Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa
File:                     323830343a363366303a3a2f33322d3438203d3e20323639333933.roa (raw, json)
Hash identifier:          3TCsm/ojU+ZafvJS06UMCP3QjpXlTYbMsph28aztyoM=
Subject key identifier:   40:E1:0C:1B:98:4B:64:BD:75:74:18:51:FE:28:BD:C8:4C:4A:E0:37
Certificate issuer:       /CN=E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0
Certificate serial:       1F1C66F74E7A3A533B175E8BF4E76C34F068AB04
Authority key identifier: E7:3B:2E:95:58:99:0A:AF:0B:7C:79:48:6A:B6:D0:CD:62:57:D0:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa
Signing time:             Sat 02 Nov 2024 00:21:40 +0000
ROA not before:           Sat 02 Nov 2024 00:16:40 +0000
ROA not after:            Sat 01 Nov 2025 00:21:40 +0000
asID:                     269393
IP address blocks:        2804:63f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.crl
                          rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1c:66:f7:4e:7a:3a:53:3b:17:5e:8b:f4:e7:6c:34:f0:68:ab:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0
        Validity
            Not Before: Nov  2 00:16:40 2024 GMT
            Not After : Nov  1 00:21:40 2025 GMT
        Subject: CN=40E10C1B984B64BD75741851FE28BDC84C4AE037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:84:39:aa:9d:e7:a9:3c:f0:03:ae:11:60:
                    28:11:cf:4f:93:b3:a0:d0:c8:bf:1c:ca:15:92:d6:
                    14:02:2f:e5:2b:91:4d:23:f1:6a:11:6c:65:87:f9:
                    48:b4:f0:26:e8:b6:4a:9e:07:04:c0:51:2d:05:8c:
                    3f:d7:36:32:64:e4:ec:6e:d3:ac:e8:96:92:9a:43:
                    1f:de:0a:a9:07:0e:00:81:30:8d:2b:87:b9:46:73:
                    9d:4b:82:2e:66:1b:09:51:2c:62:40:eb:42:9b:3e:
                    21:03:4e:b7:77:39:e2:13:bf:9c:9d:2c:53:2e:06:
                    b9:f3:cc:33:e8:1c:90:8a:ba:fc:af:f4:25:60:45:
                    c8:64:07:fe:d0:f4:c4:67:23:80:f2:a6:e6:54:f3:
                    a2:64:bf:75:29:8d:5d:45:14:62:11:eb:ef:0e:f6:
                    69:be:a8:24:a3:04:ec:99:2c:82:03:31:74:39:16:
                    5f:00:a0:90:6c:64:fe:27:35:99:f2:a1:20:72:ee:
                    9c:9e:9a:41:0b:05:bd:89:eb:b0:76:da:3e:dc:45:
                    86:3f:2e:4d:cf:b9:1c:18:82:3b:3e:c4:a3:93:80:
                    8e:38:2a:f2:5d:09:fb:c9:47:44:60:7f:bb:0f:95:
                    4a:53:43:94:93:ee:ff:db:29:16:cc:bf:0c:a6:26:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E1:0C:1B:98:4B:64:BD:75:74:18:51:FE:28:BD:C8:4C:4A:E0:37
            X509v3 Authority Key Identifier:
                keyid:E7:3B:2E:95:58:99:0A:AF:0B:7C:79:48:6A:B6:D0:CD:62:57:D0:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:7a:6c:89:d0:17:66:0e:47:75:48:3b:03:c1:9d:34:dd:
         d5:66:c3:9a:4f:3f:46:fd:92:d6:03:d5:61:03:22:3b:2a:f6:
         68:d8:0b:3d:c2:96:76:d4:8a:17:6e:1f:13:9d:f5:48:45:43:
         fa:24:7a:2b:be:3c:e5:91:79:17:fa:78:68:1a:2f:84:a4:a1:
         eb:fc:18:97:c5:ec:3c:55:a4:1d:dc:2e:78:b8:53:2a:25:73:
         a3:8f:40:3b:cb:f9:6c:de:7e:42:ff:e3:59:e4:7e:e9:c8:94:
         13:0e:a7:15:0f:c8:80:2f:a3:75:20:bf:fc:58:c9:09:f8:76:
         94:be:f9:7a:16:9c:35:25:9d:60:60:3e:61:c2:7d:4a:36:ad:
         0e:85:df:68:4a:d2:c6:fc:d3:a5:a3:79:69:ff:1d:8e:98:f4:
         8d:85:fa:0f:a2:c3:a9:59:0b:f4:2b:9d:73:68:ce:96:41:da:
         d4:d9:cd:02:4c:cc:19:4a:19:95:92:10:a5:93:3b:4e:eb:61:
         f5:13:7f:d9:da:e6:bd:b1:58:48:19:32:e8:a7:a0:c4:14:96:
         66:21:c1:41:c7:6e:7f:56:49:59:fa:05:cd:11:b8:c0:94:c8:
         e7:8a:d2:46:5a:98:cc:36:c9:78:0d:c0:99:44:76:48:17:13:
         1f:42:59:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:25 2024 by rpki-client on console-fra.rpki-client.org