Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa
File:                     323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (raw, json)
Hash identifier:          uvddEgEkQuNxslkowdvWSEMv1uykiVxw2IlSmBUAeVM=
Subject key identifier:   BC:C4:D7:39:C5:48:E8:F1:26:B3:31:41:4D:71:25:8B:5E:32:FA:E2
Certificate issuer:       /CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Certificate serial:       544AD1BF22EC40929DF10C95F671F4B1547FB462
Authority key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa
Signing time:             Sun 18 Aug 2024 05:06:50 +0000
ROA not before:           Sun 18 Aug 2024 05:01:50 +0000
ROA not after:            Sun 17 Aug 2025 05:06:50 +0000
asID:                     268307
IP address blocks:        2804:4f24:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4a:d1:bf:22:ec:40:92:9d:f1:0c:95:f6:71:f4:b1:54:7f:b4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
        Validity
            Not Before: Aug 18 05:01:50 2024 GMT
            Not After : Aug 17 05:06:50 2025 GMT
        Subject: CN=BCC4D739C548E8F126B331414D71258B5E32FAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:4b:53:ad:e0:62:cc:5c:f2:62:ca:e3:05:
                    73:20:10:ca:bd:21:de:7c:c3:5a:67:ed:12:08:47:
                    6c:33:5d:05:8d:b4:4a:7c:42:16:34:d4:26:ca:fa:
                    72:8e:7e:eb:09:0c:46:79:8f:a9:dc:63:f4:95:3c:
                    93:21:25:50:94:47:e7:aa:db:9b:20:0e:3c:c9:7c:
                    dd:25:85:b1:a6:47:2c:b3:60:52:f3:6e:3e:99:c5:
                    90:14:5c:75:71:cd:da:06:d8:82:03:07:46:46:e9:
                    59:a3:a6:09:24:de:c3:02:03:b7:52:6e:ec:7a:2a:
                    6a:36:62:6d:8f:b1:4f:9c:dd:61:de:e7:8c:54:7c:
                    4f:88:b2:a2:e6:3e:4b:3d:1e:8b:f9:b0:4d:b7:7b:
                    f3:80:3f:68:c2:32:83:e8:af:a3:00:ac:20:f6:78:
                    6d:26:91:66:74:96:5f:ae:89:76:ba:17:75:49:8d:
                    e2:a3:46:5d:c8:42:c8:50:04:c0:a6:95:50:bc:06:
                    2e:9e:96:10:97:84:7a:96:e7:be:33:e9:72:33:7c:
                    7b:df:a2:1a:a8:0a:cc:5a:e0:d7:ac:3a:1d:8f:5d:
                    97:81:20:7d:38:8a:9d:0d:8c:f2:0b:24:ad:bf:e7:
                    6a:4b:7e:ee:80:52:df:0f:71:a0:20:aa:74:fe:42:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:D7:39:C5:48:E8:F1:26:B3:31:41:4D:71:25:8B:5E:32:FA:E2
            X509v3 Authority Key Identifier:
                keyid:43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:24:25:90:4a:78:16:f7:cc:35:3c:5c:97:1a:f6:d4:ff:11:
         d2:d0:69:95:7e:58:05:38:fa:a6:ff:83:6b:5b:81:c4:77:30:
         5e:18:46:95:1b:d5:a5:59:ea:13:18:31:91:a9:c6:28:be:92:
         13:54:91:70:fe:c6:14:f3:bf:71:ec:a2:c6:4c:f5:73:f8:a2:
         8d:e1:d0:88:b2:7e:b4:79:1a:13:7c:25:9d:6a:17:a4:94:78:
         20:5a:a6:97:71:a5:ed:f5:f8:ba:9d:ea:fd:74:a7:b3:31:43:
         d1:60:71:9a:d7:1c:7e:de:1c:c9:dc:fc:07:9b:44:58:20:9d:
         d4:2c:cc:f4:f1:de:ee:6e:9a:0b:c9:e1:cb:d0:95:3d:4c:f3:
         30:fc:8c:6a:e8:fc:38:47:56:e8:52:a8:94:fa:44:f0:9b:a1:
         bd:01:d1:b2:5c:81:a0:f6:44:4c:01:87:4e:b8:08:c1:02:3d:
         be:1a:7e:73:28:eb:f3:ef:55:61:7d:88:69:a3:a2:c3:90:a6:
         10:4d:ba:69:ee:08:b0:30:2a:85:25:8e:0a:ed:f3:ff:f9:fe:
         85:7e:1b:4a:2b:88:09:f4:0a:cc:ce:69:5c:54:1e:a3:fe:71:
         07:40:2f:8a:dd:bf:f4:f2:d8:ec:a3:23:5a:67:45:1c:e3:19:
         4c:30:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:44 2024 by rpki-client on console-fra.rpki-client.org