Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3a2f33322d3332203d3e20323635393338.roa
File:                     323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (raw, json)
Hash identifier:          uDA1aXagmhhdV1MuVdwdgusT9ewPXj3RRnFTZ2ys3Kc=
Subject key identifier:   31:52:47:0D:A5:91:6C:39:7B:FD:47:FB:48:A0:D2:0C:80:20:CF:F0
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       49B626ED75914527E5322731EBCB0455B99E8C64
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3a2f33322d3332203d3e20323635393338.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     265938
IP address blocks:        2804:4028::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b6:26:ed:75:91:45:27:e5:32:27:31:eb:cb:04:55:b9:9e:8c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=3152470DA5916C397BFD47FB48A0D20C8020CFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:7a:2c:c2:9b:27:18:24:a7:cd:f8:bd:45:
                    02:3b:ab:8f:e3:be:c0:ea:60:58:9c:44:2d:f1:29:
                    91:1d:d8:42:a9:ca:4c:22:75:c7:74:36:aa:ff:4a:
                    16:86:80:0e:eb:ec:1f:3b:46:56:54:a2:f7:bb:e0:
                    6c:5a:fe:8f:fd:06:5b:ea:0d:f7:92:88:ba:79:91:
                    18:f1:96:4b:8b:b0:f9:93:1b:88:ac:d1:95:85:12:
                    f7:85:97:6e:ed:af:c8:de:82:42:d6:da:f1:65:28:
                    83:13:43:83:30:23:d1:27:d4:0f:b5:d7:ea:66:c6:
                    b2:f0:ae:80:5e:a1:66:ba:a3:08:a7:0f:fc:61:ff:
                    7d:dc:c6:f3:0b:ef:dd:81:67:c2:aa:e5:da:65:f1:
                    0b:16:ec:55:bd:0f:37:7c:98:0f:1a:90:3a:55:a2:
                    9e:5e:98:cd:de:c4:75:b5:21:78:aa:61:34:92:75:
                    00:f8:93:95:3a:8a:ca:27:9a:e2:d8:bf:3d:8e:f7:
                    0f:d0:2a:39:74:56:1c:ee:11:cf:92:21:c2:ea:73:
                    04:3b:21:74:d3:9b:d3:68:cd:a7:21:4f:f1:8c:22:
                    f9:6d:f1:ef:fc:ad:86:59:9c:d7:2e:a2:b0:b1:c5:
                    db:29:e1:fa:68:cf:81:ce:a9:17:15:b0:26:41:d1:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:47:0D:A5:91:6C:39:7B:FD:47:FB:48:A0:D2:0C:80:20:CF:F0
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/323830343a343032383a3a2f33322d3332203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4028::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:51:6a:f8:72:ba:af:4b:cd:25:5c:09:81:69:90:5a:15:b0:
         4e:39:7b:f1:b3:5a:e0:5e:26:2b:fc:b2:ab:1c:64:06:ac:87:
         79:dc:6c:35:0c:ab:b8:31:05:d2:6a:7b:29:55:e2:b1:88:db:
         64:38:82:7a:60:2b:b9:44:c1:20:86:b6:29:06:d7:9b:3f:5f:
         13:e9:88:d2:ea:0d:c1:01:ec:06:17:79:32:ec:0c:46:ba:7d:
         99:05:4a:ff:7f:27:00:06:1c:a8:e7:36:ae:52:a6:8a:25:fa:
         d2:a0:50:4d:57:b3:8d:a8:0d:ed:b5:ed:ce:df:9a:a3:17:4f:
         9f:c8:7b:39:e1:9e:c1:14:84:6f:a0:25:6a:5a:2f:9c:1a:4f:
         9f:6c:74:82:93:c0:87:66:18:54:f8:81:3d:42:d6:a1:0a:5d:
         d9:d6:e5:16:9f:50:81:83:8c:66:56:30:a2:46:5b:86:b4:9c:
         f2:b6:89:49:03:97:db:66:91:53:48:ce:fe:ad:0c:71:21:ea:
         cb:df:00:90:72:6a:29:8f:e0:ff:05:ec:b1:f7:eb:f3:a5:b4:
         fc:1f:84:40:3b:39:30:10:45:5b:13:9e:b4:9d:3a:be:0c:72:
         76:fe:61:8b:6f:b5:b7:11:d5:ac:7e:40:c9:44:22:9e:b6:dd:
         ac:c6:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org