Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/323830343a376662383a3a2f33322d3438203d3e20323731373035.roa
File:                     323830343a376662383a3a2f33322d3438203d3e20323731373035.roa (raw, json)
Hash identifier:          h7vHawDa+HmxpTfAfsQ1jS8Zm5DTu8EHONRNqSIAB1Y=
Subject key identifier:   EB:CA:4B:7F:C8:5F:09:80:CE:32:E5:48:B1:C8:4E:94:5D:8A:2B:43
Certificate issuer:       /CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
Certificate serial:       51BD6954DFB3F56210D9A826F628863904CE5F1F
Authority key identifier: 81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/323830343a376662383a3a2f33322d3438203d3e20323731373035.roa
Signing time:             Thu 04 Apr 2024 03:01:33 +0000
ROA not before:           Thu 04 Apr 2024 02:56:33 +0000
ROA not after:            Thu 03 Apr 2025 03:01:33 +0000
asID:                     271705
IP address blocks:        2804:7fb8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl
                          rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bd:69:54:df:b3:f5:62:10:d9:a8:26:f6:28:86:39:04:ce:5f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
        Validity
            Not Before: Apr  4 02:56:33 2024 GMT
            Not After : Apr  3 03:01:33 2025 GMT
        Subject: CN=EBCA4B7FC85F0980CE32E548B1C84E945D8A2B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:e6:33:40:0d:23:f3:c9:07:b3:de:9b:b3:
                    eb:e5:a2:b4:2b:1b:1d:c0:a8:7a:a5:66:f7:e6:60:
                    c3:35:e9:74:2b:e7:25:d1:f3:6d:0b:c9:98:77:65:
                    14:ef:24:d1:41:90:81:dc:c3:44:bc:75:bc:ee:51:
                    4f:65:25:30:68:62:da:7e:b2:2e:b4:cf:cd:4e:49:
                    1d:b6:f1:7a:b5:79:03:c3:1d:b4:ec:bf:2c:76:56:
                    c4:ee:15:7e:a4:f7:17:7a:a1:a6:be:a1:8d:61:c8:
                    8e:27:91:dc:91:5c:2e:84:e6:4b:1c:c5:9e:c4:11:
                    ad:74:9e:40:ae:c3:cf:7d:93:8c:af:b9:be:8e:fb:
                    a1:b2:f0:33:d5:5a:3a:bb:be:4c:32:7b:be:8a:45:
                    c0:a3:de:71:8e:d4:b3:69:6f:ba:17:58:a5:6b:cb:
                    19:0e:db:44:b2:5d:55:d5:d8:55:f0:96:63:8a:36:
                    67:e8:1a:ad:89:07:ea:42:86:bc:e5:a8:99:1f:0b:
                    d3:5b:65:2c:4c:b2:24:20:71:0f:cc:32:ef:9b:82:
                    2f:a9:58:8a:fe:f8:af:36:a7:1f:c2:eb:35:c6:d7:
                    51:3f:bc:93:44:c1:69:ff:32:ff:81:2c:36:bf:fd:
                    54:41:5d:1f:e5:22:37:fd:82:d8:6f:0a:49:83:96:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CA:4B:7F:C8:5F:09:80:CE:32:E5:48:B1:C8:4E:94:5D:8A:2B:43
            X509v3 Authority Key Identifier:
                keyid:81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/323830343a376662383a3a2f33322d3438203d3e20323731373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:c5:b7:11:44:5f:9f:54:e9:49:cf:ef:25:ec:24:ad:a0:
         22:8f:41:bf:e4:80:5c:5f:20:66:7b:09:c9:e7:97:f0:a2:8c:
         22:9a:67:b5:75:50:ea:69:bc:88:85:62:68:20:26:21:82:9d:
         78:bf:ea:34:46:29:86:5b:c9:67:72:cd:08:73:bc:fe:c0:dc:
         51:04:23:5f:58:bb:ac:0a:2f:2c:69:48:a9:ae:2c:a6:6f:a9:
         88:ac:72:b5:68:a6:05:f8:fb:a1:82:a8:82:da:c9:bf:ab:7e:
         92:73:71:9d:ab:ad:fe:25:39:83:77:60:5f:44:33:c3:22:f4:
         b4:23:29:7a:a1:3a:2b:4a:39:8e:be:70:e4:f9:9e:f1:34:6a:
         88:c1:d4:30:93:14:83:a2:68:8b:4f:ac:bc:fc:5b:4b:4f:93:
         b8:7f:68:52:c4:84:6b:79:3b:7d:13:8d:75:e4:29:f0:db:34:
         37:91:71:90:0c:60:82:0a:e2:e5:5c:80:07:91:af:37:e3:f7:
         c2:50:ee:d4:aa:4b:62:ae:3f:6b:a6:07:31:53:5f:e1:54:df:
         9a:d8:73:ea:3a:98:11:19:ed:16:31:44:9d:63:dd:2b:6f:64:
         08:e7:14:d3:e6:4b:d9:ea:fd:a8:e6:3b:e2:03:db:7d:e1:69:
         10:45:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org