Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa
File:                     323830343a323164383a3a2f33322d313238203d3e20323634353737.roa (raw, json)
Hash identifier:          VlCEU980WXxOtuXmNUez0jvxgIh/gKbUXtb5K8HIQds=
Subject key identifier:   59:98:04:D0:10:06:18:B1:39:06:63:32:F5:CD:03:D3:A8:A4:B4:FB
Certificate issuer:       /CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
Certificate serial:       06BE40D1E56A06476CE8DE5E312C19E31FC57D5A
Authority key identifier: 05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa
Signing time:             Thu 05 Sep 2024 17:28:31 +0000
ROA not before:           Thu 05 Sep 2024 17:23:31 +0000
ROA not after:            Thu 04 Sep 2025 17:28:31 +0000
asID:                     264577
IP address blocks:        2804:21d8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:be:40:d1:e5:6a:06:47:6c:e8:de:5e:31:2c:19:e3:1f:c5:7d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
        Validity
            Not Before: Sep  5 17:23:31 2024 GMT
            Not After : Sep  4 17:28:31 2025 GMT
        Subject: CN=599804D0100618B139066332F5CD03D3A8A4B4FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:22:a1:7b:6b:ff:0a:52:eb:39:cd:c9:ea:
                    e2:1c:19:69:71:76:a6:67:bf:c6:75:22:63:9d:76:
                    c4:05:4d:e7:57:12:c2:59:f4:ce:50:5d:a1:da:54:
                    b7:f7:cf:54:2a:8a:30:ab:c0:2c:7a:5b:96:75:ef:
                    b9:5b:89:69:ea:d4:72:cc:5e:1a:34:29:21:ce:97:
                    59:51:a2:0e:aa:15:7f:5c:41:1e:89:ad:1b:07:03:
                    64:c5:ef:fa:6f:d3:22:c0:d6:c5:89:02:d3:20:e1:
                    eb:2e:42:fa:14:46:13:e1:dc:cf:30:67:23:ba:5f:
                    c3:3c:9a:70:1f:2c:6e:9a:82:e3:17:69:5e:47:99:
                    f7:1c:f0:ed:ee:f1:06:09:bf:9b:9f:d6:7e:9e:04:
                    5f:6d:e6:93:fa:aa:f9:b0:83:22:f5:0c:05:b5:38:
                    25:d7:c2:2d:b6:ce:4a:5f:20:57:19:a2:23:a5:37:
                    98:7b:e1:01:29:a6:b6:9c:06:d1:b9:2c:28:13:66:
                    01:6f:8d:90:b3:27:b3:e6:15:ba:c2:a7:fb:d6:3f:
                    82:fe:a6:de:55:47:19:6c:58:11:c2:f8:8b:43:99:
                    f2:c8:59:06:af:c3:ee:fe:d7:2a:ae:d6:c1:ed:5f:
                    89:36:c8:78:c2:26:8e:b7:ed:0c:b3:5e:b0:f8:5d:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:98:04:D0:10:06:18:B1:39:06:63:32:F5:CD:03:D3:A8:A4:B4:FB
            X509v3 Authority Key Identifier:
                keyid:05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:b6:f9:af:80:c2:16:4b:c7:84:cc:7a:17:5b:96:b8:ca:
         7f:74:ac:dd:e5:78:03:4d:31:49:1e:74:d8:59:8b:0f:84:3c:
         0b:a9:3b:7d:c7:9a:d1:0d:e2:90:04:dc:07:eb:45:ca:80:a7:
         02:db:9c:f1:81:42:47:62:5d:f8:75:f3:90:c0:2d:a0:1e:55:
         6c:d7:10:18:c6:4a:19:b0:fd:a1:84:78:12:74:05:79:db:8f:
         32:a2:77:60:46:1d:06:a1:79:1c:4e:37:9d:c6:90:c2:da:69:
         53:7f:f6:d7:50:f5:31:bb:5e:0c:50:6e:db:86:3f:92:74:fb:
         cc:30:4b:74:f1:a8:01:1c:9b:35:66:08:7e:4d:77:4a:a1:72:
         e8:18:ad:07:4b:db:6e:49:44:72:ad:89:2c:22:26:56:fd:16:
         b0:ac:4d:65:07:0e:10:b4:cc:f8:b7:a2:4f:05:93:0d:9c:f5:
         d4:10:3a:1e:24:df:e7:79:7c:d2:03:2d:06:a3:0b:d4:51:a6:
         10:3f:6c:de:e1:36:be:70:ec:1e:a2:7c:ed:2c:2f:54:89:5a:
         0c:19:1c:1c:c2:4b:21:d0:ec:c5:56:ea:40:ba:91:bf:26:1e:
         d9:6d:57:42:c7:f9:0d:8d:89:11:09:80:9c:9b:2d:9d:9a:21:
         f0:5c:16:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org