Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa
File:                     323830343a313139343a3a2f33362d313238203d3e20323633343234.roa (raw, json)
Hash identifier:          zAYWQzOyZynkwAAUKVM47vjse67uTdsJizI1wFOrhzA=
Subject key identifier:   07:61:F0:0C:7A:92:05:7F:0F:6C:21:97:FB:24:02:1F:1B:3E:2E:8D
Certificate issuer:       /CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
Certificate serial:       1CC78B16179B36466FA135364B23C922F4AD2B14
Authority key identifier: A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa
Signing time:             Sun 28 Jul 2024 20:46:27 +0000
ROA not before:           Sun 28 Jul 2024 20:41:27 +0000
ROA not after:            Sun 27 Jul 2025 20:46:27 +0000
asID:                     263424
IP address blocks:        2804:1194::/36 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c7:8b:16:17:9b:36:46:6f:a1:35:36:4b:23:c9:22:f4:ad:2b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
        Validity
            Not Before: Jul 28 20:41:27 2024 GMT
            Not After : Jul 27 20:46:27 2025 GMT
        Subject: CN=0761F00C7A92057F0F6C2197FB24021F1B3E2E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0a:8c:20:d4:14:bb:5a:41:c3:27:46:66:0f:
                    6c:5e:06:8b:3d:e2:d0:79:41:d2:8a:50:c7:24:d2:
                    b3:48:4d:7d:37:34:b8:34:8d:d0:3e:d6:36:c1:36:
                    87:45:6f:ee:7a:a2:77:40:2d:d1:ec:f7:1d:6e:ba:
                    f3:c6:d8:6d:86:2b:34:d6:47:79:b6:11:5f:7f:d5:
                    ea:e1:d7:12:90:1a:fe:18:6d:af:eb:49:70:08:b7:
                    20:cd:c2:2b:64:eb:a9:c6:c8:75:ee:3f:db:21:18:
                    d6:7c:06:9a:cb:88:48:2e:30:8b:dd:1b:35:e7:77:
                    63:b6:d3:c0:63:ed:58:d1:82:03:62:3d:b2:df:ba:
                    89:38:bf:ee:da:37:9a:51:c4:6f:b5:d5:2f:0c:b7:
                    83:79:cb:11:f5:d4:fc:aa:9a:12:32:b1:b3:ba:80:
                    f4:f5:5d:72:a8:f4:2e:b6:10:80:d4:98:40:30:ff:
                    39:f1:7c:27:04:e4:59:d2:8e:20:ce:66:da:60:5e:
                    90:0f:f0:89:0c:e1:1d:39:08:4d:b4:0b:38:14:56:
                    b5:38:9e:28:52:6f:b7:9b:33:2a:85:bd:8e:d7:ce:
                    09:0a:f0:7f:24:fd:ce:8b:88:1d:2a:3f:3b:af:01:
                    27:57:4a:ae:57:6e:a6:be:83:78:08:67:a6:24:7d:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:61:F0:0C:7A:92:05:7F:0F:6C:21:97:FB:24:02:1F:1B:3E:2E:8D
            X509v3 Authority Key Identifier:
                keyid:A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1194::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:d9:e4:76:4f:e8:93:a5:82:f6:9d:c8:22:25:44:6b:5c:2a:
         77:a3:a0:9f:f0:22:f6:46:5b:02:bb:a8:61:24:64:65:df:7d:
         91:57:c3:92:3b:52:55:c0:ac:26:aa:99:e2:b7:3f:17:58:eb:
         4e:cd:a9:b7:fa:19:6f:38:9d:ac:56:12:4d:30:a7:12:5a:5b:
         2f:7d:af:ef:1c:2e:c7:d2:e7:c5:d6:02:0d:ef:3c:5b:d4:cc:
         0e:28:db:4c:92:d3:fa:6b:c6:0c:73:91:70:dd:dc:61:9b:d4:
         6c:b1:a1:f1:ed:9c:30:1a:51:44:19:83:b1:b8:7f:43:70:d9:
         b7:c1:80:38:b5:82:e3:4d:64:58:2c:12:a7:74:1e:01:ec:be:
         d3:37:8e:de:0e:17:b5:12:c6:7f:70:0b:3e:b7:ad:9d:98:0d:
         a0:3f:1a:a6:7d:ca:26:9b:ca:dc:63:d2:cc:5b:30:8f:05:ed:
         e9:30:88:da:fd:ac:05:22:f3:79:e7:39:bf:ab:38:40:93:ad:
         65:5a:d8:87:33:c7:31:1d:20:bb:dd:d6:37:82:17:21:36:c1:
         c8:ba:ae:57:a4:34:b7:1c:23:dc:f2:9e:fc:89:8c:85:9f:18:
         74:d9:d9:0e:9c:df:48:76:5b:9a:3b:9c:82:a3:50:17:9c:a5:
         77:16:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:50 2024 by rpki-client on console-fra.rpki-client.org