Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a3a2f33342d3334203d3e20323731343431.roa
File:                     323830343a376239343a3a2f33342d3334203d3e20323731343431.roa (raw, json)
Hash identifier:          r8zik2KYid2irtqvBVQW/eIflTeCtdU9CT4l6WjNgM8=
Subject key identifier:   AF:F1:D0:02:F7:04:38:90:8B:C0:31:04:09:9C:AB:12:10:F8:6D:48
Certificate issuer:       /CN=03D348CD504673CC24A6139BE73024EECBC0A420
Certificate serial:       011EC2B0386F07EFB9023F6CD3A82BBD04028FC6
Authority key identifier: 03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a3a2f33342d3334203d3e20323731343431.roa
Signing time:             Thu 04 Apr 2024 13:41:59 +0000
ROA not before:           Thu 04 Apr 2024 13:36:59 +0000
ROA not after:            Thu 03 Apr 2025 13:41:59 +0000
asID:                     271441
IP address blocks:        2804:7b94::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.crl
                          rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1e:c2:b0:38:6f:07:ef:b9:02:3f:6c:d3:a8:2b:bd:04:02:8f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D348CD504673CC24A6139BE73024EECBC0A420
        Validity
            Not Before: Apr  4 13:36:59 2024 GMT
            Not After : Apr  3 13:41:59 2025 GMT
        Subject: CN=AFF1D002F70438908BC03104099CAB1210F86D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:51:4b:e8:32:51:8d:35:85:8a:89:c0:91:
                    91:c3:08:c4:a1:69:5d:61:b6:68:58:53:dd:52:92:
                    61:47:94:2e:b4:b9:01:7a:8c:41:3c:48:b1:4d:81:
                    ca:d9:84:b4:04:ec:79:5a:79:07:e4:1e:03:48:b7:
                    c1:22:0b:5d:26:f1:ea:ef:0d:09:af:03:cd:4f:c2:
                    03:b8:77:4b:eb:63:b7:a4:14:53:c4:e5:43:d5:8c:
                    1d:33:56:23:8a:d6:5a:14:9d:b8:b5:96:82:49:de:
                    b1:40:cc:02:17:5c:fa:97:83:81:62:56:80:87:fc:
                    28:43:a5:a9:1c:5c:c4:5d:a3:ed:e3:0b:7c:a6:d6:
                    fd:07:ce:64:37:5c:b5:7f:ef:fd:e3:b5:93:58:b8:
                    4e:ca:8e:0d:21:bd:4c:74:bd:e8:97:8e:45:78:e3:
                    fc:1b:03:68:3f:72:13:8f:72:a4:bc:1c:7d:b9:c4:
                    f4:b9:5e:d6:d0:bf:3f:82:f7:69:0e:2f:b6:fe:26:
                    ba:cd:5d:f5:2b:50:5a:81:4f:e7:ae:93:b3:e8:d7:
                    96:0c:4d:58:f2:57:ca:94:87:c3:75:fa:45:e7:40:
                    0a:31:57:a6:6b:c7:7f:4a:5e:34:4e:19:8a:a1:41:
                    6a:4a:50:7c:82:18:02:6f:ae:1d:f4:c0:97:b3:26:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F1:D0:02:F7:04:38:90:8B:C0:31:04:09:9C:AB:12:10:F8:6D:48
            X509v3 Authority Key Identifier:
                keyid:03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a3a2f33342d3334203d3e20323731343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b94::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:de:ee:88:8d:f2:fd:ff:0b:96:37:43:b9:7a:8b:e1:e1:
         70:3e:ab:99:90:33:1f:42:3c:bd:88:37:45:c6:5e:42:fa:5c:
         14:13:0f:9e:f0:fc:b8:e8:19:c6:aa:ed:26:c0:cc:26:71:89:
         8c:9a:d8:60:05:b4:89:f8:fc:eb:ba:ab:3f:a0:73:b1:fa:24:
         3d:7c:2d:82:9d:1b:83:26:ab:96:f6:82:0b:db:be:e5:05:46:
         02:ff:7c:70:1d:68:54:83:d5:a7:d9:5d:19:31:fe:c8:83:d2:
         68:81:a8:ff:d7:fd:af:e4:a3:08:64:e1:e9:62:01:ac:96:ee:
         ed:93:38:45:3c:32:88:93:39:3b:37:02:71:2b:b1:67:a0:54:
         d9:24:1d:e9:6b:be:04:28:89:96:9e:fc:47:a0:31:e1:57:79:
         59:3d:50:a6:69:20:32:f0:9a:40:a1:3a:3f:7a:ab:c6:a0:89:
         f0:db:6a:df:a1:29:ad:23:68:f9:ba:06:8f:b3:b2:0a:9d:06:
         1b:30:d1:c9:42:1c:99:c5:bd:1d:4d:57:00:c5:af:8f:e3:0d:
         62:0f:9c:dd:07:2f:92:fb:7c:42:52:c4:71:cc:28:bb:89:c5:
         67:06:e3:d3:c9:3c:a5:5e:59:f1:1f:0b:df:0c:e3:b8:35:5e:
         c9:7f:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org