Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa
File:                     323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (raw, json)
Hash identifier:          bVcD2GBLWYSf4m7CCk+8eD8+4EZOjji0KN46NPjnLXU=
Subject key identifier:   31:4F:4E:B4:78:AB:64:03:9D:83:DF:1A:67:8A:39:39:83:13:72:EF
Certificate issuer:       /CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Certificate serial:       114CE10D010F519E82DF535C56FDCD9687BA20F3
Authority key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa
Signing time:             Wed 04 Sep 2024 19:40:43 +0000
ROA not before:           Wed 04 Sep 2024 19:35:43 +0000
ROA not after:            Wed 03 Sep 2025 19:40:43 +0000
asID:                     268307
IP address blocks:        2804:4f24::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4c:e1:0d:01:0f:51:9e:82:df:53:5c:56:fd:cd:96:87:ba:20:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
        Validity
            Not Before: Sep  4 19:35:43 2024 GMT
            Not After : Sep  3 19:40:43 2025 GMT
        Subject: CN=314F4EB478AB64039D83DF1A678A3939831372EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:83:2a:3f:48:f0:64:25:80:03:e6:22:06:
                    c1:fe:1a:c8:68:7b:ae:c0:d0:c6:fc:be:9c:51:fc:
                    df:e4:f9:78:bf:cb:9e:d5:29:b9:86:3c:80:d9:ee:
                    4f:10:c2:55:b8:a7:75:1f:35:58:6a:c0:2d:c8:b0:
                    26:60:cd:58:4a:2d:0f:61:2e:bb:1f:df:72:33:63:
                    63:cb:2d:3c:50:dd:d7:69:99:c9:52:24:cf:69:8b:
                    18:fd:74:f5:87:da:5f:ef:d6:ab:85:c4:da:8b:2a:
                    71:f7:1e:fe:4f:f3:b4:8b:d1:54:f7:91:43:d1:bf:
                    fe:fc:f5:04:f1:fd:2a:d1:7e:f7:bd:dc:1b:64:05:
                    62:67:4f:ad:ca:9d:5c:37:87:77:c7:69:6f:2c:d4:
                    d7:ef:ef:b6:16:90:a0:d5:8e:06:ab:56:e8:ab:b5:
                    f6:69:31:27:71:cb:25:e3:e0:99:2e:9c:ee:b3:0c:
                    96:d8:a4:f1:b0:7b:87:75:b7:ab:ae:a1:e9:ad:19:
                    c5:4b:67:14:25:37:6f:57:0e:7d:56:94:3b:0b:ac:
                    c4:1d:d4:63:b6:20:73:ec:42:36:11:7e:5a:ec:fa:
                    c4:d4:dc:46:1b:d7:f3:f6:26:f4:bd:9f:70:23:5d:
                    e5:04:1a:98:ff:25:cc:2c:24:6d:95:8c:45:45:7c:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4F:4E:B4:78:AB:64:03:9D:83:DF:1A:67:8A:39:39:83:13:72:EF
            X509v3 Authority Key Identifier:
                keyid:43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:5e:ce:12:e9:1c:5d:f3:aa:dc:da:ed:c7:22:d7:f3:cc:
         26:6e:ac:a8:fc:bd:4c:d5:b6:b2:74:32:b2:1a:cf:1f:b1:c2:
         c2:e7:06:54:88:f6:f1:9a:5f:a9:fb:5a:f6:c8:42:9a:2e:47:
         46:b5:6e:12:d5:f5:19:58:33:c4:85:ff:84:83:01:14:50:ab:
         9a:80:35:b6:bd:7d:da:26:d7:ba:7f:da:22:21:9a:a4:99:b9:
         c5:ef:10:24:01:9c:5c:fa:dc:4c:8a:37:c9:f5:dd:93:18:6e:
         ce:64:44:d5:e1:b0:8a:c3:5f:f2:a2:fb:ad:e2:0b:ed:68:e9:
         39:a5:da:f5:93:1d:62:90:98:90:bf:bf:47:63:ad:28:57:a0:
         6b:76:6d:94:f6:3d:89:8a:2e:8f:c9:79:95:eb:3a:44:84:22:
         b3:25:3e:62:4c:a9:2d:bd:f9:23:f1:10:76:fd:af:c5:5c:5d:
         7e:9f:87:76:ce:a3:fc:34:45:03:57:bb:9e:7b:7c:16:b3:42:
         97:04:ed:24:86:00:8c:a8:6f:37:44:67:7b:1e:12:0f:0d:ff:
         6d:2a:58:68:80:59:d6:3f:fb:9d:fb:de:19:79:d4:33:d1:a8:
         36:3b:d5:81:1a:af:01:1b:b9:79:05:c4:57:44:18:4c:92:e8:
         0e:ce:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org