Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a383030303a3a2f33342d3335203d3e20323731303138.roa
File:                     323830343a373530343a383030303a3a2f33342d3335203d3e20323731303138.roa (raw, json)
Hash identifier:          AyT9ZHtQbdBx3qSb9fMvYNvUMwFqSj7tDIYAVBEQ8JU=
Subject key identifier:   52:40:56:04:CE:D6:D9:76:3B:24:36:B4:3C:33:F3:24:2D:96:26:7B
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       199005894D0E6A7558FAB05F15B349EBFEC8D46D
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a383030303a3a2f33342d3335203d3e20323731303138.roa
Signing time:             Fri 05 Apr 2024 01:41:01 +0000
ROA not before:           Fri 05 Apr 2024 01:36:01 +0000
ROA not after:            Fri 04 Apr 2025 01:41:01 +0000
asID:                     271018
IP address blocks:        2804:7504:8000::/34 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:90:05:89:4d:0e:6a:75:58:fa:b0:5f:15:b3:49:eb:fe:c8:d4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Apr  5 01:36:01 2024 GMT
            Not After : Apr  4 01:41:01 2025 GMT
        Subject: CN=52405604CED6D9763B2436B43C33F3242D96267B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:83:2b:0e:85:d7:4e:81:f6:66:2b:e1:62:
                    7a:5b:e9:44:d6:5a:7a:05:74:28:9d:a1:a4:84:19:
                    eb:22:18:ac:e0:ba:fb:a6:d5:32:06:1b:f0:da:ca:
                    da:20:52:6d:c2:71:3e:5a:7a:18:5d:f0:8a:f3:35:
                    fb:55:f0:41:37:38:12:19:50:ef:1f:ec:38:d5:c1:
                    0e:09:3f:86:bc:7d:ce:f7:ae:f8:e6:f8:b6:f1:29:
                    d5:39:f6:3a:e3:dd:c7:4c:08:20:ef:a0:97:b4:7a:
                    8e:b7:f7:ce:64:59:13:60:1e:6f:07:e8:33:37:b5:
                    74:bc:68:a3:0e:0a:d3:7f:5f:64:19:2d:5a:14:26:
                    e2:33:f5:a6:83:8e:bc:cf:62:e1:66:09:da:77:89:
                    5f:a4:eb:b4:bd:32:5d:b4:18:3c:0d:3e:72:88:01:
                    08:62:c4:91:87:f2:28:3a:8b:f6:a7:61:28:3e:d7:
                    0d:d9:3e:d2:f7:c8:ab:86:83:14:54:b4:9c:35:03:
                    a6:5f:97:25:7d:b5:30:42:09:d4:b8:d9:3e:6e:44:
                    37:80:1c:eb:37:cf:30:eb:04:85:28:e4:04:96:b2:
                    35:b6:f8:e5:a5:19:22:7a:ec:97:3a:97:71:2c:05:
                    7f:00:9c:4b:e9:65:6d:1a:23:09:ef:ef:44:a4:0f:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:40:56:04:CE:D6:D9:76:3B:24:36:B4:3C:33:F3:24:2D:96:26:7B
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a383030303a3a2f33342d3335203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:f6:cc:7b:f4:34:6f:53:1b:f8:0b:87:a5:a1:06:60:9d:
         83:f3:fe:89:a6:61:8c:4d:bf:9c:9a:8a:a1:42:8e:9d:2b:9a:
         7f:18:5f:10:7c:bf:65:f4:a5:63:70:8f:f0:ac:54:5a:1c:d9:
         e5:90:6b:f4:a2:f7:6f:82:63:e2:02:c4:11:ea:ea:c3:3b:85:
         8d:99:08:e3:e9:59:0c:10:08:66:db:28:ec:2b:a1:29:6a:8f:
         aa:3e:ee:5d:48:31:09:0c:b2:b1:6d:92:ed:09:5a:36:3d:f3:
         d1:1c:8b:f7:62:75:b7:49:da:88:84:ed:bb:cc:79:35:47:09:
         22:7f:f3:fd:7c:0e:31:83:bd:1e:4f:6a:5a:61:db:42:cb:3c:
         c3:c1:83:d7:e6:28:77:69:37:1a:06:05:d3:c7:45:45:af:b3:
         2d:a5:b8:9a:a2:af:c6:5d:04:9f:6c:4b:7d:4e:16:9c:6a:f7:
         8e:b1:17:77:48:36:d5:d7:eb:ef:3b:3d:ba:18:5f:b1:2c:90:
         29:3b:75:b8:bb:cf:34:ff:e9:cf:dc:81:71:87:18:18:30:aa:
         72:d7:1c:c6:79:9d:7d:cd:bc:9d:f3:d7:12:e9:67:f7:49:86:
         4e:34:f2:fe:8d:01:be:39:ab:4f:9b:1d:11:3e:29:61:78:dc:
         a8:82:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org