Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa
File:                     323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa (raw, json)
Hash identifier:          kpej1aJSjdjCdNejE5kxnNyCpjUjtNI4kfnvKt78H5Q=
Subject key identifier:   E3:AE:D0:77:F2:19:96:55:B9:CA:59:F4:C5:DD:56:97:FC:25:E2:E5
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       50C5022865CF2AB84FE8A972DAF377177AA0BE9F
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa
Signing time:             Thu 04 Apr 2024 08:26:53 +0000
ROA not before:           Thu 04 Apr 2024 08:21:53 +0000
ROA not after:            Thu 03 Apr 2025 08:26:53 +0000
asID:                     53086
IP address blocks:        2804:4fe4:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c5:02:28:65:cf:2a:b8:4f:e8:a9:72:da:f3:77:17:7a:a0:be:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Apr  4 08:21:53 2024 GMT
            Not After : Apr  3 08:26:53 2025 GMT
        Subject: CN=E3AED077F2199655B9CA59F4C5DD5697FC25E2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:77:fb:61:e1:17:e0:a1:43:ab:b8:54:b2:
                    9f:f1:27:3d:2b:fe:53:3f:c7:43:75:7c:2c:35:dd:
                    0f:37:fc:2f:f3:8a:de:41:22:9a:5a:5c:cf:d7:cb:
                    d8:73:3e:58:df:e9:73:76:b5:fe:29:81:a3:9c:4a:
                    1c:92:26:2f:34:48:18:79:b1:4c:08:5f:b2:02:21:
                    70:69:57:a3:ea:6f:6f:18:c3:d9:68:c0:d7:34:1c:
                    9e:47:b6:f0:c6:16:2a:17:10:e7:d3:37:7c:03:52:
                    9c:f5:4a:70:37:bc:70:59:48:49:da:0f:80:ce:ef:
                    1c:d3:d4:dc:48:97:bf:4d:ba:e4:20:64:6d:ce:f4:
                    71:d1:f6:de:54:c0:d6:c0:36:b2:d3:c1:a8:d5:21:
                    2d:d2:66:4d:f4:d8:34:28:6a:38:c8:44:7d:cb:45:
                    0e:e5:40:c8:b1:96:d3:28:6e:7c:b7:79:87:a1:09:
                    62:93:a9:0c:56:fd:6f:56:e6:78:bf:f3:e8:29:6f:
                    31:85:fc:89:4e:8c:3c:1a:7c:a5:3d:cb:0c:2f:d0:
                    f5:c0:7f:df:3e:46:ef:b9:72:1c:9f:ad:38:a8:fb:
                    42:dc:ac:2c:99:9f:7e:37:f9:82:e7:25:a6:d2:78:
                    a4:ae:1f:49:21:18:84:c8:ba:70:67:ef:cf:eb:57:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AE:D0:77:F2:19:96:55:B9:CA:59:F4:C5:DD:56:97:FC:25:E2:E5
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:a8:f7:83:cc:28:df:fc:b7:1f:b7:0d:30:a1:10:de:d4:
         d1:07:71:52:b1:17:10:8c:d0:67:50:3f:31:eb:37:0c:b3:bf:
         53:fa:d0:94:39:07:5d:2d:70:71:6c:bf:d8:fc:36:78:75:a8:
         e7:f9:dd:fa:1c:0a:73:fb:49:62:6f:5b:4b:45:92:06:60:67:
         12:77:40:4f:3d:d3:72:43:73:f1:f7:4d:27:50:9d:9e:0f:8d:
         79:5e:8a:e0:34:d1:dd:41:b8:1c:4f:ae:d1:16:f4:1f:13:38:
         22:3c:33:44:b4:cd:0e:cb:0f:63:e0:f1:f6:a0:48:01:06:af:
         55:62:58:39:4c:9b:ab:e8:a8:02:58:24:68:fb:74:3c:9c:f2:
         1a:7f:23:29:3d:06:9c:2d:1b:ed:49:67:74:5b:48:b5:7c:c8:
         58:bc:47:51:b1:55:0c:90:3d:18:44:bf:4a:51:3d:c7:1a:b6:
         86:02:ac:8c:f4:9f:b2:99:f6:cb:b3:b9:5c:58:e6:f7:8a:1b:
         36:3a:61:9b:a8:30:38:8e:8c:e2:e5:1d:a3:14:0b:f8:be:e7:
         dc:47:73:dd:57:ca:f1:20:cc:b2:8b:e8:0b:66:c1:88:f4:2d:
         3f:82:f8:12:48:24:f6:31:68:fc:22:02:d0:21:c4:3b:bc:aa:
         c5:75:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org