Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa
File:                     323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa (raw, json)
Hash identifier:          GixUnwosHt6XsHJQuceC5K5yZHskqJPnUaG8eaX5Gdg=
Subject key identifier:   C3:A1:E8:C5:41:90:00:6B:A6:F0:D2:B5:9C:94:6D:B0:BC:17:38:62
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       4AFD8C77E05A03942B41BEDEA460C1BD348A9370
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa
Signing time:             Thu 25 Jul 2024 17:48:25 +0000
ROA not before:           Thu 25 Jul 2024 17:43:25 +0000
ROA not after:            Thu 24 Jul 2025 17:48:25 +0000
asID:                     266651
IP address blocks:        2804:3f4c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fd:8c:77:e0:5a:03:94:2b:41:be:de:a4:60:c1:bd:34:8a:93:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jul 25 17:43:25 2024 GMT
            Not After : Jul 24 17:48:25 2025 GMT
        Subject: CN=C3A1E8C54190006BA6F0D2B59C946DB0BC173862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:a9:14:52:99:33:5c:2d:a8:de:51:46:dd:
                    af:3f:24:b7:1d:6b:bf:1a:49:c7:c1:92:ac:ad:d6:
                    fa:93:c1:ee:c1:6f:da:b7:d7:39:30:fa:05:77:59:
                    b1:1a:64:7e:b9:41:64:6a:9a:48:80:de:34:61:cd:
                    17:8b:b3:1c:c5:07:08:a6:df:04:1c:63:48:0f:ce:
                    b7:8a:db:cc:f2:0d:d8:d1:11:e8:e0:21:4e:8c:08:
                    cf:cf:e5:4f:a4:c1:92:f6:96:26:86:d4:af:3c:43:
                    a2:ef:cf:26:e0:9e:97:6f:cd:b3:8c:36:7b:d4:d7:
                    da:f2:2e:d5:cb:9b:b7:99:94:3d:20:e9:09:44:80:
                    13:1a:70:d6:0a:6b:6c:46:de:df:89:3f:75:a9:4b:
                    b4:5c:92:15:5b:08:47:fc:50:da:8b:51:f4:77:84:
                    0a:13:70:f6:10:de:7f:8b:fa:19:3e:ef:2f:56:18:
                    10:62:41:f3:65:99:3a:c3:60:4f:79:4e:ce:27:67:
                    16:d9:ea:7d:0d:58:12:85:34:fa:c2:e1:52:8c:0f:
                    61:a3:67:d8:b6:72:f1:0f:9f:d8:0e:f9:fd:4e:f3:
                    c4:78:93:e4:8d:62:ee:34:52:1a:c4:93:40:d5:92:
                    fc:7f:37:b0:43:2f:c2:25:7c:a1:af:9b:47:17:be:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A1:E8:C5:41:90:00:6B:A6:F0:D2:B5:9C:94:6D:B0:BC:17:38:62
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:56:38:5a:f0:5a:d4:7d:b6:e8:51:6c:dc:26:8a:6e:3d:13:
         0c:07:1a:2a:c0:0b:b7:ca:f6:a0:bc:ca:50:78:44:2d:e9:57:
         c2:fc:c6:7b:1b:4e:f4:1e:f7:ae:d4:f9:3b:d2:7e:83:12:47:
         06:da:8e:d4:19:96:96:da:e3:21:1f:44:4f:86:47:9c:6d:3b:
         0a:0f:f7:67:48:e3:88:ff:f2:f6:0c:af:40:4f:cd:23:cf:3f:
         89:dc:6c:50:32:e6:be:18:5a:66:42:5c:1f:b5:e4:85:b9:08:
         fb:7d:8a:7a:f3:71:86:84:e9:af:2c:39:55:b0:2b:b2:05:e3:
         c5:46:92:2c:c2:5a:fc:44:50:f6:ec:96:26:62:5e:af:23:b3:
         9f:82:5d:e5:1b:ce:0f:7b:e2:b6:ee:cf:51:b9:b7:e4:06:6c:
         c9:c3:75:ce:d0:75:92:51:ef:63:1a:5d:fe:b0:c4:38:ee:a5:
         73:76:dc:29:bf:58:2a:8b:03:f8:de:46:26:7f:be:40:dd:a4:
         78:c9:35:a4:b5:fe:8b:de:2f:1f:df:8a:01:20:01:57:72:23:
         94:1c:06:1a:57:26:b5:69:2a:6a:1c:89:8d:69:98:49:6f:5e:
         76:d2:95:a9:c1:fe:ae:6e:cc:b9:fa:09:b4:3e:2f:98:c5:c0:
         58:05:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org