Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa
File:                     323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (raw, json)
Hash identifier:          yLxLuOXmf5YgOjb2HzovX5BV9ILPjNcibxqffb/vnzg=
Subject key identifier:   BE:6A:45:49:8A:49:60:38:88:B2:B8:6F:AD:EB:B8:29:DC:5B:C7:E4
Certificate issuer:       /CN=FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33
Certificate serial:       1EA910B87F444DD6E5E0CBE918DC9A123688C067
Authority key identifier: FB:46:1D:57:9A:CE:C1:68:E1:A2:51:E1:0C:7B:BC:D0:BF:4E:7B:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa
Signing time:             Fri 02 Aug 2024 18:03:25 +0000
ROA not before:           Fri 02 Aug 2024 17:58:25 +0000
ROA not after:            Fri 01 Aug 2025 18:03:25 +0000
asID:                     263442
IP address blocks:        2804:11d4::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.crl
                          rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a9:10:b8:7f:44:4d:d6:e5:e0:cb:e9:18:dc:9a:12:36:88:c0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33
        Validity
            Not Before: Aug  2 17:58:25 2024 GMT
            Not After : Aug  1 18:03:25 2025 GMT
        Subject: CN=BE6A45498A49603888B2B86FADEBB829DC5BC7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:0d:5b:bd:c9:fe:99:13:09:a6:c3:9b:1a:
                    cb:aa:8d:18:12:7a:aa:3b:01:61:21:14:73:95:91:
                    56:3f:44:b7:7a:76:68:7b:24:a8:f3:56:26:e3:96:
                    97:1c:f6:68:65:88:94:3c:16:ff:5d:ed:81:8f:6c:
                    c5:e8:32:b3:ac:9e:9b:a4:89:6b:58:1e:05:4f:7e:
                    84:93:f4:7b:5e:1a:e3:be:2e:5a:13:c2:dc:ab:ad:
                    32:93:4c:71:d7:9e:f1:70:a8:b7:1a:ca:fc:07:ba:
                    39:81:f1:66:18:b9:c9:35:80:54:50:f9:d1:20:2b:
                    cf:52:30:ee:d1:dc:78:98:5d:ef:b7:53:ed:be:84:
                    07:39:33:f5:29:b6:4d:15:65:d2:96:01:bc:9b:ed:
                    c2:7d:47:7c:54:ad:b5:30:10:f5:f2:41:17:22:cf:
                    50:d3:9d:2a:6a:55:12:f1:4f:ef:92:18:3b:f2:84:
                    30:4f:f9:17:05:0c:b6:43:ce:92:4c:c1:e8:ba:f9:
                    e4:ea:46:70:cf:1c:a0:d2:32:e5:b3:e0:2b:54:e9:
                    cc:84:ec:6c:8c:5f:77:45:61:d4:76:4e:a2:0c:6b:
                    f1:39:b8:ef:5a:97:ce:98:25:1a:1d:7b:10:f8:4a:
                    5e:b5:9f:e8:56:ee:00:22:8d:f1:81:1a:d4:b7:bf:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6A:45:49:8A:49:60:38:88:B2:B8:6F:AD:EB:B8:29:DC:5B:C7:E4
            X509v3 Authority Key Identifier:
                keyid:FB:46:1D:57:9A:CE:C1:68:E1:A2:51:E1:0C:7B:BC:D0:BF:4E:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/323830343a313164343a3a2f33322d3336203d3e20323633343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:d6:35:20:28:b1:7d:b5:d1:5a:b0:a1:20:3c:da:75:a0:
         b3:8c:8a:7c:73:10:3c:5c:68:4f:0b:db:32:6c:e6:1e:2c:07:
         55:b3:b6:69:d0:93:4d:59:19:d3:9a:90:49:9b:f5:87:75:6a:
         4e:d5:b1:f5:d5:86:e8:d7:de:2d:aa:cb:fd:e6:e0:03:88:8d:
         07:52:7e:cf:e2:fd:68:01:ce:87:0c:84:98:8f:35:7b:99:96:
         a1:09:6d:5f:d5:31:32:f9:0b:8b:e8:2d:78:22:de:53:1a:30:
         76:3b:f6:eb:a0:fd:d7:6c:67:1b:75:66:46:3a:7d:7a:5b:53:
         14:7a:73:8a:5c:9d:55:b6:1f:bf:bd:10:08:f0:ee:fa:6b:bc:
         6d:3f:fc:91:92:50:b5:8c:3f:aa:74:e1:b7:b3:b1:41:47:c8:
         11:5a:dd:88:79:a8:b8:63:98:e2:21:08:00:bb:d9:f4:36:f7:
         af:79:b3:07:32:3e:14:15:29:0c:fa:0a:2d:ff:3a:a7:60:97:
         e8:ce:d7:66:50:1d:a1:b3:b7:6f:95:66:4a:86:a4:2c:a1:5a:
         1b:81:fb:c3:cc:2a:3b:66:33:04:b2:79:17:1d:35:20:a9:3e:
         18:c9:81:05:79:ce:a0:34:ce:38:f7:eb:57:2d:85:37:ba:40:
         7c:fa:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org