Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa
File:                     323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa (raw, json)
Hash identifier:          +xU6Hy/+7N28+8k8hqcn1MYjSUe2ebuzehQQKUkWkqw=
Subject key identifier:   46:69:31:A1:A1:F5:C0:49:12:89:78:CE:BC:FF:39:BD:2D:25:58:61
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       76DECEB0DBDC914499E0B20BEE4D07E687C54B3E
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:28:35 +0000
ROA not before:           Fri 31 May 2024 23:23:35 +0000
ROA not after:            Fri 30 May 2025 23:28:35 +0000
asID:                     263612
IP address blocks:        2804:ffc:e001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:de:ce:b0:db:dc:91:44:99:e0:b2:0b:ee:4d:07:e6:87:c5:4b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:23:35 2024 GMT
            Not After : May 30 23:28:35 2025 GMT
        Subject: CN=466931A1A1F5C049128978CEBCFF39BD2D255861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:9d:91:75:3e:b7:bf:38:23:d7:0b:fa:99:
                    b3:aa:05:27:12:c3:a2:8b:e5:d7:5d:03:2b:d7:75:
                    1c:0a:02:a5:94:2a:72:61:62:e0:ae:a0:a2:ef:45:
                    a2:11:c7:d9:86:7f:3c:5e:e3:f1:f6:f4:86:fe:3d:
                    f1:9e:eb:54:62:90:c5:b6:06:ae:72:53:37:08:66:
                    7b:b8:d1:45:99:78:25:aa:40:61:58:fd:6c:c4:ed:
                    1d:7b:b3:26:be:3a:e7:eb:b7:cc:44:c7:ae:95:bc:
                    76:03:dc:6a:a7:a4:00:7a:71:f9:67:c1:51:3c:8a:
                    12:72:fe:8c:a6:9f:88:06:81:a7:14:69:ad:85:09:
                    b7:4b:7a:bc:8a:37:c1:44:88:1e:c1:49:b4:a1:5e:
                    ed:26:e8:ee:40:9b:46:6a:8d:51:dc:8f:3a:90:20:
                    78:43:d2:04:31:8a:c4:ea:79:be:e9:3c:7a:7f:0c:
                    ca:ba:2c:76:4f:d8:3b:2a:f9:f2:a1:09:69:e4:b2:
                    a3:7c:89:b5:aa:37:50:2b:61:a1:f6:ed:f2:36:b6:
                    8e:ca:90:57:27:6c:21:a4:bc:4c:82:41:ef:70:66:
                    30:67:18:66:97:02:33:f9:66:6e:20:2b:bb:ae:2e:
                    92:cd:d8:32:5d:b4:c2:d2:3b:80:62:b4:6d:56:59:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:69:31:A1:A1:F5:C0:49:12:89:78:CE:BC:FF:39:BD:2D:25:58:61
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e001::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:03:59:e6:24:da:dd:02:91:cf:1d:cf:af:79:5d:e5:a5:27:
         40:7a:25:cf:8e:59:84:62:a7:05:88:46:f1:71:bb:46:20:ba:
         81:a1:14:65:21:1b:27:5a:76:e1:b8:45:96:54:6e:12:f9:9f:
         5e:1e:2f:cf:de:89:fa:96:05:04:3c:34:70:bc:23:4d:5c:e5:
         41:15:27:6f:d2:03:25:f0:52:56:9d:ea:3e:f5:0e:54:de:38:
         86:04:ca:6c:8c:8f:b2:e8:13:f2:40:e5:14:8b:46:ae:ed:03:
         83:e2:e4:b7:50:f8:70:d0:79:eb:f9:0e:45:ac:21:96:93:45:
         19:68:72:d3:52:62:fc:5b:eb:04:47:e2:97:9d:39:52:c1:8f:
         11:ff:d6:90:a3:64:a7:41:a4:53:44:25:a6:d4:1f:13:5b:43:
         9d:6a:e0:a7:b5:62:93:38:f7:d0:75:2a:47:38:4e:4e:70:be:
         17:63:b5:8b:8c:de:94:ee:b6:0e:4d:78:70:ac:37:67:6c:b7:
         42:49:f0:ef:f1:ff:21:0c:e9:cc:e1:4c:83:c2:91:11:41:25:
         c6:99:e8:68:9a:30:c5:09:47:3b:3b:16:9b:b2:b7:be:26:15:
         3c:15:99:80:6c:13:b8:05:3d:a5:02:07:ca:e4:4e:5e:73:ea:
         53:b3:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:11:20 2024 by rpki-client on console-fra.rpki-client.org