Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a3a2f33322d3332203d3e20323632363338.roa
File:                     323830343a3736303a3a2f33322d3332203d3e20323632363338.roa (raw, json)
Hash identifier:          56jBmPw61CbKWdaExHlctk5TDLRCfLjsgNuzpnZlGfQ=
Subject key identifier:   32:D7:0B:8E:7D:32:EE:E0:FF:5D:50:9F:D6:BD:CA:F8:B5:D9:F2:88
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       04BCEAE62DEF9C29A52028BF096E9360F6B30103
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a3a2f33322d3332203d3e20323632363338.roa
Signing time:             Thu 04 Apr 2024 01:17:33 +0000
ROA not before:           Thu 04 Apr 2024 01:12:33 +0000
ROA not after:            Thu 03 Apr 2025 01:17:33 +0000
asID:                     262638
IP address blocks:        2804:760::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bc:ea:e6:2d:ef:9c:29:a5:20:28:bf:09:6e:93:60:f6:b3:01:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:33 2024 GMT
            Not After : Apr  3 01:17:33 2025 GMT
        Subject: CN=32D70B8E7D32EEE0FF5D509FD6BDCAF8B5D9F288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:67:a4:2c:0b:0e:4b:ce:6e:e9:1b:08:18:
                    43:a4:56:be:4d:2f:f2:24:32:9e:1b:76:c7:d5:2f:
                    b0:64:69:fa:e1:09:73:ab:03:d6:71:32:53:53:45:
                    fd:c5:c9:88:81:95:de:4c:2c:f1:5e:3e:1a:d8:7b:
                    6b:b4:32:82:9e:48:53:6a:a9:cc:07:97:83:11:a0:
                    e4:e7:15:d7:35:f6:76:79:a3:31:59:97:7b:b6:79:
                    c0:cc:a2:7f:bb:8a:c9:8e:36:2e:fc:c6:98:6c:41:
                    c1:a0:c6:2e:18:d2:cd:ec:3e:e8:c5:03:77:bd:91:
                    2f:e1:11:f6:6e:b2:39:0a:29:b1:24:f9:15:4f:f1:
                    26:5e:00:a5:d9:1c:be:4a:0b:79:db:7e:c5:48:1e:
                    b0:76:66:01:4e:7d:49:64:c9:70:2b:df:ca:f0:03:
                    77:55:a0:b8:41:a2:8d:18:8b:d8:d1:96:71:57:b0:
                    60:96:23:34:c0:d3:b7:5f:96:d1:18:42:04:19:ef:
                    92:15:af:33:1e:3f:5e:4e:f8:fa:3e:f3:e1:92:c8:
                    6c:0f:0c:87:11:52:a3:15:de:7a:6f:fa:6c:dc:a3:
                    52:af:f7:d0:34:49:b0:ca:db:b6:cb:4d:5d:5a:32:
                    1f:ef:ca:3b:42:26:d6:eb:a4:a5:f9:7c:b1:0d:23:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:0B:8E:7D:32:EE:E0:FF:5D:50:9F:D6:BD:CA:F8:B5:D9:F2:88
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a3a2f33322d3332203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:760::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:3a:d7:a3:75:1b:d3:7e:47:d5:24:2a:af:21:50:0f:26:00:
         48:cf:4f:9b:65:16:48:d8:21:c4:93:b6:89:19:ed:42:11:f0:
         00:89:66:55:dc:c6:a8:40:7c:5c:e2:18:c5:c4:2d:35:ca:a3:
         eb:d2:f8:56:ef:af:0d:7f:01:12:9e:da:d2:b7:21:94:c6:71:
         e4:76:31:9d:25:6a:b4:26:07:41:7b:3f:19:b9:85:ab:43:95:
         24:98:3f:e7:3e:2f:d2:25:05:c3:cc:66:97:45:73:1f:0e:09:
         6e:1f:48:f9:d5:02:11:6f:c3:6e:fb:6f:24:c6:67:74:be:fb:
         ab:a8:55:f6:a4:08:0d:6d:39:a8:e3:38:a3:cd:f5:a3:08:6d:
         0c:3b:eb:37:cb:46:5a:95:2b:73:84:a5:5b:7f:e8:7a:12:29:
         b8:7c:f2:c1:44:46:be:c4:17:ad:27:d4:2a:18:65:61:e1:b3:
         0f:f6:fa:29:04:6b:30:62:60:78:7b:c2:0c:f1:e6:25:39:28:
         8a:ce:d3:91:10:7c:ea:63:94:d5:86:03:58:cd:90:7e:10:b3:
         d5:a9:3e:e5:e2:ba:c0:a7:ad:37:03:9d:56:f0:45:8e:50:54:
         78:f1:28:9d:48:bb:cf:5c:5b:b0:fb:7f:37:0a:ba:64:8a:78:
         c9:a7:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:36:56 2024 by rpki-client on console-fra.rpki-client.org