Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/323830343a3634633a3a2f33322d313238203d3e20323632353537.roa
File:                     323830343a3634633a3a2f33322d313238203d3e20323632353537.roa (raw, json)
Hash identifier:          KF4eYUJPKgMoIePAFtedC6+BqbrFodmn2+0BlkFnMtM=
Subject key identifier:   89:54:88:FD:83:79:F0:82:D9:3F:5C:F7:66:D6:CF:F4:F7:C5:2D:94
Certificate issuer:       /CN=EAC3E8567DB2ABB37844299A31DDE6917346C1BE
Certificate serial:       512638CEC8446D6AAC580A2D9A5A09A41EA69603
Authority key identifier: EA:C3:E8:56:7D:B2:AB:B3:78:44:29:9A:31:DD:E6:91:73:46:C1:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/323830343a3634633a3a2f33322d313238203d3e20323632353537.roa
Signing time:             Tue 24 Sep 2024 12:28:05 +0000
ROA not before:           Tue 24 Sep 2024 12:23:05 +0000
ROA not after:            Tue 23 Sep 2025 12:28:05 +0000
asID:                     262557
IP address blocks:        2804:64c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.crl
                          rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:26:38:ce:c8:44:6d:6a:ac:58:0a:2d:9a:5a:09:a4:1e:a6:96:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC3E8567DB2ABB37844299A31DDE6917346C1BE
        Validity
            Not Before: Sep 24 12:23:05 2024 GMT
            Not After : Sep 23 12:28:05 2025 GMT
        Subject: CN=895488FD8379F082D93F5CF766D6CFF4F7C52D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:00:f3:a7:09:5a:78:e2:63:a3:c4:b7:80:
                    59:b4:5d:eb:9a:c9:5b:d3:7b:d7:42:2b:bc:07:89:
                    75:68:60:ed:4a:4b:99:85:f1:40:66:78:26:34:0f:
                    bf:4f:34:7e:49:a2:df:f8:2c:9a:19:95:fd:99:79:
                    61:ba:4d:7c:e4:22:40:8b:83:34:fa:de:17:90:f3:
                    47:04:63:88:f6:ee:b2:ce:fc:f0:51:2d:14:3f:4b:
                    4e:aa:10:d1:f2:96:de:6f:8b:cb:30:38:91:db:10:
                    86:a2:45:bf:d9:ed:c9:67:f6:77:56:7f:30:3e:cd:
                    90:df:b6:a9:33:cb:45:9d:6d:68:50:20:34:36:da:
                    0d:bb:a9:ba:7b:e1:cb:d5:c3:4b:05:f8:38:42:d1:
                    2c:d9:a8:d0:b6:19:08:92:7c:d8:7b:f8:39:9b:b2:
                    03:4f:84:90:73:bc:af:7c:52:ef:ce:5c:a1:1f:16:
                    52:7e:30:45:42:13:36:af:ee:98:35:10:6e:a5:1c:
                    0e:6b:df:f5:32:27:ea:46:8d:d6:02:78:53:31:f9:
                    3b:c5:41:81:da:8a:c5:df:4f:72:dc:f0:57:5d:7f:
                    ef:a2:06:81:ca:7b:6e:a8:5a:26:4f:85:98:8e:9f:
                    07:44:ea:9c:21:82:3d:1a:13:35:2c:5a:cc:6e:3b:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:54:88:FD:83:79:F0:82:D9:3F:5C:F7:66:D6:CF:F4:F7:C5:2D:94
            X509v3 Authority Key Identifier:
                keyid:EA:C3:E8:56:7D:B2:AB:B3:78:44:29:9A:31:DD:E6:91:73:46:C1:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/323830343a3634633a3a2f33322d313238203d3e20323632353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:51:5f:97:70:30:fa:22:15:bb:dd:90:ce:86:6e:33:42:3b:
         81:3c:39:be:9c:35:b5:4f:cc:d3:f0:37:dd:b9:30:d9:76:10:
         fa:70:93:89:28:82:08:9b:b6:d9:ad:5e:15:78:e3:33:b5:23:
         8a:ea:40:56:67:cf:2e:39:a7:6b:32:53:12:31:bb:58:16:08:
         1f:bb:f8:40:a0:7b:8f:1e:3e:16:ea:f2:48:c8:56:2b:87:32:
         92:da:87:4a:3c:0a:b6:13:12:b7:7d:24:22:12:78:47:d6:bd:
         57:cd:f6:38:9a:a5:cc:91:8c:68:1d:37:45:e2:11:c3:21:80:
         7e:9d:31:67:85:56:53:da:8a:d3:43:bf:18:16:ac:d9:4f:e4:
         1e:4f:23:75:ac:6a:05:f7:6e:03:6b:06:24:7a:f4:0e:63:fc:
         b4:fe:18:f6:92:f8:52:26:72:02:ab:e2:e7:e3:cc:89:11:45:
         b9:c1:40:fb:10:8d:6c:61:49:36:23:9a:84:02:88:a0:21:d9:
         f3:3e:70:8b:cf:9c:de:7c:f1:ee:69:cb:2a:6e:04:a2:8c:11:
         65:3c:79:d2:45:5b:a3:f6:58:b1:ad:d5:97:31:2c:d0:b2:2c:
         0e:00:16:43:75:3b:66:ec:80:2c:4a:67:f3:b7:e8:db:59:a5:
         03:08:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:37 2024 by rpki-client on console-fra.rpki-client.org