Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d3332203d3e20323731333633.roa
File:                     323830343a376134633a3a2f33322d3332203d3e20323731333633.roa (raw, json)
Hash identifier:          f+PhVmpWL7X1AgvzHwB12sKYv5AEB6Hp0d7fTFAUJK4=
Subject key identifier:   FE:CA:A7:4E:80:42:E6:6F:0E:6E:3E:70:C7:CA:9F:03:7E:56:EC:45
Certificate issuer:       /CN=73B656B5831532E23BC621E748382CCCE6CA40E8
Certificate serial:       465DC421F6B77382D49519F8CF72E6FAF069C1B0
Authority key identifier: 73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d3332203d3e20323731333633.roa
Signing time:             Thu 08 Aug 2024 18:30:05 +0000
ROA not before:           Thu 08 Aug 2024 18:25:05 +0000
ROA not after:            Thu 07 Aug 2025 18:30:05 +0000
asID:                     271363
IP address blocks:        2804:7a4c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5d:c4:21:f6:b7:73:82:d4:95:19:f8:cf:72:e6:fa:f0:69:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73B656B5831532E23BC621E748382CCCE6CA40E8
        Validity
            Not Before: Aug  8 18:25:05 2024 GMT
            Not After : Aug  7 18:30:05 2025 GMT
        Subject: CN=FECAA74E8042E66F0E6E3E70C7CA9F037E56EC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:14:5f:7e:ba:f2:4d:5d:ff:9f:84:d5:ab:
                    9f:ad:cb:ec:86:dc:33:9c:97:62:3e:e5:23:cc:82:
                    df:6b:0b:47:e0:29:76:4d:d0:c6:a7:7e:7b:e1:f9:
                    0e:65:4b:f6:3a:7b:39:cd:18:c1:9d:2c:0c:db:36:
                    0f:16:a6:80:55:1f:91:87:93:1a:9c:e8:17:56:e3:
                    b7:82:19:2f:bb:67:a4:0f:35:0b:9a:54:e9:3f:52:
                    c2:af:52:57:75:dd:c3:4e:2e:f6:a4:be:51:6f:6a:
                    86:39:5b:91:bd:84:5e:94:88:b2:70:9b:67:21:ef:
                    c2:36:f5:a5:bb:9b:27:ad:3f:9e:36:f2:a6:ff:e8:
                    aa:10:43:a1:10:ed:cd:91:99:35:23:52:8a:fb:af:
                    41:2f:57:65:89:f1:61:9b:aa:ab:c5:a3:b0:3f:80:
                    fc:05:a2:d8:d0:4e:df:92:98:ca:70:39:47:5d:05:
                    99:d1:cd:76:73:b9:9a:f5:19:bb:ad:76:d8:a8:7d:
                    2b:9f:23:8a:cc:9d:6b:d8:b5:2f:fb:f1:2f:09:ac:
                    e1:85:78:ea:d3:93:ac:ee:09:7b:fa:ce:aa:2a:c8:
                    1d:64:a2:c6:84:10:e8:7a:0d:e5:1e:4d:94:bd:d9:
                    11:f2:d3:7b:6a:5a:28:ef:d3:ca:5f:19:00:c5:fe:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:A7:4E:80:42:E6:6F:0E:6E:3E:70:C7:CA:9F:03:7E:56:EC:45
            X509v3 Authority Key Identifier:
                keyid:73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d3332203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:aa:20:30:30:46:e9:ed:bb:20:69:cb:60:06:f9:8f:47:60:
         fe:93:d0:dc:90:b1:34:05:2c:0a:e7:2f:98:3c:56:2d:c0:e3:
         5e:62:93:b9:b2:d7:b5:fb:a1:1c:7e:8c:16:74:cc:7f:c5:e3:
         e7:ea:76:bf:5d:13:0a:a8:aa:16:10:96:75:75:0c:dc:27:1f:
         74:4c:58:87:0f:11:ea:8d:f4:6e:c6:f5:c0:44:1e:1e:18:2e:
         72:d8:37:71:b8:5e:fa:b1:6f:da:bf:15:b1:8d:f6:c4:53:9c:
         3f:44:5e:66:b0:39:5c:f6:78:fe:bd:33:f7:55:8a:79:ab:de:
         e9:8d:6e:33:bb:cd:92:1f:47:9c:87:95:8c:69:db:a4:af:07:
         9b:09:03:a9:81:03:18:6f:c2:b7:53:d6:90:53:92:6e:5f:cc:
         d5:21:26:06:28:0a:08:39:47:4b:f0:57:a7:39:bb:23:ac:96:
         1c:81:2d:07:cd:c0:3b:d9:70:e4:69:d5:c5:44:82:58:b0:f4:
         6f:b2:23:22:4a:e4:f7:df:fb:ad:84:f7:f7:9f:51:56:2e:d1:
         5e:c6:07:4e:1a:ea:03:cc:66:ee:f9:b6:e9:94:6a:99:18:72:
         cd:53:7d:5a:57:33:12:39:4c:f7:e3:d2:64:39:fa:47:20:56:
         a4:a8:4f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org