Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/323830343a3539303a3a2f33322d3438203d3e20323632353233.roa
File:                     323830343a3539303a3a2f33322d3438203d3e20323632353233.roa (raw, json)
Hash identifier:          rwqBXHN4xsn9jDi8seAOk94dzkjlyb9iygfDH6ddxpE=
Subject key identifier:   AC:C6:7C:D8:C6:90:AD:C8:3E:90:71:57:94:28:54:F2:B6:64:08:16
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       5A68338B88B1B72344B0CC597FAD72A952FFABC0
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/323830343a3539303a3a2f33322d3438203d3e20323632353233.roa
Signing time:             Mon 19 Aug 2024 07:15:59 +0000
ROA not before:           Mon 19 Aug 2024 07:10:59 +0000
ROA not after:            Mon 18 Aug 2025 07:15:59 +0000
asID:                     262523
IP address blocks:        2804:590::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:68:33:8b:88:b1:b7:23:44:b0:cc:59:7f:ad:72:a9:52:ff:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Aug 19 07:10:59 2024 GMT
            Not After : Aug 18 07:15:59 2025 GMT
        Subject: CN=ACC67CD8C690ADC83E907157942854F2B6640816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:9d:b4:bd:d2:be:47:68:3b:b7:ac:46:a8:
                    9f:39:a7:87:af:50:e7:a6:05:aa:89:44:80:5a:22:
                    bd:42:2b:71:c8:5c:19:95:85:d1:b0:38:34:a9:c5:
                    d3:3d:d2:dc:5d:25:ef:ff:1e:b5:81:6d:20:c4:35:
                    7b:30:b5:40:3e:9f:d3:c3:41:a5:9b:d8:db:5d:97:
                    d0:a9:4e:18:c9:6d:1c:75:39:54:73:d8:70:73:f0:
                    91:ef:39:f4:5a:d5:9c:58:ad:17:2c:d0:0b:39:03:
                    05:15:aa:d2:ae:39:6d:01:10:b3:c5:d8:5a:78:28:
                    34:48:36:79:84:36:57:ff:c1:00:16:ab:db:2c:39:
                    14:6a:9c:b3:01:99:12:6a:b9:21:75:94:5a:1b:11:
                    e3:98:6e:ba:22:22:68:b6:6c:56:5a:86:78:f1:56:
                    a8:6b:00:c5:c0:b7:df:de:6d:82:be:5e:e8:b5:e6:
                    3d:34:13:93:2d:06:15:7c:18:a6:4b:92:21:bd:e9:
                    65:96:9e:d5:2a:5d:b7:9b:41:54:33:70:bb:97:bb:
                    90:46:5b:62:7f:d2:61:84:1d:fd:df:0f:0a:cd:94:
                    e7:50:73:4c:7e:ad:29:d4:0f:62:d8:52:1a:d0:28:
                    48:10:a2:1a:8e:9b:6b:fe:c6:30:33:b0:58:b0:64:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C6:7C:D8:C6:90:AD:C8:3E:90:71:57:94:28:54:F2:B6:64:08:16
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/323830343a3539303a3a2f33322d3438203d3e20323632353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:590::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:83:9c:d4:29:b8:61:6f:10:27:9d:e3:c1:07:e0:eb:bc:88:
         c3:2d:ce:7e:71:9f:f9:61:5c:d9:b3:d9:88:f5:27:f8:86:8c:
         10:9d:2a:d1:75:83:31:88:27:69:7b:6c:37:70:fa:3e:be:d3:
         cc:5a:76:61:cf:2c:68:27:82:78:73:66:fc:67:ea:20:ad:cf:
         0d:6c:de:89:4c:cf:c0:9c:04:da:7a:3d:16:07:40:70:d5:0a:
         cc:9d:88:07:7e:d6:a6:eb:93:94:41:dc:a2:6d:de:14:d5:d6:
         3c:be:08:67:4c:72:32:06:2f:0d:cc:1a:ba:73:80:a1:df:84:
         a7:57:09:1b:11:d0:31:08:3a:2b:08:9a:46:56:15:19:b7:67:
         46:97:4f:d7:5f:df:43:ee:08:3b:b6:42:07:d0:cd:61:cc:d6:
         4b:03:0c:0f:50:bd:a6:15:6c:17:d7:15:a7:fa:56:bc:a7:15:
         a7:03:5b:54:ca:ac:b1:ea:8f:95:ef:39:e9:f5:12:e7:0d:8e:
         43:8e:db:6c:e5:1e:9b:5c:5e:a0:d7:4c:c5:6a:3f:8b:86:26:
         f4:6e:d0:1d:a4:1e:18:45:c3:f6:85:0f:38:7b:da:c8:3e:a3:
         3b:7b:0c:2d:d9:55:13:4e:b7:5b:74:75:ff:92:26:80:c8:9b:
         7c:e8:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:02 2024 by rpki-client on console-fra.rpki-client.org