Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
File:                     323830343a3363303a3a2f33322d3438203d3e203238363035.roa (raw, json)
Hash identifier:          9A16rNBs1paJI+FRJ59j0P8IR8oC5FkvBwHeG77GpVE=
Subject key identifier:   A3:17:52:22:F1:70:9C:8C:EB:34:1D:28:33:15:57:6C:EF:5F:1C:A8
Certificate issuer:       /CN=8C9729F4127E02F7A44B4F2867186BDE45DBA2DB
Certificate serial:       16DB992F1600F84835F2876D7BE6329D61AA486E
Authority key identifier: 8C:97:29:F4:12:7E:02:F7:A4:4B:4F:28:67:18:6B:DE:45:DB:A2:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
Signing time:             Thu 04 Apr 2024 14:25:37 +0000
ROA not before:           Thu 04 Apr 2024 14:20:37 +0000
ROA not after:            Thu 03 Apr 2025 14:25:37 +0000
asID:                     28605
IP address blocks:        2804:3c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.crl
                          rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:db:99:2f:16:00:f8:48:35:f2:87:6d:7b:e6:32:9d:61:aa:48:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C9729F4127E02F7A44B4F2867186BDE45DBA2DB
        Validity
            Not Before: Apr  4 14:20:37 2024 GMT
            Not After : Apr  3 14:25:37 2025 GMT
        Subject: CN=A3175222F1709C8CEB341D283315576CEF5F1CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:1b:18:b8:2a:c4:fd:1f:a8:f5:fe:e5:da:
                    e0:f6:7b:b4:d0:eb:01:7e:49:31:1a:bb:d6:50:4b:
                    d8:6c:bf:14:2c:b0:f7:1c:a8:4c:c1:50:55:96:c7:
                    ee:d6:d8:0a:29:97:0d:d5:10:41:cd:f4:1e:5c:54:
                    a9:53:af:ee:19:6f:50:88:1c:92:1c:18:9c:1d:52:
                    83:95:5b:d1:e1:61:b2:f6:28:a6:66:3c:09:55:1a:
                    c7:c4:6a:6b:b1:54:75:d9:09:eb:4c:83:70:51:14:
                    75:7f:26:3b:8e:a0:0d:24:0b:07:8c:1c:c9:6c:6e:
                    e1:0b:10:03:cd:f1:ba:3e:ea:84:21:5b:59:d9:61:
                    34:b0:47:9c:bb:6d:b8:5e:59:1f:e1:23:19:15:e8:
                    b8:0b:31:55:d8:e2:da:41:22:bd:66:b4:22:eb:5f:
                    d7:1f:ea:3d:ad:d4:b5:8d:30:b9:ed:e5:9f:c6:c3:
                    6f:ed:15:b6:02:ba:74:6c:e1:6b:3c:c6:fd:99:5d:
                    0b:38:32:ea:e6:2a:12:8e:17:bc:4c:0c:17:fa:68:
                    80:a0:0f:46:ff:70:b1:f0:ef:f2:1c:05:43:d0:69:
                    8a:46:30:81:75:96:04:81:7f:4d:ac:27:5a:a3:b8:
                    fc:47:ae:0e:17:ec:cf:6a:f6:5d:96:3c:a6:42:dc:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:17:52:22:F1:70:9C:8C:EB:34:1D:28:33:15:57:6C:EF:5F:1C:A8
            X509v3 Authority Key Identifier:
                keyid:8C:97:29:F4:12:7E:02:F7:A4:4B:4F:28:67:18:6B:DE:45:DB:A2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/323830343a3363303a3a2f33322d3438203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:60:7b:13:1a:f7:78:f7:de:90:1f:b7:15:bd:7e:e4:e8:21:
         58:56:5a:f1:30:fc:d4:b7:cc:3c:34:1d:ee:94:40:a8:f9:89:
         69:37:12:25:a5:40:05:69:df:20:df:21:2a:44:87:fb:24:11:
         45:fa:e2:4c:b4:68:62:45:2f:a2:7d:28:c1:e5:08:46:9a:63:
         6b:2d:2c:1d:33:70:50:d1:7b:bf:7b:cc:f1:f2:9a:22:ec:15:
         0a:2e:97:1c:36:65:b9:79:22:c9:d9:3a:35:b7:50:de:2a:15:
         71:58:7b:29:ad:96:f2:46:26:f9:65:41:29:cc:92:3d:51:66:
         60:d8:ac:94:25:2a:82:60:13:ab:e4:9d:0d:6e:13:22:9e:42:
         76:c6:75:d1:77:28:e4:14:29:10:19:89:37:93:a4:69:20:7e:
         fb:b0:5a:8b:92:da:b7:38:73:fc:a1:85:fd:20:b0:96:25:16:
         2f:6f:f7:35:e9:ed:1d:67:f8:36:20:35:ad:56:8e:2b:37:6f:
         7f:ff:b9:4c:2d:8d:89:31:5f:a3:82:6f:49:37:55:06:3a:7f:
         f5:70:6a:e8:23:31:4a:e1:e2:c7:70:6c:e4:72:96:df:1b:97:
         93:cf:7c:ff:59:be:2c:3b:c6:bf:99:20:19:52:3a:78:ab:b9:
         68:dc:36:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:42 2024 by rpki-client on console-fra.rpki-client.org