Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa
File:                     323830343a356434303a3a2f33322d3334203d3e20323638393630.roa (raw, json)
Hash identifier:          F26sVPZzQApE0OcvpYfyQT7LGQkxykpYHFvS+NwzBLE=
Subject key identifier:   EB:D9:C2:BF:01:09:C2:11:F4:C6:8F:BD:D7:E7:4E:6D:02:4A:2B:84
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       1EAA28AFFE32BF58EA942BE69B33FB17B27454A2
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa
Signing time:             Fri 12 Jul 2024 15:01:49 +0000
ROA not before:           Fri 12 Jul 2024 14:56:49 +0000
ROA not after:            Fri 11 Jul 2025 15:01:49 +0000
asID:                     268960
IP address blocks:        2804:5d40::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:aa:28:af:fe:32:bf:58:ea:94:2b:e6:9b:33:fb:17:b2:74:54:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jul 12 14:56:49 2024 GMT
            Not After : Jul 11 15:01:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:1b:91:2a:65:12:0a:80:3c:4a:9a:7f:52:
                    ba:f5:9d:c8:bb:69:34:0c:0f:b7:fa:b3:7b:04:c1:
                    f7:c7:07:09:b1:f0:eb:6d:49:04:a7:de:63:8e:2a:
                    7b:9e:3e:29:7e:0a:c2:95:49:23:ac:76:f7:89:81:
                    dc:a7:64:55:36:0e:c1:ec:bd:67:ea:52:e6:57:65:
                    fe:db:6c:69:46:9e:9a:b9:5b:c4:9f:93:ec:45:0f:
                    68:48:0f:57:12:83:33:7c:fd:82:da:30:ae:31:b7:
                    cd:aa:6d:e5:7a:c2:07:cb:d8:76:87:71:f5:10:a7:
                    9a:6d:ef:e6:bc:0b:7f:2f:5e:11:51:e5:d0:d5:70:
                    42:06:b0:49:27:a3:de:4c:62:7c:22:e5:fe:02:30:
                    32:36:81:fc:8b:ef:1c:88:bd:35:df:77:42:93:55:
                    f6:35:fa:f3:a8:bb:94:19:84:76:92:ec:1e:5f:cd:
                    36:9a:f3:79:2b:bb:b5:cc:bb:0d:ae:a0:27:49:17:
                    09:40:87:42:2f:ce:bc:c8:6a:4a:96:7b:76:dc:62:
                    0f:60:ac:b0:ce:59:03:c0:bd:40:91:42:6f:d5:cf:
                    96:c5:38:16:3f:99:69:3c:0a:7e:b2:9f:dd:39:b6:
                    16:21:e0:a7:f7:44:c6:d6:e9:dc:ad:db:07:e8:67:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D9:C2:BF:01:09:C2:11:F4:C6:8F:BD:D7:E7:4E:6D:02:4A:2B:84
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:48:ab:2f:cc:59:de:76:e3:77:0b:4b:c2:45:e0:39:7c:cc:
         e4:04:22:98:73:c7:7d:a5:77:90:5f:ce:8a:0d:f0:a3:4d:b4:
         88:1e:4c:1d:66:ee:ee:9c:70:d9:48:e5:8d:b6:1c:66:c0:d3:
         c9:a3:3f:5d:e2:a4:ad:0b:7f:38:34:e6:a3:66:05:c2:20:84:
         a8:b8:65:3f:35:47:3a:b1:bd:eb:77:23:03:35:b6:43:b8:64:
         8d:a2:2b:d3:0f:cd:cd:bd:09:ba:34:a8:17:09:94:15:56:31:
         0b:91:01:13:61:2d:8e:69:60:e4:de:b9:f0:ad:91:6a:95:3b:
         08:2d:6e:3e:5f:89:f1:fd:91:45:e9:85:3f:bf:65:c1:ff:93:
         91:41:4e:9b:52:0f:50:2f:ef:d7:c1:f9:5f:94:10:ae:55:36:
         ad:bc:09:5d:74:4d:07:c9:d5:18:0f:66:2d:8a:ba:cf:4c:7f:
         25:fc:38:01:e4:ad:fd:c7:f9:82:04:59:85:5a:dc:bb:cd:e4:
         0d:a7:da:01:3f:57:6b:3b:86:c1:21:c1:3c:71:97:ce:ac:8b:
         94:ce:2a:59:f6:82:92:16:a3:5b:75:ce:b5:d4:7f:68:8e:64:
         81:ba:41:01:86:b1:da:a7:e5:b5:4c:bf:13:d4:f2:c2:9a:29:
         92:4f:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org