Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
File:                     323830343a323833383a3a2f33322d3438203d3e20323633393438.roa (raw, json)
Hash identifier:          8Af8jqhHXZpgSwAN4KABO4x36IsmNV1DBd8stIzb+L0=
Subject key identifier:   9E:A3:A6:EF:A1:E4:3A:E3:37:33:8F:90:27:F3:0E:5B:CD:24:40:EB
Certificate issuer:       /CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
Certificate serial:       7518B3A39BBC4A4AF62ED2BD8CF927B1DBEF1DEA
Authority key identifier: BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
Signing time:             Fri 21 Jun 2024 17:48:39 +0000
ROA not before:           Fri 21 Jun 2024 17:43:39 +0000
ROA not after:            Fri 20 Jun 2025 17:48:39 +0000
asID:                     263948
IP address blocks:        2804:2838::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.crl
                          rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:18:b3:a3:9b:bc:4a:4a:f6:2e:d2:bd:8c:f9:27:b1:db:ef:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
        Validity
            Not Before: Jun 21 17:43:39 2024 GMT
            Not After : Jun 20 17:48:39 2025 GMT
        Subject: CN=9EA3A6EFA1E43AE337338F9027F30E5BCD2440EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:eb:a6:a9:25:5f:78:fc:27:9d:56:57:dc:
                    86:52:46:21:93:56:99:89:18:6a:9b:11:65:5e:e9:
                    83:5a:cc:36:51:9e:f5:58:59:2f:6e:17:5d:4a:88:
                    e8:52:9d:1a:c7:c8:49:ff:e3:2d:1a:c3:e3:e5:17:
                    3a:6b:2a:d5:ce:ee:3f:e8:94:9d:04:23:48:fd:38:
                    e7:eb:9c:e9:09:d3:ba:a1:45:0f:b2:af:8f:13:29:
                    c5:be:a0:20:a1:5f:b2:ac:59:08:55:48:1e:0b:cc:
                    0a:da:f9:83:09:77:2e:ae:cd:2b:33:2d:94:e5:c4:
                    26:46:73:9b:45:3a:95:79:a5:ab:89:b0:c9:3e:65:
                    a2:f8:d3:f7:58:5e:70:ea:e5:1a:4c:a0:a1:74:d8:
                    0c:bb:7d:f2:4c:1b:28:40:75:47:44:1a:b9:c2:40:
                    33:bf:8e:ab:05:a8:8a:76:8e:c9:44:ea:80:f7:3f:
                    75:b1:b9:9a:66:2e:ba:33:86:12:c4:05:88:db:ba:
                    42:cb:9a:d4:2d:c5:b8:3e:3e:37:67:c4:98:b6:e1:
                    c2:24:9e:9f:e2:49:a5:bc:55:bd:87:c0:fa:d7:82:
                    3d:98:e5:22:12:49:06:51:c0:2e:ec:54:ca:3a:4e:
                    43:85:dd:c5:3a:ba:0d:c4:84:4b:5b:7c:1a:c8:2b:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A3:A6:EF:A1:E4:3A:E3:37:33:8F:90:27:F3:0E:5B:CD:24:40:EB
            X509v3 Authority Key Identifier:
                keyid:BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2838::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:35:36:81:b0:29:df:02:53:e7:dc:01:63:c8:87:5e:5f:12:
         ba:f4:62:e2:ae:6b:e1:e2:59:a5:7c:26:06:14:e8:a3:4d:43:
         d1:57:70:c1:39:69:53:36:de:42:56:aa:d7:72:76:fc:53:e6:
         4f:3b:99:52:44:fc:82:1a:e7:a0:0e:9a:61:74:ae:13:0f:45:
         9a:7b:6e:8c:98:42:b0:ad:c6:37:55:b1:fc:77:aa:06:d8:d6:
         3a:8c:e8:49:e4:6a:a9:f2:2a:c9:b7:8f:a3:87:60:ca:72:de:
         d2:19:7b:3f:18:1d:13:7b:40:c9:2a:b2:70:e1:51:fe:81:d3:
         19:ff:93:a9:76:ac:53:44:d8:f4:32:6a:e9:05:aa:16:c9:f4:
         9f:cc:0f:c9:50:6f:02:14:54:f8:40:db:2b:7c:20:1e:8a:cc:
         7d:98:1e:ec:2b:70:f6:f9:e3:2e:11:32:25:70:83:6a:db:a9:
         1f:ee:65:15:50:b0:e7:c5:80:f4:ac:1b:39:1c:82:c9:e2:ea:
         fd:b9:27:d1:2c:a2:7d:71:58:6c:6c:36:25:e3:05:99:6d:bd:
         e7:81:08:b0:d5:6f:ad:72:6d:e8:1a:84:d6:ff:6e:ce:56:e1:
         0d:ce:46:74:5b:8d:dd:dc:e0:43:b4:a0:9a:9e:a9:a3:e6:e9:
         cc:8e:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:28:29 2024 by rpki-client on console-ams.rpki-client.org