:b1:3f:9f:63:b5:4c:52:be:dc:43:bd:61:99:2d:e8:
         3e:fb:63:d0:9e:ed:b4:55:80:b0:31:0a:e4:43:d5:25:03:ed:
         5e:61:03:63:2b:ce:28:68:f4:47:c6:cc:b5:cf:30:60:5a:84:
         e7:bd:3c:39:a3:e4:fc:a2:72:35:c1:ce:0e:14:e5:34:f1:2f:
         1e:69:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org