Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa
File:                     323830343a6466383a3a2f33322d3634203d3e203532353332.roa (raw, json)
Hash identifier:          nvEKPWbJq/SVuBzG6hfQZ0xuG5+mUQg3/ymLLJfWHj0=
Subject key identifier:   65:C7:C8:D8:74:FF:6A:9F:35:0A:09:DB:0B:01:A2:C9:FB:DB:26:C6
Certificate issuer:       /CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
Certificate serial:       6C1A3DE56D33896D25B8A24DCF4E8F3D92C3D651
Authority key identifier: B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa
Signing time:             Tue 02 Jul 2024 17:19:59 +0000
ROA not before:           Tue 02 Jul 2024 17:14:59 +0000
ROA not after:            Tue 01 Jul 2025 17:19:59 +0000
asID:                     52532
IP address blocks:        2804:df8::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1a:3d:e5:6d:33:89:6d:25:b8:a2:4d:cf:4e:8f:3d:92:c3:d6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
        Validity
            Not Before: Jul  2 17:14:59 2024 GMT
            Not After : Jul  1 17:19:59 2025 GMT
        Subject: CN=65C7C8D874FF6A9F350A09DB0B01A2C9FBDB26C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:ff:89:59:2e:95:82:98:49:88:df:e8:74:
                    40:d1:7a:89:35:9f:01:79:c8:38:11:68:e4:e5:b2:
                    ec:d7:e4:9d:3a:c8:a8:d9:a9:97:6d:71:1b:60:49:
                    fa:fc:80:1f:8a:52:31:a2:24:70:cc:00:a9:2c:eb:
                    5b:8a:5e:f4:83:85:3d:5a:c8:2e:15:6b:7f:d7:be:
                    27:14:0b:c1:cb:11:1a:6d:76:56:a0:9e:ec:0a:a3:
                    7f:79:58:1d:0e:d7:57:ad:79:30:bc:49:76:fe:c9:
                    cc:c4:64:5b:4c:bd:76:a2:d7:e5:60:fe:a5:a6:30:
                    96:37:98:db:9b:03:1b:85:2a:4f:46:e7:f8:f3:25:
                    c1:5d:fa:f1:59:d3:1a:6d:66:19:33:68:32:af:4b:
                    e9:66:f6:40:05:10:a0:ce:9b:68:d1:bb:a6:1e:3e:
                    99:6e:8b:a4:58:fd:e7:ee:97:c9:ff:32:dc:ab:17:
                    02:d8:d7:a6:48:a9:a4:95:2e:cc:f7:a5:2c:72:25:
                    fb:2b:e3:39:c3:ae:71:88:8a:35:ff:cc:7c:33:8f:
                    40:87:c5:ac:eb:97:4f:33:3f:11:7e:91:e6:6d:74:
                    47:f8:10:74:1e:8f:b1:f4:99:5d:0c:68:54:02:f3:
                    b5:55:57:e8:80:a1:9c:5e:10:f6:fa:a9:f8:fd:78:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C7:C8:D8:74:FF:6A:9F:35:0A:09:DB:0B:01:A2:C9:FB:DB:26:C6
            X509v3 Authority Key Identifier:
                keyid:B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:ba:d1:74:fa:35:18:04:84:ad:c1:ba:f5:c6:9e:e8:e7:
         7e:c7:b5:ca:8d:7f:ef:7e:89:35:46:2c:c7:c8:87:03:11:07:
         08:14:18:6a:d4:61:1a:0b:81:9f:2f:b0:95:8d:37:d0:fa:f8:
         94:1d:fe:f9:1a:06:1f:ca:8e:5e:3f:79:97:1d:77:be:96:59:
         87:a0:51:73:0f:47:3e:3f:a3:5f:1b:61:f8:5d:11:70:55:ed:
         65:fd:6c:72:30:b3:e8:a0:ac:a9:62:7d:39:de:84:84:b3:59:
         5f:1b:52:dd:d9:41:15:bd:ca:c4:9a:15:96:15:c3:64:d6:92:
         1b:21:f7:c8:31:f1:25:49:6d:1c:81:18:1a:3a:57:1d:96:f7:
         89:90:0f:09:a7:59:7d:a2:20:8b:35:81:21:3a:9b:25:2d:3a:
         af:d2:60:21:a7:2e:24:fe:88:e2:7c:a4:23:a0:99:7d:2e:f0:
         91:2c:d7:9d:be:d8:4a:e4:6b:64:55:9d:da:ff:35:e5:47:57:
         c2:ac:9b:d2:d3:7b:34:a6:76:c6:b0:87:fd:e7:0b:0a:e5:b1:
         4e:67:e1:b3:b5:83:da:ad:e8:80:ce:63:e2:e1:da:a0:a1:eb:
         15:87:db:1c:b0:7b:d4:bd:77:e2:95:7c:7f:a9:6f:e1:d3:d3:
         35:f3:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org