Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa
File:                     323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (raw, json)
Hash identifier:          6m+agPtABigEOnJRv6OBijMKpxHf1RpvCreL2kxMlQw=
Subject key identifier:   EB:60:3F:9C:96:89:49:DF:9F:EB:BA:73:6A:66:08:6A:7E:71:F7:4B
Certificate issuer:       /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial:       3E53F1EC9D89C4BC7CDB1720D624A46DC776A940
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa
Signing time:             Thu 04 Apr 2024 10:05:09 +0000
ROA not before:           Thu 04 Apr 2024 10:00:09 +0000
ROA not after:            Thu 03 Apr 2025 10:05:09 +0000
asID:                     266084
IP address blocks:        2804:3a58::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
                          rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:53:f1:ec:9d:89:c4:bc:7c:db:17:20:d6:24:a4:6d:c7:76:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
        Validity
            Not Before: Apr  4 10:00:09 2024 GMT
            Not After : Apr  3 10:05:09 2025 GMT
        Subject: CN=EB603F9C968949DF9FEBBA736A66086A7E71F74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:d6:91:02:20:73:3b:c8:7e:6f:3a:ff:5c:
                    42:c2:f3:c2:59:60:22:df:86:c3:78:85:28:ee:fb:
                    86:b0:33:53:3a:ac:66:cc:61:1b:4b:b7:a5:4a:e1:
                    84:cd:9f:b0:17:47:c9:31:c0:8c:15:e1:d3:9c:ad:
                    2e:50:4b:1c:0c:0f:d0:eb:1f:2f:de:e3:f6:1a:35:
                    57:16:aa:44:5f:85:74:c9:02:8e:4c:44:64:41:54:
                    4e:ad:93:73:77:d5:95:ad:db:d1:22:5c:e9:89:4f:
                    d8:27:6e:5c:0a:44:68:77:c2:82:fd:eb:5c:28:bf:
                    0c:2b:9a:bd:a3:7c:37:d9:8f:03:5b:d8:9c:ef:41:
                    b9:4e:d3:27:bb:ca:93:3f:ac:77:2b:08:27:b3:0e:
                    35:1f:f7:01:83:5d:0b:ff:28:ea:aa:e1:34:ab:a2:
                    aa:42:ef:3b:05:da:e5:d1:15:a5:e2:79:5e:f4:37:
                    aa:c9:22:28:1a:a5:9f:a5:23:e7:59:95:7b:69:5f:
                    17:00:b6:00:5a:63:30:0c:0c:3c:a1:1d:94:81:19:
                    f1:1c:10:74:71:16:18:ac:52:0d:81:10:ee:21:a6:
                    55:00:1d:84:8f:51:fe:ca:52:27:d0:ad:91:9d:7b:
                    f6:4a:2b:90:51:9f:43:d9:85:51:d4:82:a6:02:17:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:60:3F:9C:96:89:49:DF:9F:EB:BA:73:6A:66:08:6A:7E:71:F7:4B
            X509v3 Authority Key Identifier:
                keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:12:7f:f1:80:7b:fd:36:e9:48:63:ff:9a:8e:ec:10:b9:dd:
         ec:39:c5:36:32:32:09:48:94:2c:7e:43:35:04:09:23:74:fc:
         e1:9a:5e:cc:16:01:d9:a1:6f:5a:65:a0:2b:2d:8a:50:f2:68:
         22:19:da:9b:d0:93:1b:a5:01:82:23:98:db:78:19:a8:fc:e4:
         e5:1a:0e:fd:01:48:cb:ff:35:8c:f7:18:01:89:c6:01:59:f8:
         fc:2f:7e:63:0f:94:80:7b:fe:a0:fc:4d:43:5e:fe:22:fe:dc:
         71:a7:ad:00:7f:55:37:13:c5:b1:46:6b:0a:8a:d3:3d:cf:ef:
         f1:76:73:30:65:01:37:0a:ae:8d:da:78:b2:70:b6:39:45:8e:
         1d:99:61:57:43:a1:2c:5f:10:3b:64:01:31:c9:81:a6:5d:06:
         ee:e6:d9:f1:18:ac:f5:cb:72:12:1e:01:a7:19:04:a6:95:8c:
         60:1a:66:38:8a:b3:96:08:b8:14:1d:48:7c:ac:16:c5:e6:34:
         9c:1b:b3:ae:20:7e:b1:da:82:92:c2:bf:1e:d1:ec:c5:84:6b:
         d1:cd:a8:3f:26:1e:a3:d3:93:18:14:f4:81:67:68:7a:d9:33:
         fb:f9:e9:a8:32:46:66:f9:90:22:4c:30:38:b5:04:54:f9:15:
         d6:41:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:48 2024 by rpki-client on console-ams.rpki-client.org