Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/323830343a386531303a3a2f33322d3332203d3e20323733343030.roa
File:                     323830343a386531303a3a2f33322d3332203d3e20323733343030.roa (raw, json)
Hash identifier:          Fr7SyBRZnFGaRz7migvS4HVXeoHBhhW+vPC9x3CeWgY=
Subject key identifier:   CA:D1:50:84:E4:44:70:D1:1C:2D:9C:83:24:0F:13:FD:FF:D2:6D:2D
Certificate issuer:       /CN=58BFD58B56019A8D8D70578235BD8FA5BDB8F825
Certificate serial:       7769048E785979C04EC8324876F535D7EE8535D5
Authority key identifier: 58:BF:D5:8B:56:01:9A:8D:8D:70:57:82:35:BD:8F:A5:BD:B8:F8:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/323830343a386531303a3a2f33322d3332203d3e20323733343030.roa
Signing time:             Thu 27 Jun 2024 12:11:05 +0000
ROA not before:           Thu 27 Jun 2024 12:06:05 +0000
ROA not after:            Thu 26 Jun 2025 12:11:05 +0000
asID:                     273400
IP address blocks:        2804:8e10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.crl
                          rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:69:04:8e:78:59:79:c0:4e:c8:32:48:76:f5:35:d7:ee:85:35:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BFD58B56019A8D8D70578235BD8FA5BDB8F825
        Validity
            Not Before: Jun 27 12:06:05 2024 GMT
            Not After : Jun 26 12:11:05 2025 GMT
        Subject: CN=CAD15084E44470D11C2D9C83240F13FDFFD26D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:77:39:8d:3d:df:ad:87:d4:15:5b:e0:99:
                    bd:fd:f2:31:54:23:cd:39:bc:1b:ac:a0:63:87:50:
                    83:f8:d2:03:55:b8:d1:70:43:a6:65:5d:bd:c0:60:
                    48:ed:60:4f:65:01:d7:2a:3e:1b:d3:51:d5:c2:cb:
                    fd:68:2c:4a:72:1e:cc:0f:18:e9:7a:09:b0:7a:72:
                    01:18:79:5e:55:7b:0c:4a:0e:f5:92:5c:7e:6b:83:
                    ff:c4:4f:a2:40:cb:8f:09:58:84:fb:68:d0:14:52:
                    6d:3a:63:3a:17:c1:db:b7:53:62:0a:0a:61:a2:b9:
                    ea:93:92:3f:9c:a2:40:a0:32:83:06:8a:9a:ff:45:
                    73:ab:ba:4a:cd:59:20:d4:f2:eb:3b:e7:d7:73:51:
                    41:7e:76:50:63:52:e1:06:56:55:de:09:7e:ba:01:
                    3a:22:50:91:82:1c:3c:23:1a:54:fc:e5:ad:0b:7a:
                    1f:58:01:2d:74:7c:4c:d7:c1:05:b6:8b:37:75:43:
                    b9:0b:7b:75:43:35:68:2f:57:45:54:b2:fb:f4:69:
                    07:25:bc:0a:33:57:b8:d1:0f:e0:62:33:e9:87:6b:
                    73:fd:03:79:b1:71:c8:b6:00:8f:c6:57:1a:47:89:
                    fd:ad:3f:ec:c7:3b:c9:f6:4e:e7:34:3a:1a:a5:10:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D1:50:84:E4:44:70:D1:1C:2D:9C:83:24:0F:13:FD:FF:D2:6D:2D
            X509v3 Authority Key Identifier:
                keyid:58:BF:D5:8B:56:01:9A:8D:8D:70:57:82:35:BD:8F:A5:BD:B8:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/323830343a386531303a3a2f33322d3332203d3e20323733343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:87:f5:de:89:c6:12:f9:59:9a:37:a4:5b:70:10:1d:c5:14:
         5e:33:9c:80:90:28:73:de:c2:65:6f:dc:58:29:7f:c0:63:29:
         50:93:bb:04:a8:08:41:ae:21:8f:6e:94:37:19:4f:bb:d5:a3:
         65:39:1d:ff:db:7b:89:22:34:32:dc:de:6f:f3:dd:b0:c1:1b:
         87:e8:01:79:85:d9:89:1f:0e:50:fa:02:07:47:04:e0:ec:09:
         09:9b:6f:05:fb:f9:86:aa:57:20:42:cf:6c:2d:fc:66:c2:f1:
         cd:00:e4:57:a8:f5:40:71:f4:ff:4d:68:ed:21:4a:63:8e:ee:
         72:0d:e4:22:f9:d4:48:c1:6a:d3:00:d8:16:ff:69:e9:03:e3:
         16:30:b1:c3:58:98:97:40:c8:7d:b4:81:84:c7:d0:38:17:ff:
         0d:d3:45:f1:24:db:cd:17:20:70:c9:1a:86:2a:b6:b5:99:6a:
         1f:df:83:08:4e:77:a9:f9:00:d9:1a:b4:c0:26:a3:6b:ee:e8:
         c1:70:01:60:ac:bd:45:87:fc:7e:ff:9d:44:7a:9f:83:53:ce:
         d0:d9:06:ff:4a:aa:ce:f7:54:52:6a:6c:23:50:ac:06:b0:69:
         c2:db:a9:df:87:ca:9f:17:55:f1:14:71:99:5b:43:8a:4b:42:
         6c:78:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org