Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa
File:                     323830343a343033303a3a2f33322d3438203d3e20323635393433.roa (raw, json)
Hash identifier:          +3/UVW4p3M9x7Zg/TH1Q/5HJzkFdovVcSAKZyl5RgKM=
Subject key identifier:   DE:7E:B7:57:D2:87:FD:53:1C:C4:C3:7F:3B:DA:FA:2A:85:FB:F6:C7
Certificate issuer:       /CN=8149914A5A868AC0F10A7545DFFB214778D69D8A
Certificate serial:       5D5B35AD06838A6755248FFDB9B63A01120EF3C9
Authority key identifier: 81:49:91:4A:5A:86:8A:C0:F1:0A:75:45:DF:FB:21:47:78:D6:9D:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8149914A5A868AC0F10A7545DFFB214778D69D8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa
Signing time:             Mon 18 Nov 2024 13:34:55 +0000
ROA not before:           Mon 18 Nov 2024 13:29:55 +0000
ROA not after:            Mon 17 Nov 2025 13:34:55 +0000
asID:                     265943
IP address blocks:        2804:4030::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/8149914A5A868AC0F10A7545DFFB214778D69D8A.crl
                          rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/8149914A5A868AC0F10A7545DFFB214778D69D8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8149914A5A868AC0F10A7545DFFB214778D69D8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5b:35:ad:06:83:8a:67:55:24:8f:fd:b9:b6:3a:01:12:0e:f3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8149914A5A868AC0F10A7545DFFB214778D69D8A
        Validity
            Not Before: Nov 18 13:29:55 2024 GMT
            Not After : Nov 17 13:34:55 2025 GMT
        Subject: CN=DE7EB757D287FD531CC4C37F3BDAFA2A85FBF6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:10:bb:c5:11:c6:b8:00:3f:17:ee:48:02:
                    b0:40:16:21:8f:5a:87:c4:1d:8e:4c:f5:70:29:cf:
                    9c:f1:16:93:80:b4:30:0f:f9:97:ae:40:30:08:d0:
                    a9:1f:33:1c:28:1f:46:9b:5f:f5:20:46:37:1f:54:
                    be:d1:42:18:34:26:ec:e3:63:46:32:ce:d9:c3:59:
                    0f:dd:64:86:4b:8b:e8:64:b3:f8:a5:aa:4c:47:c3:
                    6b:da:0d:4d:42:35:69:bc:95:0a:87:3b:26:0b:51:
                    53:8c:96:af:34:bf:e9:d3:47:13:a9:58:0d:b2:09:
                    bb:fd:0a:6b:c8:9f:9f:ca:1d:ad:7c:ae:59:21:63:
                    02:93:98:38:c2:0d:4d:0b:3f:ed:f8:ba:b8:3d:41:
                    03:6a:f6:45:14:2b:d0:80:a1:43:f8:e5:84:fd:89:
                    c7:62:07:c2:50:0b:60:65:72:39:a7:cc:83:80:bc:
                    69:52:da:7a:23:ae:45:c4:0e:a2:2d:bf:dd:8a:bd:
                    25:91:90:61:e6:67:f1:ac:20:9f:93:76:93:5c:48:
                    92:23:52:10:79:77:d8:ce:f4:6a:4d:df:e9:73:b5:
                    78:42:29:c1:65:bd:66:10:69:e6:ce:50:43:51:37:
                    06:8b:4d:10:8d:b5:40:08:3f:64:f3:18:79:3f:77:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7E:B7:57:D2:87:FD:53:1C:C4:C3:7F:3B:DA:FA:2A:85:FB:F6:C7
            X509v3 Authority Key Identifier:
                keyid:81:49:91:4A:5A:86:8A:C0:F1:0A:75:45:DF:FB:21:47:78:D6:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/8149914A5A868AC0F10A7545DFFB214778D69D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8149914A5A868AC0F10A7545DFFB214778D69D8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4030::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:a7:f6:4a:54:d3:c9:77:2e:0c:a6:7c:c7:c1:45:10:24:
         e6:13:61:90:64:4e:c8:7d:ca:2b:e3:af:43:31:40:74:08:e4:
         1d:93:b5:8c:f5:f4:7a:5b:54:53:09:43:e4:c4:c7:b4:f7:8f:
         db:06:6e:14:d1:ea:32:30:1a:08:ec:36:66:15:c0:a1:58:18:
         33:a8:98:53:0d:cd:e3:b1:cf:02:60:c1:54:1d:48:9d:39:a0:
         50:5c:9c:c6:0c:ee:6d:ea:46:b3:6f:31:4c:b0:fd:f6:92:5e:
         f4:51:b8:dd:84:83:10:e5:57:45:f8:1e:78:36:35:b0:d0:15:
         00:ef:3c:b8:0a:e9:96:55:60:16:61:a7:de:4d:76:51:c9:03:
         49:16:57:d2:f4:70:e6:37:15:a4:7c:07:32:ec:bb:55:ab:6b:
         56:7f:a4:a6:d5:bd:01:60:62:47:4e:51:9f:9c:a3:46:f4:d8:
         bf:02:21:2c:d2:3b:05:41:79:48:42:9c:d8:42:49:8e:0b:9e:
         47:30:46:02:dc:1c:06:e0:70:00:62:62:fa:d4:41:09:50:5f:
         56:e4:ac:57:90:4b:56:12:79:0f:02:04:63:8c:f0:4f:b2:37:
         d0:27:88:e5:75:ea:bf:f6:8d:5b:5e:21:bf:6d:37:81:4d:77:
         b2:96:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org