Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33322d3332203d3e20323636363037.roa
File:                     323830343a336539343a3a2f33322d3332203d3e20323636363037.roa (raw, json)
Hash identifier:          vabOTu1ZL+q0bIJ0oPNr6vk3sRKGhog/waAAiRGa1e0=
Subject key identifier:   AF:88:34:A1:10:FB:F2:82:88:CF:34:B7:0C:DF:9E:68:1A:FA:9D:45
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       03F7B4E2AF075855C9E755B6EABDDC8ED87E6810
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33322d3332203d3e20323636363037.roa
Signing time:             Wed 03 Apr 2024 21:27:05 +0000
ROA not before:           Wed 03 Apr 2024 21:22:05 +0000
ROA not after:            Wed 02 Apr 2025 21:27:05 +0000
asID:                     266607
IP address blocks:        2804:3e94::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl
                          rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f7:b4:e2:af:07:58:55:c9:e7:55:b6:ea:bd:dc:8e:d8:7e:68:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Apr  3 21:22:05 2024 GMT
            Not After : Apr  2 21:27:05 2025 GMT
        Subject: CN=AF8834A110FBF28288CF34B70CDF9E681AFA9D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:0c:44:c0:c2:b5:02:de:a1:e7:f9:27:f1:
                    55:0a:3f:3c:a3:8b:e8:ef:4f:d0:fa:5a:8f:ea:b9:
                    8d:3a:5b:1f:65:ec:6a:a4:7f:f8:39:90:57:84:41:
                    d1:ea:ad:d2:48:2b:5a:7e:45:19:71:bb:1a:7a:ad:
                    1c:1a:4d:7d:47:92:df:14:c9:c4:26:cc:02:ae:3d:
                    1a:a1:28:cb:f8:46:f7:3b:21:6c:db:9e:19:4c:88:
                    d1:c1:77:08:c2:5a:9e:ad:f8:bc:01:16:a9:e7:e7:
                    57:6a:df:c9:b7:65:7f:db:f7:08:c4:24:71:1e:6b:
                    3c:eb:b9:0a:6c:67:eb:81:2c:6c:41:d3:e9:f1:dd:
                    24:2c:1f:b4:18:e5:ae:f0:fd:2c:74:d3:7f:6e:44:
                    a5:e3:03:5a:59:70:30:65:d4:0b:e4:e2:49:55:97:
                    7c:de:41:c9:bc:3f:53:4a:5a:f7:fd:67:dc:f5:64:
                    72:a7:71:3c:98:56:46:d6:d0:74:76:db:fe:5d:a4:
                    e5:05:f9:74:5c:b0:fc:a4:a6:d6:21:27:b0:d4:f2:
                    ed:9e:fe:e2:9a:69:09:45:cd:e6:c6:40:8a:55:46:
                    05:1d:f0:22:25:e3:0f:ab:38:90:90:e5:90:78:ed:
                    74:13:7e:3f:ea:96:3c:95:22:10:70:37:19:c9:dd:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:88:34:A1:10:FB:F2:82:88:CF:34:B7:0C:DF:9E:68:1A:FA:9D:45
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33322d3332203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:a3:25:34:f2:c2:e6:40:80:78:8e:75:29:d3:bc:13:c7:
         7b:b5:15:ed:55:47:a3:28:4a:04:66:a9:3f:c8:e9:4a:74:b8:
         fd:71:29:c5:8e:87:20:b4:b8:0f:7c:51:8a:d1:2d:79:4a:49:
         fd:d4:c0:40:90:f4:67:d3:fd:44:9e:ba:89:5c:4e:3c:ec:3b:
         e3:e5:a1:6e:b2:00:47:2b:03:18:30:cb:83:58:63:1c:91:9b:
         f3:34:fa:d6:0b:19:e4:6a:2a:47:e1:d6:7c:a5:4b:03:4e:6f:
         55:a7:1f:81:80:40:20:84:45:82:f5:ce:c5:8b:7b:ed:38:9a:
         ed:ab:75:64:e9:3c:95:a6:60:d1:4e:cf:43:3d:3e:8e:c5:cc:
         74:cf:ec:00:62:6d:43:3c:b0:e2:3e:36:f9:ab:7f:d9:35:ae:
         5e:25:7c:e5:af:7d:d2:a1:53:87:dd:6d:53:1a:c8:a6:c8:f2:
         3c:27:ea:b4:fc:32:4e:67:1d:f6:71:be:69:5f:29:ff:63:1d:
         86:9e:b9:b4:02:a7:56:30:31:64:12:d2:d3:65:9c:ab:b3:b8:
         58:a0:8c:3d:f3:74:57:a2:77:12:1c:b6:2b:9c:6d:99:d7:e3:
         5e:fb:cb:e4:bd:61:6d:10:64:2b:98:d3:dd:0c:66:ca:3f:4e:
         9e:7f:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:36 2024 by rpki-client on console-fra.rpki-client.org