Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d313238203d3e20323639333437.roa
File:                     323830343a363333383a3a2f33322d313238203d3e20323639333437.roa (raw, json)
Hash identifier:          LQBUAlcEWIhW33+f7CU8VGQj+bGaiAmnqFKEjnnmlFQ=
Subject key identifier:   44:93:63:51:CC:28:80:A8:D6:89:95:82:A7:A6:02:7E:5B:34:08:D7
Certificate issuer:       /CN=37EB8EE765648941F5940F0A601E6B1CA23382F4
Certificate serial:       426B1B0CAC82BE9B9FC4E43CD2B9F48B2C22C9F4
Authority key identifier: 37:EB:8E:E7:65:64:89:41:F5:94:0F:0A:60:1E:6B:1C:A2:33:82:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EB8EE765648941F5940F0A601E6B1CA23382F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d313238203d3e20323639333437.roa
Signing time:             Sat 09 Nov 2024 23:30:20 +0000
ROA not before:           Sat 09 Nov 2024 23:25:20 +0000
ROA not after:            Sat 08 Nov 2025 23:30:20 +0000
asID:                     269347
IP address blocks:        2804:6338::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.crl
                          rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EB8EE765648941F5940F0A601E6B1CA23382F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6b:1b:0c:ac:82:be:9b:9f:c4:e4:3c:d2:b9:f4:8b:2c:22:c9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EB8EE765648941F5940F0A601E6B1CA23382F4
        Validity
            Not Before: Nov  9 23:25:20 2024 GMT
            Not After : Nov  8 23:30:20 2025 GMT
        Subject: CN=44936351CC2880A8D6899582A7A6027E5B3408D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:b3:ca:a6:c4:51:b0:aa:28:51:1f:98:75:
                    05:05:3d:d6:75:f4:67:c5:54:0d:48:46:6b:7a:4a:
                    91:7b:7f:66:55:63:97:e4:64:68:07:c9:46:66:5d:
                    2a:66:fb:61:32:57:03:9a:c9:48:4b:8f:cc:0a:34:
                    43:f5:cb:e5:ec:bf:7b:75:a1:ac:87:14:ab:9d:50:
                    b3:ca:f1:18:77:3a:93:02:ff:02:67:44:20:15:ab:
                    7b:24:08:ec:34:fd:19:ee:6f:e7:51:03:3c:94:1b:
                    b2:1a:c7:fc:4b:c2:03:cd:ac:60:ce:ec:aa:d6:46:
                    3f:d6:77:c4:9c:e5:7b:78:d4:8b:b3:3f:92:71:88:
                    da:91:55:a9:af:32:69:7b:ed:18:39:2d:1c:6a:2f:
                    2d:7d:31:c2:3c:d7:4c:d5:b1:83:e7:74:b7:e4:92:
                    14:3b:a1:ed:59:ad:9b:e5:7b:4b:16:97:5f:c5:b1:
                    9b:f9:f0:57:e9:f2:32:c5:ce:b4:fd:8b:0a:da:29:
                    d0:f9:10:2f:1f:15:9d:5d:7e:64:08:50:13:35:1b:
                    50:aa:99:8c:cf:9b:63:cd:27:59:c4:95:21:fb:63:
                    83:d0:c6:b0:77:ac:08:46:6f:05:e1:9d:78:6f:6f:
                    54:af:44:cc:5f:5b:d9:3b:b6:69:e4:3d:cf:64:66:
                    06:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:93:63:51:CC:28:80:A8:D6:89:95:82:A7:A6:02:7E:5B:34:08:D7
            X509v3 Authority Key Identifier:
                keyid:37:EB:8E:E7:65:64:89:41:F5:94:0F:0A:60:1E:6B:1C:A2:33:82:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EB8EE765648941F5940F0A601E6B1CA23382F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d313238203d3e20323639333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6338::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:8b:42:48:56:d4:e1:8f:cb:78:71:12:3e:37:0c:b8:db:
         d0:33:f5:9d:ef:18:41:f3:f5:d8:44:9e:e1:b1:28:09:3f:52:
         05:5c:95:03:86:2e:b7:96:22:6e:f0:b2:a0:57:19:44:81:0f:
         1e:73:47:22:ec:a8:07:84:15:23:b0:e6:0c:bc:d6:90:96:23:
         8a:20:8f:2a:18:fb:ea:b3:e1:3c:d6:b8:c4:46:2d:2b:c6:06:
         6f:5d:25:e7:a5:5b:75:7e:0e:16:9d:9b:17:19:05:6d:00:d0:
         16:61:64:a0:54:90:a4:99:ad:d5:3b:2c:d8:eb:22:85:67:d6:
         4d:1b:73:a7:9e:7a:ee:98:8e:a6:26:a8:4c:cd:a2:e1:44:55:
         99:0b:db:ac:80:3d:27:8e:f6:23:75:96:ea:63:23:32:7e:53:
         38:77:2f:f0:66:a5:88:45:97:5d:c0:99:5b:c9:dd:6e:13:93:
         00:cf:ac:b6:d7:9e:c0:73:eb:cf:7a:b7:49:81:4a:06:04:14:
         69:df:70:fc:0d:c0:c9:41:42:67:2a:bd:4b:f1:fa:5f:5b:f6:
         0d:6c:71:ad:17:f5:21:3b:5c:d1:54:98:22:7d:74:52:b0:3f:
         29:b8:27:17:eb:19:a5:8e:a6:b4:33:20:fc:53:70:0a:e5:53:
         a6:e2:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:25 2024 by rpki-client on console-fra.rpki-client.org