Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/323830343a3865383a3a2f33322d313238203d3e20323632333939.roa
File:                     323830343a3865383a3a2f33322d313238203d3e20323632333939.roa (raw, json)
Hash identifier:          eyXsy1sjLZOXreLwv0aJhpBoSiUAB6+TQd15rExsp8A=
Subject key identifier:   9A:27:08:BE:A7:B9:D7:16:DF:BC:36:FB:5E:1C:A4:9A:F2:98:4C:DD
Certificate issuer:       /CN=E19169B2B60C1E8B695976AA3CFA8F061F06CA76
Certificate serial:       2C7FE771E7282466E47AA70B9125A1D30265CEC7
Authority key identifier: E1:91:69:B2:B6:0C:1E:8B:69:59:76:AA:3C:FA:8F:06:1F:06:CA:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/323830343a3865383a3a2f33322d313238203d3e20323632333939.roa
Signing time:             Thu 28 Nov 2024 18:56:30 +0000
ROA not before:           Thu 28 Nov 2024 18:51:30 +0000
ROA not after:            Thu 27 Nov 2025 18:56:30 +0000
asID:                     262399
IP address blocks:        2804:8e8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.crl
                          rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 19:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7f:e7:71:e7:28:24:66:e4:7a:a7:0b:91:25:a1:d3:02:65:ce:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19169B2B60C1E8B695976AA3CFA8F061F06CA76
        Validity
            Not Before: Nov 28 18:51:30 2024 GMT
            Not After : Nov 27 18:56:30 2025 GMT
        Subject: CN=9A2708BEA7B9D716DFBC36FB5E1CA49AF2984CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:69:3c:79:f0:9c:ae:d6:33:19:92:49:44:
                    76:9b:cb:8c:11:b5:bf:0f:40:91:a6:88:2c:37:47:
                    04:a2:1f:69:f0:8f:3c:ff:ec:34:5b:60:f9:50:44:
                    70:fa:dc:8c:0e:ee:c7:eb:ad:10:4b:cd:27:61:99:
                    fd:4f:cc:c1:0b:70:b8:01:ef:fb:58:49:4a:8c:b1:
                    25:9b:b4:d4:ab:95:ac:9a:e4:62:f8:54:13:17:ba:
                    23:1f:b2:70:e0:27:fc:8e:32:7d:33:4b:12:40:98:
                    af:0b:99:3d:56:2a:55:79:81:8f:09:88:b8:e6:b0:
                    e2:a5:9d:5d:8b:51:8c:e7:e5:7b:2e:4f:74:56:19:
                    59:a9:f8:10:e2:21:fb:ee:2a:db:60:ff:7c:ef:af:
                    8d:d6:66:45:08:dd:6e:bd:44:c5:20:dc:12:0d:6d:
                    ff:b8:aa:b3:ec:98:c5:2d:ca:5e:93:8b:dc:02:c5:
                    dc:89:60:50:35:59:ae:4b:87:c5:fe:3a:2d:87:12:
                    a9:76:b8:dd:43:de:fe:ad:d2:9f:be:08:1c:52:ac:
                    a1:b0:77:e1:59:a6:11:7a:70:d9:4e:e8:87:a5:4d:
                    67:71:79:00:28:57:a2:02:2c:ed:e2:18:a1:91:d4:
                    72:bf:86:80:6e:43:b6:ab:53:ea:8a:af:b0:8c:a2:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:08:BE:A7:B9:D7:16:DF:BC:36:FB:5E:1C:A4:9A:F2:98:4C:DD
            X509v3 Authority Key Identifier:
                keyid:E1:91:69:B2:B6:0C:1E:8B:69:59:76:AA:3C:FA:8F:06:1F:06:CA:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/323830343a3865383a3a2f33322d313238203d3e20323632333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:c7:56:58:5c:d8:32:8a:ed:b1:7b:30:f9:04:0f:13:71:
         f2:f7:63:2a:61:48:de:c9:98:d8:c5:e7:e3:5e:28:00:21:f7:
         54:7e:7d:2f:39:91:e4:c7:43:7b:21:9d:4f:0f:40:8a:00:1b:
         a9:4e:64:07:d7:d2:ef:96:a0:2e:08:53:da:d9:24:55:49:bc:
         d1:23:a5:72:6b:4e:67:91:fb:bd:a4:fd:5d:bd:69:a9:4e:61:
         62:04:23:a1:d2:bf:4c:cf:5e:26:51:f7:ed:98:d8:75:66:b3:
         bf:26:01:18:90:c3:6d:82:41:12:9d:65:02:50:38:4c:e7:f4:
         b9:8d:d1:74:50:0b:ed:58:9f:74:96:4c:7a:0b:12:e8:92:89:
         d6:c1:ec:c7:5a:22:7c:4f:8a:6a:9e:a5:ec:d6:02:40:7d:6a:
         82:b1:c1:11:21:df:9f:02:08:fd:92:2d:5d:1c:35:aa:dd:83:
         40:8c:a5:35:83:dc:74:03:f7:59:be:62:73:5f:7b:4a:26:ab:
         39:86:91:7f:7e:84:6c:0e:92:29:54:ed:c7:ea:f4:5b:22:2a:
         95:3d:df:31:3f:67:cd:10:a3:6e:de:93:8c:1d:a8:a4:50:7e:
         97:6d:1f:b6:79:5a:d6:65:7f:d2:18:22:58:42:60:5e:c7:08:
         87:1e:7e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:51 2025 by rpki-client on console.sobornost.net