Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a313030663a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a313030663a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          DTQYduVAWeZiH17MG7OnNBRttBypUXPsebtXY4f8SsY=
Subject key identifier:   40:F1:78:3D:6D:5D:E5:31:88:0E:D9:E4:F1:15:D0:82:EB:24:9B:2C
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       08CA59CD1C6912171670D405C03D7E92DBFF588E
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a313030663a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Thu 24 Oct 2024 13:09:00 +0000
ROA not before:           Thu 24 Oct 2024 13:04:00 +0000
ROA not after:            Thu 23 Oct 2025 13:09:00 +0000
asID:                     263283
IP address blocks:        2804:1658:100f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ca:59:cd:1c:69:12:17:16:70:d4:05:c0:3d:7e:92:db:ff:58:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Oct 24 13:04:00 2024 GMT
            Not After : Oct 23 13:09:00 2025 GMT
        Subject: CN=40F1783D6D5DE531880ED9E4F115D082EB249B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:83:26:7e:4b:5c:56:24:d2:64:7a:89:79:
                    d7:cf:76:ea:1b:75:e5:6b:98:1c:19:e8:de:b7:d0:
                    4e:cd:6b:14:0f:d0:28:83:86:23:71:8b:39:ea:33:
                    fb:46:62:9a:83:19:06:2e:b3:cb:15:a4:8f:44:4f:
                    71:e5:1d:f5:6d:21:79:45:7d:d4:63:0d:2c:6f:05:
                    f5:dd:87:49:4b:d5:94:66:6f:6b:9a:74:8f:57:2d:
                    0b:2e:32:66:73:b6:74:4d:a8:7e:f1:6a:ec:79:5a:
                    74:44:4e:d0:a1:ba:c2:18:40:9d:aa:93:d1:5e:31:
                    ee:09:fd:0a:c5:a5:05:f4:81:bd:eb:e7:c7:f5:05:
                    d1:0d:90:14:42:5b:9b:b6:68:1f:90:84:22:72:1c:
                    2a:1c:f4:8d:fa:b6:d8:c1:2f:11:bc:10:40:c2:ee:
                    94:d3:e0:94:50:69:56:f0:94:63:94:86:d2:45:a5:
                    9d:21:e0:a5:3c:6f:80:f9:9a:0c:29:7a:72:c5:13:
                    05:0a:93:e7:de:d7:8e:f1:a2:4d:9d:7d:81:83:be:
                    36:ed:dd:b7:3f:64:69:a9:87:5e:ff:9b:f0:90:81:
                    e0:d4:ff:a5:a2:1e:fc:4e:6e:64:10:6c:ab:65:c6:
                    15:17:ed:21:c5:2e:86:6f:e9:a8:8c:ba:c4:1e:a3:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F1:78:3D:6D:5D:E5:31:88:0E:D9:E4:F1:15:D0:82:EB:24:9B:2C
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a313030663a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:100f::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:aa:ab:16:1f:09:06:ec:2f:f8:45:8c:a6:d6:fe:bb:dd:
         b5:a2:95:06:ba:c0:e6:f5:36:02:88:77:48:56:c1:2a:8c:3c:
         d0:e6:8f:ce:0c:73:a0:61:f6:cd:f7:04:d1:71:a1:bf:c0:c5:
         a4:95:f2:b7:7f:7b:87:06:1c:a9:d8:22:f7:ef:c7:fb:22:17:
         30:0b:a5:79:1f:44:fb:88:65:3d:10:3e:34:e4:93:b7:e7:18:
         30:2b:e8:de:f7:c1:8a:08:9a:68:61:3c:7e:46:c5:b7:40:0e:
         4e:42:b1:67:3f:9c:c9:c1:fa:ca:68:72:64:d5:3f:e5:53:be:
         d8:ec:12:b0:75:b8:fd:98:8d:93:a8:2d:5f:e5:e1:11:d4:13:
         40:eb:9a:a3:3c:a0:9e:87:3d:d2:d2:5f:ce:0d:d2:f2:15:e8:
         b1:84:a1:9b:b5:8e:b9:a6:6e:27:ae:16:9f:55:6a:c3:a1:35:
         e6:f4:53:d3:30:ff:96:52:30:90:93:9b:a7:17:1c:f2:88:cd:
         a4:6f:65:46:07:1e:a7:ce:3a:9a:08:b0:94:fa:87:0b:ef:f4:
         58:e3:e0:34:b7:2f:34:d0:01:1d:bf:e4:7e:c9:fd:2b:b0:0c:
         6f:6d:7e:a3:a0:09:ee:e1:b1:d7:08:11:2d:a6:14:0a:dc:ae:
         a4:8a:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org