Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa
File:                     323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (raw, json)
Hash identifier:          QbaZwEx9u2H9TGScckrhBucizEkOr46IcrfS2pJ+qfA=
Subject key identifier:   1A:06:BF:A9:CA:3D:AC:A6:DD:EA:0B:9C:C9:D5:22:43:24:A5:A6:68
Certificate issuer:       /CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
Certificate serial:       7CA439651207C9989813D9D8EBE3C6558E781111
Authority key identifier: 01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa
Signing time:             Thu 04 Apr 2024 04:13:39 +0000
ROA not before:           Thu 04 Apr 2024 04:08:39 +0000
ROA not after:            Thu 03 Apr 2025 04:13:39 +0000
asID:                     267596
IP address blocks:        2804:43e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a4:39:65:12:07:c9:98:98:13:d9:d8:eb:e3:c6:55:8e:78:11:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
        Validity
            Not Before: Apr  4 04:08:39 2024 GMT
            Not After : Apr  3 04:13:39 2025 GMT
        Subject: CN=1A06BFA9CA3DACA6DDEA0B9CC9D5224324A5A668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:97:30:39:65:c7:8c:ae:8d:53:e9:81:9d:91:
                    76:a3:be:42:24:59:04:f6:44:fa:4c:3c:08:57:9e:
                    13:61:e9:8b:0d:a1:73:43:9a:83:d4:f6:af:2f:f2:
                    a4:bd:ab:30:4b:4d:02:60:bb:a0:c5:31:6e:b1:82:
                    20:9e:d8:04:7b:a9:2b:72:cd:f4:87:10:aa:fa:15:
                    1e:ed:82:99:14:59:c1:a7:98:f1:db:62:83:be:68:
                    8f:70:eb:1e:40:f8:8a:ec:00:95:00:68:95:af:d2:
                    98:19:68:fb:92:f9:a4:da:f7:0e:13:bf:ae:5a:20:
                    be:53:47:52:ec:41:28:ed:da:82:3e:ba:29:18:ee:
                    62:e2:99:a2:39:81:19:69:0f:10:d6:83:06:cf:c7:
                    fe:1d:85:47:3a:bb:3c:43:07:47:97:ec:89:f6:7a:
                    54:40:34:3c:58:df:e7:13:a8:5b:e1:af:36:7b:4b:
                    0c:a9:c2:a1:4f:46:33:59:09:91:19:78:db:24:c1:
                    73:dc:6b:1b:65:5e:8e:3e:eb:b5:02:9d:3b:d6:d0:
                    51:8d:66:13:1a:ec:c7:0c:0b:7b:a0:3c:d5:84:cd:
                    e5:b5:cb:de:90:52:9a:14:37:e7:b6:23:18:e7:c8:
                    7c:ef:c2:63:39:e6:45:f0:9e:82:47:e2:ce:80:1e:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:06:BF:A9:CA:3D:AC:A6:DD:EA:0B:9C:C9:D5:22:43:24:A5:A6:68
            X509v3 Authority Key Identifier:
                keyid:01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:75:72:7e:80:f3:bf:12:2d:b5:59:5c:37:e8:5b:e6:b3:
         97:0c:b5:6d:57:31:f2:ec:eb:b1:a8:6d:e1:29:11:96:7e:d8:
         a1:f3:f8:97:20:7a:88:71:44:41:11:c5:87:2b:db:54:c4:80:
         51:62:76:51:44:50:bd:13:e2:90:ea:cf:f9:04:36:ea:cf:7e:
         2c:55:0a:52:13:7d:85:4e:db:90:4c:fd:cb:6b:5a:cf:ac:5b:
         1d:ae:9a:f8:73:e9:87:1a:ba:8b:5a:49:53:cf:de:38:87:fb:
         20:da:e5:3f:2e:ba:fe:13:ad:d9:63:96:fd:66:fe:b6:65:9b:
         13:07:37:9d:c8:c4:ce:bf:1a:8f:91:c4:93:29:13:df:79:ea:
         01:4f:98:cd:a1:72:69:54:54:95:73:40:84:17:dd:b8:31:91:
         00:b7:8c:fa:2d:3e:f5:89:a2:19:51:cd:dd:f6:5f:c4:6d:18:
         ae:0c:ed:eb:7f:30:76:b8:0a:2f:ff:45:69:c0:63:82:96:41:
         88:05:e1:37:0d:ea:66:4f:85:4e:e4:b5:70:c7:34:5e:47:c4:
         82:c1:ec:35:e6:6f:a9:6d:b7:0a:da:cd:56:c1:cb:22:86:9a:
         31:e3:ee:21:d1:cd:38:93:2b:2b:37:eb:79:d3:85:36:08:4a:
         52:b7:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:57 2024 by rpki-client on console-ams.rpki-client.org