Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/323830343a3132383a3a2f33322d313238203d3e203238363334.roa
File:                     323830343a3132383a3a2f33322d313238203d3e203238363334.roa (raw, json)
Hash identifier:          Dnkpq1KMFash/rdc4eNGgAEjVqJZR0NnsLOhSpzQEo4=
Subject key identifier:   11:46:7C:52:A8:D5:8E:23:CB:F5:78:15:88:DB:C1:62:2D:B7:4C:53
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       218E63535A52113831249A5D506587E1455284A6
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/323830343a3132383a3a2f33322d313238203d3e203238363334.roa
Signing time:             Thu 04 Apr 2024 08:02:13 +0000
ROA not before:           Thu 04 Apr 2024 07:57:13 +0000
ROA not after:            Thu 03 Apr 2025 08:02:13 +0000
asID:                     28634
IP address blocks:        2804:128::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:63:53:5a:52:11:38:31:24:9a:5d:50:65:87:e1:45:52:84:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Apr  4 07:57:13 2024 GMT
            Not After : Apr  3 08:02:13 2025 GMT
        Subject: CN=11467C52A8D58E23CBF5781588DBC1622DB74C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:0b:cb:a6:30:7f:72:6f:b5:c5:48:5d:87:
                    2e:00:34:77:11:ff:60:e2:04:5f:bf:bc:8b:78:1c:
                    c4:7c:03:db:0c:e4:a6:24:5b:cd:69:09:34:7f:cd:
                    47:f6:d1:c4:f4:0b:a3:bb:f3:f3:7c:47:d9:75:61:
                    7b:b3:0e:d5:c5:54:be:1e:fa:84:4b:e9:89:e0:4d:
                    6f:f9:15:b0:50:66:4b:82:66:6c:6a:bf:d7:1b:f4:
                    bc:02:6c:02:9a:96:57:87:98:56:49:e7:56:fa:94:
                    87:64:48:b0:29:11:f9:c3:10:8b:ed:98:ac:2c:8a:
                    dc:c3:fc:da:fc:bb:59:b1:ce:fb:d4:33:68:79:ac:
                    37:1d:7b:bb:af:d5:d6:db:fc:7a:8b:39:9c:d5:90:
                    11:8f:62:c0:81:4b:1b:d1:85:61:12:4c:8c:6e:81:
                    eb:72:88:c1:47:2c:30:9e:f7:22:44:58:0b:b8:3e:
                    36:6f:e9:70:87:33:69:b8:d4:3e:3a:3e:15:9f:1b:
                    2c:5d:80:10:de:e2:36:51:66:5a:29:4f:2b:67:f4:
                    ea:d0:eb:5f:3b:2a:e5:26:e6:65:08:f1:29:30:64:
                    40:bf:71:12:e3:41:2f:61:13:45:42:af:20:cd:58:
                    f8:9c:2d:e1:61:8a:8e:b4:d1:e9:6e:07:93:7b:e0:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:46:7C:52:A8:D5:8E:23:CB:F5:78:15:88:DB:C1:62:2D:B7:4C:53
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/323830343a3132383a3a2f33322d313238203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:128::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:69:38:4d:5a:17:a8:67:29:ec:5b:07:74:4d:f1:66:3d:68:
         c1:c0:a2:cc:21:ee:63:33:84:62:99:c0:f2:87:69:b4:5e:4e:
         68:7d:4f:88:ed:e4:43:6d:04:15:fa:e4:18:e4:e9:49:b3:aa:
         7d:72:2d:aa:b0:fd:2e:8f:db:53:5f:86:04:03:67:bf:8e:15:
         6c:54:ff:e5:2b:d8:cb:2e:cd:8b:06:94:94:99:73:ea:1e:f4:
         00:6c:9c:e2:21:32:ec:90:33:61:ec:3c:a8:6b:de:12:77:94:
         5c:20:73:98:1f:be:02:87:ba:ae:8a:2d:8e:4f:8e:fc:01:87:
         f4:35:b5:82:f8:cf:0d:c3:3e:44:81:f0:2f:1b:b6:64:c7:e9:
         2d:4f:77:08:8f:5b:76:c1:da:ca:a6:eb:bd:88:bc:a1:e5:6a:
         67:06:e2:10:41:30:53:71:c5:f7:e3:89:8f:13:f3:f7:c4:db:
         ca:8d:61:52:04:6b:bf:7c:e6:b5:2f:21:a6:a7:4c:00:53:48:
         cc:57:00:44:61:4d:75:46:61:66:0e:46:52:f4:30:63:d5:b1:
         9a:00:e5:73:4c:6b:4a:c4:c7:5c:3e:d6:8e:aa:13:bc:ad:dd:
         0b:68:59:3b:e0:59:86:13:b4:4f:66:cb:84:f6:b3:eb:00:28:
         7d:1a:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org