Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a343030303a3a2f33342d3335203d3e20323731303138.roa
File:                     323830343a373530343a343030303a3a2f33342d3335203d3e20323731303138.roa (raw, json)
Hash identifier:          P/zEMTAmEBFgCs5u0g5Oo1U97PjH/NGIgkluPTJIis0=
Subject key identifier:   7D:E0:A9:14:1F:3D:E8:0F:7C:9D:75:F0:25:E6:98:0A:D2:06:7E:5E
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       79A8CC639D75B65F18FD000D9F848A27BCEB0551
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a343030303a3a2f33342d3335203d3e20323731303138.roa
Signing time:             Fri 05 Apr 2024 01:41:01 +0000
ROA not before:           Fri 05 Apr 2024 01:36:01 +0000
ROA not after:            Fri 04 Apr 2025 01:41:01 +0000
asID:                     271018
IP address blocks:        2804:7504:4000::/34 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a8:cc:63:9d:75:b6:5f:18:fd:00:0d:9f:84:8a:27:bc:eb:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Apr  5 01:36:01 2024 GMT
            Not After : Apr  4 01:41:01 2025 GMT
        Subject: CN=7DE0A9141F3DE80F7C9D75F025E6980AD2067E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:4f:49:bb:63:03:c9:6f:14:bd:64:34:2f:
                    ac:f8:25:1f:a7:cd:91:c9:4b:6a:d2:07:ab:6e:66:
                    dd:b7:dd:91:00:e0:d3:c2:29:a8:e2:88:b3:1e:63:
                    0e:e7:17:b6:35:e9:9a:f1:8e:cf:d6:a3:6a:fa:ea:
                    b6:ba:f7:4a:01:24:cb:9d:b4:23:2e:de:85:4e:04:
                    9e:db:5e:85:17:1a:79:7e:62:a4:08:cb:a2:54:c5:
                    62:63:2c:f9:4c:a7:d5:f2:72:23:a0:54:3e:5c:22:
                    fd:b4:79:90:3a:45:23:39:e5:ed:a8:f1:bc:9c:e7:
                    c5:3a:a2:1e:58:c5:6b:f6:0a:38:75:8b:d1:4c:b7:
                    a4:4e:22:47:01:b6:45:70:eb:e3:79:25:21:24:51:
                    73:88:db:40:bd:22:75:22:b8:a1:82:0f:23:f0:8b:
                    3a:a7:bd:52:33:0e:f5:95:5b:10:cb:19:45:f8:df:
                    5d:24:26:c0:9b:b4:6a:95:38:e1:d0:4d:3e:7f:eb:
                    af:83:17:5f:01:94:30:44:20:df:e0:ea:a0:a4:92:
                    8e:32:25:97:8f:c8:61:91:48:95:0f:92:9c:dc:28:
                    85:d4:a9:d4:9a:57:8c:34:e1:6b:90:4f:e2:09:26:
                    0f:02:8c:8e:a6:24:2b:bd:da:3c:b2:40:87:03:0c:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E0:A9:14:1F:3D:E8:0F:7C:9D:75:F0:25:E6:98:0A:D2:06:7E:5E
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a343030303a3a2f33342d3335203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:38:3d:01:12:4e:4e:a0:52:bc:23:b1:6b:7b:4b:65:c9:
         35:3b:a7:be:71:bb:31:b0:d4:5d:44:f3:45:83:d2:7a:84:0a:
         9a:1e:db:65:9c:f2:b1:18:8c:af:49:2d:39:43:fa:0e:68:5d:
         57:10:b7:ef:83:f5:5b:b7:75:44:84:61:9e:cf:42:87:3a:25:
         3b:6f:74:5e:21:3a:fc:e7:fa:ea:d5:11:95:9b:d3:b7:c4:99:
         69:76:f2:5d:b4:b5:60:07:ee:03:06:27:21:67:35:7e:fd:00:
         4f:9d:aa:f5:b9:e1:0e:4d:ac:56:2d:1f:67:51:56:17:fe:1e:
         f8:f8:cd:33:39:d3:f8:fc:ce:d8:53:af:5d:13:44:3d:86:88:
         1a:c5:76:c8:ed:f9:55:34:df:34:c1:a6:d4:53:06:df:d1:a4:
         63:41:ba:59:f4:08:c0:ce:ba:8e:bf:48:09:47:ad:8a:f3:e4:
         de:c5:06:aa:37:45:4e:59:fa:48:4f:c6:df:be:53:67:d7:2c:
         30:06:ee:70:d8:b2:6a:39:65:95:02:a9:ea:24:09:65:75:49:
         18:ec:9f:38:30:e4:ab:e6:00:0a:f3:f6:87:26:6f:12:bb:96:
         65:96:e5:70:a8:29:ae:a9:1d:4c:46:3e:1c:80:47:49:4c:da:
         a8:61:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:14:10 2024 by rpki-client on console-ams.rpki-client.org