Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653430303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a653430303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          CiOQPc6WSA6JoiN6+7BSzSddcGdiCnWc4cJFRJUj6fI=
Subject key identifier:   B2:76:FD:1D:A2:49:8F:5A:EF:D2:97:3F:44:FB:DD:5D:94:EE:F3:FA
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       634DD0745205A9AA5222AC5FE4FCFAD11F5D0F6B
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653430303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:28:51 +0000
ROA not before:           Fri 31 May 2024 23:23:51 +0000
ROA not after:            Fri 30 May 2025 23:28:51 +0000
asID:                     263612
IP address blocks:        2804:ffc:e400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4d:d0:74:52:05:a9:aa:52:22:ac:5f:e4:fc:fa:d1:1f:5d:0f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:23:51 2024 GMT
            Not After : May 30 23:28:51 2025 GMT
        Subject: CN=B276FD1DA2498F5AEFD2973F44FBDD5D94EEF3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:bd:1f:56:fb:b5:e6:2e:db:d3:e8:f4:0e:
                    aa:89:23:55:4e:4e:89:8d:d9:b7:88:60:68:7c:e9:
                    c6:69:17:55:60:ba:01:bb:cc:ee:be:d2:6f:81:b1:
                    88:06:3c:30:2e:1a:b2:7e:90:2b:cd:80:4c:cb:77:
                    bb:18:99:49:2c:8e:d2:72:c1:42:92:2a:5d:31:bc:
                    7b:a8:25:c2:65:d3:9a:5c:aa:cf:06:3c:c3:00:52:
                    c2:a2:57:1c:60:da:5c:0c:6a:92:0f:18:d2:e7:bd:
                    00:c9:b0:7a:6f:d6:eb:e8:81:62:1a:b0:b3:6b:be:
                    e0:d4:71:07:3b:31:be:90:ab:ca:34:83:a3:65:18:
                    c3:0b:5c:10:80:f6:35:c7:61:37:9a:1e:df:84:fb:
                    75:71:a7:ec:15:93:6d:58:07:db:e1:fb:7e:5f:12:
                    14:31:7d:a8:eb:1a:64:2b:f8:2b:a7:3f:10:50:29:
                    fc:71:d5:31:e1:a7:c0:4b:46:93:f0:a1:07:65:ea:
                    01:a4:7a:d2:1a:fd:52:3d:a8:d4:1e:1e:a8:e4:51:
                    51:b2:46:b1:d8:a1:e3:e5:cd:4b:d5:f0:a3:2c:e0:
                    9d:31:f1:6f:05:ae:9e:6d:d5:65:d5:42:f8:6d:92:
                    a7:67:59:42:e5:89:9d:b5:2b:ae:1a:4e:5a:8d:20:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:FD:1D:A2:49:8F:5A:EF:D2:97:3F:44:FB:DD:5D:94:EE:F3:FA
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653430303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:27:14:e7:3d:a7:26:e0:d5:72:c3:23:e8:b0:51:a6:1f:
         56:bd:fe:ad:96:29:77:3a:7d:fb:06:8f:ef:45:af:35:25:4b:
         b1:26:7f:d6:6a:7a:3b:78:bf:f4:eb:d7:f6:38:db:2c:51:36:
         60:ea:6b:5b:0c:98:f9:97:cf:7f:c6:c1:00:7d:31:8c:b2:fc:
         34:65:97:f9:88:84:f0:48:10:bb:64:05:39:57:66:ac:43:c3:
         76:d4:1d:a1:c9:4d:d2:c4:d4:35:1c:67:1a:5b:8f:10:6b:7b:
         78:bb:96:e9:b4:75:df:b2:aa:d2:36:a0:5a:9d:9e:32:21:cf:
         37:b4:a9:86:fa:67:6d:1f:d0:7c:9d:19:25:c8:2f:86:b8:22:
         c3:05:b1:f7:35:83:c0:6e:1e:0d:c5:51:10:b8:91:41:6c:aa:
         d5:f5:20:e5:24:36:08:26:c1:1c:7e:a2:c7:03:5c:b1:99:1f:
         3f:62:27:fa:0c:03:83:bb:93:82:0c:78:fb:cc:50:bb:0c:46:
         79:13:ab:a7:27:99:60:03:5f:3a:b4:30:76:7d:fb:79:da:57:
         90:af:59:a8:49:f9:41:74:f9:0f:e7:7c:47:6f:11:10:4f:5e:
         c3:ee:0b:d7:bc:84:fe:63:ee:5f:2a:57:ae:1e:4b:e5:6a:5e:
         6a:ed:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:11:20 2024 by rpki-client on console-fra.rpki-client.org