Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa
File:                     323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (raw, json)
Hash identifier:          fIcSU5Nj5GaUIL8yma9QszHx5QrEL/vnDBk6PqSgXVY=
Subject key identifier:   06:48:07:69:C2:6A:2B:26:08:45:20:89:F1:7A:19:C9:AC:A0:BB:22
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       740641D254F76EEDF7D82F7F78AE3940B2C1770E
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa
Signing time:             Sun 11 Aug 2024 18:10:43 +0000
ROA not before:           Sun 11 Aug 2024 18:05:43 +0000
ROA not after:            Sun 10 Aug 2025 18:10:43 +0000
asID:                     263085
IP address blocks:        2804:96c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:06:41:d2:54:f7:6e:ed:f7:d8:2f:7f:78:ae:39:40:b2:c1:77:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Aug 11 18:05:43 2024 GMT
            Not After : Aug 10 18:10:43 2025 GMT
        Subject: CN=06480769C26A2B2608452089F17A19C9ACA0BB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:f9:e1:3f:8d:e7:16:e8:91:3f:cc:77:ee:
                    fa:3f:6e:74:21:5a:1e:1f:d8:fe:15:61:0c:d2:22:
                    a8:c7:05:9a:6d:eb:a4:27:24:2d:36:1a:38:c3:94:
                    68:2a:86:b7:87:93:20:35:4b:10:8a:90:b9:9f:53:
                    07:95:b4:ed:60:9a:07:ae:65:0b:6e:81:9b:b5:ac:
                    6b:de:d1:82:b9:79:71:a4:5e:85:cb:ac:c8:65:56:
                    77:e7:e0:e1:b1:67:49:95:60:b3:31:54:37:d0:0e:
                    f1:64:b0:88:56:de:f7:54:e2:77:14:56:0e:6c:84:
                    fe:9c:cd:c3:7e:74:82:dd:eb:65:4d:7d:eb:56:7b:
                    b0:d9:7a:8d:98:59:9a:99:87:38:4e:9b:76:ed:a6:
                    0e:36:dd:d5:ea:9e:3d:a7:bd:25:8d:12:a4:44:6f:
                    42:d1:65:7f:16:2b:62:7e:40:92:b4:34:ff:f1:93:
                    11:1f:f6:54:8f:e1:bd:6c:7a:bb:3b:25:24:d9:99:
                    d5:1c:42:3b:27:c0:10:5d:11:aa:b3:e4:a5:78:f7:
                    9e:d4:8b:a3:b2:d5:f7:38:77:67:81:f3:20:1c:d0:
                    b0:6b:83:c2:3f:5d:be:aa:f3:a5:72:0d:a0:95:3d:
                    fb:7a:2f:03:1b:cf:50:77:eb:bc:60:fa:17:b2:de:
                    64:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:48:07:69:C2:6A:2B:26:08:45:20:89:F1:7A:19:C9:AC:A0:BB:22
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:89:48:e2:2c:2a:df:cc:66:ee:53:11:e9:16:dd:d1:d4:15:
         70:eb:11:c3:90:d0:c6:32:84:32:de:ca:c0:8b:49:51:88:b4:
         fb:9d:f6:60:80:1c:f9:6c:d4:6a:19:a5:71:09:6a:1b:6b:3e:
         26:ba:7d:6c:90:fa:59:5a:bf:bc:58:08:8e:20:38:52:52:17:
         a3:09:f2:65:47:94:f2:65:2e:9e:18:8f:ec:a8:d7:54:87:95:
         55:21:2e:c9:93:64:63:28:fc:17:56:a2:a0:62:bd:94:3f:b8:
         48:05:1f:e5:37:04:c2:8c:b0:44:4d:79:f8:cc:e8:e2:2d:b4:
         f0:99:08:03:c0:5f:45:9c:50:01:10:5c:a8:cb:18:3e:f5:d6:
         cf:7d:97:86:e9:a7:82:c7:5e:81:ed:14:84:1c:e7:cb:3b:9a:
         75:4b:89:34:70:4b:2d:52:8b:62:ec:c5:9a:46:4b:aa:94:92:
         8a:e6:9f:bb:26:44:a3:ea:c0:a7:d9:25:c1:0d:b9:a0:84:53:
         b4:3b:5b:48:c6:8f:2a:bf:2b:11:40:05:cb:d1:96:7f:3b:40:
         21:38:b3:26:09:98:ed:32:37:1b:2e:5c:2a:8e:1f:a2:9b:4c:
         aa:cb:5d:ca:17:90:60:41:28:19:d5:41:56:1d:d8:26:b1:cc:
         3a:a8:a4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:10 2024 by rpki-client on console-fra.rpki-client.org