Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030303a3a2f33342d3334203d3e20323732323532.roa
File:                     323830343a383434633a343030303a3a2f33342d3334203d3e20323732323532.roa (raw, json)
Hash identifier:          CSJLMOev3U58cx7dqFaWtqmRXfIBrtOjswhd26VkDmk=
Subject key identifier:   D5:8B:58:CE:49:E4:84:DC:5F:74:2F:09:7C:ED:2A:49:E3:5F:64:B9
Certificate issuer:       /CN=A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20
Certificate serial:       1C1B409F33ADB838732612B3A7296A4BAB8C00D9
Authority key identifier: A9:D3:36:1F:57:EC:D3:6D:7D:85:CE:10:4D:11:D1:A8:C4:E9:7D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030303a3a2f33342d3334203d3e20323732323532.roa
Signing time:             Tue 05 Nov 2024 13:04:26 +0000
ROA not before:           Tue 05 Nov 2024 12:59:26 +0000
ROA not after:            Tue 04 Nov 2025 13:04:26 +0000
asID:                     272252
IP address blocks:        2804:844c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.crl
                          rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1b:40:9f:33:ad:b8:38:73:26:12:b3:a7:29:6a:4b:ab:8c:00:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20
        Validity
            Not Before: Nov  5 12:59:26 2024 GMT
            Not After : Nov  4 13:04:26 2025 GMT
        Subject: CN=D58B58CE49E484DC5F742F097CED2A49E35F64B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:51:df:5a:01:46:5c:2a:b8:4c:fe:5c:38:
                    59:57:00:53:03:30:41:8d:95:71:47:7d:e9:0d:0d:
                    04:00:e8:1d:69:24:84:e8:1a:9b:a0:e2:39:68:d0:
                    37:be:c5:2d:25:ed:06:34:c7:6c:9a:ba:5f:c6:22:
                    70:db:1f:1e:87:ea:8d:e3:9f:27:a7:b1:25:d6:ea:
                    99:91:a0:cb:39:b4:da:3e:94:26:a3:14:3e:ba:a8:
                    67:a2:c6:30:5e:32:8e:5a:99:d4:5a:ed:db:28:e6:
                    24:4b:32:93:4c:3a:e4:b5:96:3a:c4:ce:eb:08:28:
                    1e:d3:a9:ed:dd:ed:80:28:cb:44:e0:09:0d:db:42:
                    62:20:a7:d4:0f:31:3c:35:e3:fb:2a:af:8d:3e:dc:
                    93:2f:ba:6b:d6:ca:c5:54:83:31:74:39:ea:aa:31:
                    be:1d:6a:85:17:f7:c6:38:c9:f8:c7:9c:f1:07:92:
                    b1:7f:2e:dd:33:99:6c:df:02:55:dd:f5:c4:14:1a:
                    f3:f6:ae:84:07:63:55:47:88:2c:9f:42:80:d8:83:
                    1f:ba:79:e9:fd:b5:bb:f6:a0:ac:4e:e7:ea:78:5e:
                    ad:9e:ef:79:58:3f:c5:6c:ef:bf:a6:20:89:81:1c:
                    ee:84:95:e5:05:c5:ad:c0:2e:4d:73:90:ca:bc:6c:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8B:58:CE:49:E4:84:DC:5F:74:2F:09:7C:ED:2A:49:E3:5F:64:B9
            X509v3 Authority Key Identifier:
                keyid:A9:D3:36:1F:57:EC:D3:6D:7D:85:CE:10:4D:11:D1:A8:C4:E9:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D3361F57ECD36D7D85CE104D11D1A8C4E97D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030303a3a2f33342d3334203d3e20323732323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:31:d0:99:38:30:19:4c:79:8d:80:b2:82:35:a1:97:29:4a:
         07:98:77:e8:b6:07:4a:74:c1:49:77:53:c0:5e:96:3d:81:2f:
         28:d1:e6:1b:35:3e:1d:f1:3c:3b:22:be:ff:de:90:63:47:b6:
         8c:55:da:67:ca:89:ed:1a:23:a9:69:35:ba:ca:22:f0:1c:77:
         38:2e:31:c0:0b:79:e8:4c:1e:89:d3:27:f6:78:08:7e:c4:a8:
         fc:a1:d5:6b:ba:de:19:4f:f8:c7:e0:b4:4b:b9:cd:1b:c5:a8:
         06:7a:13:75:ea:62:48:2c:2e:89:18:63:4d:e1:e6:fe:b5:27:
         66:d0:92:3a:57:0a:7a:f9:23:09:80:88:cc:c3:5e:64:57:cb:
         f9:9b:65:69:0d:ed:b2:20:42:b4:7e:de:b4:b6:36:44:53:d4:
         2d:a7:e2:48:ea:70:a7:83:72:ce:cb:15:55:63:3b:70:0a:99:
         70:9f:b4:42:31:41:40:4a:59:33:8a:71:8c:ef:5d:05:03:bc:
         0c:0e:83:79:3d:b2:2d:22:26:c4:be:47:cd:e1:af:aa:b5:30:
         6e:3e:1e:28:1b:50:8a:ec:57:46:6e:4e:86:53:03:37:73:49:
         95:96:27:ef:9c:13:e6:21:e6:b8:29:ff:63:74:83:ba:27:2c:
         4a:45:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:08 2024 by rpki-client on console-ams.rpki-client.org