Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3337383a3a2f33322d3438203d3e203238323833.roa
File:                     323830343a3337383a3a2f33322d3438203d3e203238323833.roa (raw, json)
Hash identifier:          NEKfS9iNqUAfnHefdqzEuP+LkuxKZbzhW/Y8NER8/Yk=
Subject key identifier:   D0:70:12:87:A4:DA:BB:29:5D:1C:FF:E5:EF:4E:65:A0:C5:81:53:CB
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       1ABD0368929D7B527FCBCCDE773970546EA28B89
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3337383a3a2f33322d3438203d3e203238323833.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28283
IP address blocks:        2804:378::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bd:03:68:92:9d:7b:52:7f:cb:cc:de:77:39:70:54:6e:a2:8b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:c8:29:da:99:4f:09:03:d4:07:93:42:9b:
                    60:f7:1d:16:f6:6a:a9:28:40:66:c9:95:8d:64:fc:
                    05:62:56:ce:df:ed:0f:2e:24:14:5b:12:18:93:4e:
                    61:9f:2b:e9:99:1f:21:ee:e7:2c:f5:44:41:ba:a9:
                    a4:83:ea:5e:33:d1:79:56:30:ca:f4:02:47:fb:ce:
                    48:ed:91:25:36:b1:2c:60:93:e5:6e:bf:5f:41:78:
                    a9:2f:8e:cf:19:ee:64:c6:37:2d:15:48:06:58:73:
                    28:1b:d5:30:35:86:71:5f:8a:29:fc:93:c7:56:cd:
                    e4:31:7b:98:a8:b2:eb:8f:23:28:cb:8d:52:4c:4e:
                    1f:81:24:8d:1d:d9:c4:73:a4:e9:fe:ac:78:45:b5:
                    60:c5:3f:01:d1:fb:25:43:02:d8:2a:3a:ea:b4:43:
                    c0:3c:a7:76:59:7e:2e:2b:ac:3b:25:6e:ad:54:ab:
                    6f:e2:98:75:35:8b:23:5e:bf:64:d7:f7:c7:2c:fc:
                    32:ef:85:b7:40:5e:c3:79:a7:fb:e1:1c:0f:ab:74:
                    54:fd:13:5d:ef:33:61:28:65:af:b9:9c:27:5b:ab:
                    61:3e:f1:23:2a:3b:b3:56:71:97:c1:18:a3:01:f7:
                    c6:88:0d:2d:fa:36:14:51:da:f6:13:0c:06:62:16:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:70:12:87:A4:DA:BB:29:5D:1C:FF:E5:EF:4E:65:A0:C5:81:53:CB
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3337383a3a2f33322d3438203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:378::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:3b:e3:82:3e:88:e9:22:0c:ac:58:74:cf:e5:d0:52:f7:4a:
         e2:0d:a1:84:b3:79:7d:a5:b4:fe:ba:a9:75:00:fb:7c:ae:7e:
         44:aa:c5:9d:1d:42:59:9b:bb:59:d6:f5:3a:8a:b2:31:a1:48:
         17:ea:db:cf:45:71:ad:32:a9:e0:88:3a:c3:3a:8a:a6:86:af:
         28:a8:57:d2:e5:16:08:91:bd:74:e9:56:f9:a4:67:cd:b7:ce:
         82:ee:ae:35:28:8a:d0:07:35:d7:a7:b1:eb:2d:56:f1:79:64:
         8d:9f:af:fd:fe:85:a8:60:31:a6:36:da:48:e3:fd:20:37:d4:
         af:d2:fa:f7:25:65:31:92:35:03:5a:4f:97:bc:1c:de:ba:20:
         09:c9:ee:13:d4:cf:39:d6:82:ac:ef:85:4f:ac:78:69:e6:cc:
         f1:36:8a:f3:c5:50:75:4e:a9:2a:20:ff:d2:b2:01:ba:80:e4:
         68:57:2a:c2:91:e6:6f:36:be:53:d8:7e:e4:eb:23:d8:38:13:
         17:19:b5:de:34:8d:4e:b4:76:10:54:69:16:2e:ba:4a:6c:c0:
         e8:e6:2d:2f:b8:91:de:6a:2d:04:c2:34:3a:0f:93:4e:6a:52:
         09:c5:b4:ba:f9:5c:d7:ec:80:15:b9:ea:9f:7d:a1:1c:15:82:
         e3:12:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org