Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/323830343a313262303a3a2f33322d3332203d3e20323633343932.roa
File:                     323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (raw, json)
Hash identifier:          dqbsEWye1KX52bwkiYiWD0+ifAaQ54+TWOT8OQmi22U=
Subject key identifier:   95:DF:6E:99:6F:AF:25:61:98:6D:CA:39:80:CF:9B:69:F4:E9:12:49
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       77B27851940E0924901495DBE0D2E237FFA88B75
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/323830343a313262303a3a2f33322d3332203d3e20323633343932.roa
Signing time:             Wed 03 Apr 2024 18:32:17 +0000
ROA not before:           Wed 03 Apr 2024 18:27:17 +0000
ROA not after:            Wed 02 Apr 2025 18:32:17 +0000
asID:                     263492
IP address blocks:        2804:12b0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b2:78:51:94:0e:09:24:90:14:95:db:e0:d2:e2:37:ff:a8:8b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Apr  3 18:27:17 2024 GMT
            Not After : Apr  2 18:32:17 2025 GMT
        Subject: CN=95DF6E996FAF2561986DCA3980CF9B69F4E91249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:ce:ab:fc:c2:ec:b5:08:20:25:56:b5:04:
                    06:5e:dd:ed:4a:db:81:fa:5d:1e:1b:90:d7:39:49:
                    55:ca:67:c6:8d:b4:13:a8:6b:5f:21:e2:51:72:d3:
                    6c:21:ca:6d:ff:28:77:17:13:f5:3d:8b:36:a3:7a:
                    cd:a7:c4:e5:d7:dd:24:37:1d:9a:ba:5c:40:fd:1d:
                    5d:7a:a5:33:c3:18:71:77:ec:d9:21:d6:71:e3:55:
                    bf:7a:da:b4:c8:f4:f2:72:97:b2:27:e4:79:96:a8:
                    9d:92:e3:ab:59:b6:44:67:93:c1:92:13:2e:98:c7:
                    f0:4d:05:04:b5:5f:48:f9:a0:33:48:b5:f7:58:64:
                    08:0f:e0:63:cb:97:6c:db:b2:63:06:d2:20:52:d4:
                    58:6d:4d:5a:bc:37:b6:9c:18:71:28:7b:94:33:ba:
                    a3:44:f2:ed:db:22:05:c8:c6:27:13:8d:a1:d1:ec:
                    94:e5:c8:67:ae:08:45:06:6f:b2:af:a6:ec:c3:c1:
                    0e:8a:4b:8a:55:45:75:4f:9f:f1:5e:6f:24:98:b8:
                    a3:a8:81:be:cc:7d:d8:36:af:ff:41:13:f3:15:af:
                    1c:fd:1c:f9:4d:b7:5e:09:e5:a6:24:13:f7:29:79:
                    ab:04:bf:02:e4:79:61:38:35:a9:f8:e8:da:f2:97:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DF:6E:99:6F:AF:25:61:98:6D:CA:39:80:CF:9B:69:F4:E9:12:49
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/323830343a313262303a3a2f33322d3332203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:27:af:4a:3f:f0:d5:05:48:f3:38:d7:6c:dc:59:1d:16:
         9b:76:bd:b3:45:6a:3f:29:a5:cb:19:6d:a3:fd:5f:46:a5:cf:
         76:31:c9:a8:34:ca:bf:44:d8:5a:fc:6b:49:29:51:7a:c7:fe:
         3a:0e:39:dc:a7:f2:ef:ff:7a:c3:fc:4c:38:26:42:9a:a6:a6:
         32:82:2e:63:56:f5:5e:93:49:32:3c:b3:cb:7f:8b:12:74:37:
         de:9b:41:5c:54:d2:40:e0:44:ec:fd:89:2e:4c:5d:9e:c2:e3:
         90:ee:6f:3e:f1:1f:63:ee:79:8d:a6:b8:a0:93:f8:04:9a:81:
         e8:66:73:29:97:3a:c0:2d:85:47:03:9b:3b:ce:b8:d0:71:ea:
         55:d1:04:7d:2d:e0:f3:70:5c:7b:11:f5:a6:eb:0b:f3:30:56:
         ee:31:27:a3:af:c1:b5:73:bc:26:1f:54:ea:3d:22:b5:54:c5:
         60:d7:30:39:dd:d5:08:b6:9d:93:c2:cc:75:60:ed:5a:35:9d:
         bf:97:38:d4:ca:21:46:18:f3:8a:a1:6f:13:3a:fd:50:d1:86:
         81:db:6b:ca:05:76:6d:fd:8a:69:29:db:7e:03:c8:4a:07:7f:
         fd:47:fd:33:ff:c0:c2:ab:4b:8a:64:79:91:5b:c6:1d:76:3f:
         0f:79:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:41 2024 by rpki-client on console-ams.rpki-client.org