Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33342d3334203d3e20323638373930.roa
File:                     323830343a356162343a3a2f33342d3334203d3e20323638373930.roa (raw, json)
Hash identifier:          3DYycFudg9z6oy3gmnuPACqMikuevH1EFgw4N0pcANU=
Subject key identifier:   5C:E4:80:B7:A2:23:2C:36:11:36:E9:25:23:55:BD:85:28:68:AA:0B
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       6759C96D7B0A6B5195A00621027714B8A1B4E68B
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33342d3334203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:20 +0000
ROA not before:           Wed 15 May 2024 14:28:20 +0000
ROA not after:            Wed 14 May 2025 14:33:20 +0000
asID:                     268790
IP address blocks:        2804:5ab4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 02:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:c9:6d:7b:0a:6b:51:95:a0:06:21:02:77:14:b8:a1:b4:e6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:20 2024 GMT
            Not After : May 14 14:33:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:95:d2:e8:ee:1a:67:cd:ed:b8:87:67:35:
                    d5:f0:eb:82:b9:aa:e1:64:77:45:0c:2b:55:a0:a6:
                    ba:70:ba:59:6d:65:52:dd:e1:03:b5:73:83:90:b5:
                    dd:d0:ef:43:dd:28:3d:3f:f6:b3:e2:ff:73:2e:10:
                    33:5c:9f:01:8b:70:51:eb:9d:c3:39:13:1d:7a:96:
                    ba:27:b6:b4:03:69:f6:29:e8:a0:28:93:8f:cd:d9:
                    33:27:e4:3b:ab:f3:b8:36:81:26:38:7b:82:77:5d:
                    a8:7e:dd:a2:46:7c:3e:15:f5:bc:2e:94:ca:e4:c2:
                    09:c4:e2:65:48:4e:e8:ea:70:dc:3f:e9:5d:91:fa:
                    a0:75:87:6d:0a:b9:de:bb:0a:73:ba:24:ac:df:06:
                    a4:92:5d:f4:3d:3e:7c:bf:4a:30:be:32:35:8d:24:
                    36:f4:2d:d3:d3:01:9b:5f:5b:fc:30:90:14:9e:f6:
                    a9:cf:d1:58:db:56:5c:de:a1:10:dc:00:e8:97:57:
                    fd:ed:95:2a:83:b3:1f:19:f6:52:28:b7:c8:e9:a1:
                    d0:6b:17:15:9e:39:ec:cb:e3:12:20:52:b8:18:24:
                    6e:d1:11:39:8f:f8:4d:30:d0:40:1c:55:43:bf:28:
                    15:8d:57:f7:48:99:56:75:e4:d9:8a:d4:e4:96:cd:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E4:80:B7:A2:23:2C:36:11:36:E9:25:23:55:BD:85:28:68:AA:0B
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33342d3334203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:72:5e:fe:99:13:86:8c:68:a6:bf:d7:cf:08:26:f0:82:29:
         e0:b0:b7:dd:fe:f0:e2:82:9d:90:f1:26:3e:46:53:b9:bc:0a:
         46:50:4d:d7:8d:04:46:a2:93:12:0d:76:32:83:b4:66:99:92:
         21:4c:51:29:ed:0a:60:6f:9c:6a:56:1d:90:dd:9b:0b:40:62:
         f4:3c:0b:fa:1d:08:a4:ff:30:68:fd:3b:fc:a7:46:43:97:4f:
         e9:07:41:d1:2b:a8:64:00:6c:26:8d:77:2a:11:cd:5f:c3:c6:
         65:b9:ab:46:d7:0a:9e:d7:2f:3a:4c:25:fb:fd:f1:42:7e:04:
         5e:3f:c7:a9:2a:8b:01:c6:34:b9:9f:ca:c7:43:07:bb:de:f7:
         7e:7b:59:3b:f9:32:7f:ca:18:e3:37:a2:c2:d3:d3:68:82:87:
         ea:0d:6a:7f:8e:82:7f:c7:87:6c:d2:f6:14:ca:a2:a5:4c:82:
         72:a7:7c:42:f2:50:55:3d:24:76:c3:39:6b:0f:a6:00:bf:ab:
         96:d0:6d:35:c5:5f:05:25:5c:52:9f:10:82:20:b7:0d:3c:68:
         f5:4a:1b:15:dd:97:0e:2a:44:70:00:18:ac:e9:98:46:d4:26:
         33:cf:7b:86:85:a7:2f:76:4c:7d:6d:e3:80:97:33:0c:52:db:
         ba:d9:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:54 2024 by rpki-client on console-fra.rpki-client.org