Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa
File:                     323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa (raw, json)
Hash identifier:          7AWIxIqMPaXOVByta20hnefsq8UJ+/nNd3U4MizaAX8=
Subject key identifier:   A0:92:F0:71:A3:05:EE:3A:F2:C4:17:AE:E1:BE:08:F7:AE:B8:1D:A8
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       637691E45046A97DD24B1D34BB58B20B2EF7F23E
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa
Signing time:             Wed 03 Apr 2024 18:32:06 +0000
ROA not before:           Wed 03 Apr 2024 18:27:06 +0000
ROA not after:            Wed 02 Apr 2025 18:32:06 +0000
asID:                     265938
IP address blocks:        2804:4028:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:76:91:e4:50:46:a9:7d:d2:4b:1d:34:bb:58:b2:0b:2e:f7:f2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Apr  3 18:27:06 2024 GMT
            Not After : Apr  2 18:32:06 2025 GMT
        Subject: CN=A092F071A305EE3AF2C417AEE1BE08F7AEB81DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:02:85:ec:0a:58:21:be:a1:9b:48:5d:4d:
                    71:88:61:24:47:01:09:8d:5d:80:be:7c:0f:ab:6f:
                    47:04:67:08:53:6a:35:8a:92:81:7f:cd:b9:00:7a:
                    89:f3:3c:a6:5b:06:b5:59:6d:7b:4d:bd:93:95:b4:
                    32:09:26:8d:73:4a:dd:4c:8b:c2:8b:9f:43:11:b4:
                    8e:89:a4:7b:84:2a:ab:03:83:e9:5b:74:d5:f6:5c:
                    3c:dc:59:e0:9c:83:7d:2d:84:95:62:cb:21:63:22:
                    1b:df:4c:71:76:db:43:6d:07:6b:99:af:95:97:db:
                    48:86:bf:a0:04:c1:88:40:87:c8:9f:75:45:ae:4b:
                    a1:a1:43:07:33:9e:be:01:36:4a:8c:76:98:74:9d:
                    a0:b1:06:09:60:7c:2e:0a:d4:02:33:d4:3d:e9:b5:
                    e0:56:a0:43:f5:a5:bf:4a:88:d6:72:56:e0:65:b0:
                    6e:0f:22:f4:ad:40:33:d5:66:13:bf:af:ef:29:ac:
                    6f:02:c8:e6:fe:b5:44:de:1e:a4:15:76:84:44:c8:
                    0c:1e:e0:fa:2c:10:99:20:d6:8c:e3:0d:36:43:95:
                    03:e4:42:51:4b:32:8f:7a:cc:61:5d:58:6a:42:ab:
                    ce:0e:ba:d5:94:e2:52:f4:6e:1a:c2:ec:d1:ab:25:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:F0:71:A3:05:EE:3A:F2:C4:17:AE:E1:BE:08:F7:AE:B8:1D:A8
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4028:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:8c:d4:61:73:c7:f4:ba:16:a0:47:6f:37:c3:bb:08:be:ee:
         b7:47:61:b3:99:ae:13:41:52:2f:e8:9f:61:26:9d:91:1b:2e:
         72:f1:8f:67:2d:f1:f1:15:5b:af:5c:31:ee:92:5a:9e:20:cd:
         8c:fe:d4:7b:e3:aa:c0:11:25:f8:5c:72:cc:e2:ca:47:10:ff:
         be:93:22:6f:23:8e:e4:72:c4:04:32:fe:b4:ce:16:c4:21:90:
         a6:79:51:62:61:12:f8:f6:da:7b:96:43:86:57:ba:56:7e:08:
         d8:2a:bb:6d:2a:fb:53:13:a3:01:be:26:e2:eb:72:67:fd:23:
         19:76:81:37:b7:72:39:c4:67:c6:59:f4:2d:b5:24:cd:6c:1e:
         3d:50:a4:dd:2d:a7:63:d6:fe:00:4e:4d:3a:7e:f7:d4:08:81:
         57:97:4b:be:5c:d2:99:8d:5d:32:12:e1:92:43:e7:e0:7a:0e:
         d4:33:27:79:38:c3:94:82:d5:c2:35:95:f1:fd:c6:8d:32:1d:
         ec:17:b0:6e:d5:28:df:3b:30:a2:60:ff:dc:94:6d:8f:66:06:
         0c:1f:f5:2f:9d:a8:63:5d:a5:75:7a:79:fd:4e:5a:50:f7:0e:
         97:61:4c:bc:35:ad:15:7c:0a:1a:ad:78:04:7f:23:4c:66:42:
         12:ee:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org