Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a313030303a3a2f34302d3430203d3e203631363636.roa
File:                     323830343a316361303a313030303a3a2f34302d3430203d3e203631363636.roa (raw, json)
Hash identifier:          YbWzL+PcM7VxAWvv8OvWZ2w7XdR6Xon+cV1BDTv4PHk=
Subject key identifier:   21:B0:07:39:62:AF:7D:A4:E1:C4:AA:AA:88:4F:FD:2C:FC:B3:F3:D2
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       69C98385AA9DD9D827AE521249D17E272448FD83
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a313030303a3a2f34302d3430203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:07 +0000
ROA not before:           Wed 03 Apr 2024 20:19:07 +0000
ROA not after:            Wed 02 Apr 2025 20:24:07 +0000
asID:                     61666
IP address blocks:        2804:1ca0:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c9:83:85:aa:9d:d9:d8:27:ae:52:12:49:d1:7e:27:24:48:fd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:07 2024 GMT
            Not After : Apr  2 20:24:07 2025 GMT
        Subject: CN=21B0073962AF7DA4E1C4AAAA884FFD2CFCB3F3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:da:55:97:b1:5e:1c:c9:40:19:d5:47:dd:
                    59:f2:8c:ec:f3:8a:b3:4e:36:73:2b:4a:90:4d:da:
                    43:b7:5b:fe:24:cd:12:b2:bb:37:e1:f2:ee:ed:0d:
                    21:01:3f:44:13:cf:0c:ac:32:73:50:b8:cf:0d:89:
                    47:30:5b:fc:6e:e5:8c:f5:5f:e1:fc:92:66:82:35:
                    07:83:0d:ff:d0:c7:77:b3:a3:ee:e2:dd:47:05:d8:
                    80:d5:c4:b9:7c:7c:c1:06:25:ba:a4:d6:e3:67:1a:
                    4c:57:ce:7c:da:1f:c0:21:7d:de:df:a7:72:ec:3b:
                    b3:ca:eb:59:48:f1:d3:31:9a:76:b9:8d:15:46:48:
                    55:41:08:c3:cd:1b:a9:55:4f:20:c7:7e:a8:ca:34:
                    e6:5d:cc:c5:5c:ef:24:db:ba:a6:ea:35:30:8e:f1:
                    28:74:e2:0c:f1:1d:34:09:3a:7a:e1:3a:9e:e1:32:
                    75:81:79:ad:64:55:3d:a9:01:1e:0c:c5:75:15:e3:
                    6d:b0:2c:4d:25:3e:61:e0:bf:19:f1:27:06:f5:97:
                    5d:46:79:99:23:72:11:7c:51:a4:4e:d1:dd:f9:ee:
                    19:d2:29:93:74:08:c3:3d:b7:df:50:ad:a6:9e:91:
                    9e:08:cd:c3:a2:d0:ec:8b:e9:37:06:ed:83:01:30:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B0:07:39:62:AF:7D:A4:E1:C4:AA:AA:88:4F:FD:2C:FC:B3:F3:D2
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a313030303a3a2f34302d3430203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ca0:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:14:1e:04:1b:cd:2c:04:a1:ae:0c:23:6f:e6:fa:fe:bf:
         ee:33:34:3d:7f:4c:8b:23:44:8c:bc:e4:b7:46:c2:c8:7f:f6:
         f9:29:6a:d9:cc:2f:d1:2f:9e:e9:c6:1c:45:45:6b:32:cd:d3:
         e4:49:e6:d1:8a:34:a7:2d:03:d1:c6:6a:13:91:04:7a:eb:0f:
         9c:b2:fa:08:6c:1f:bb:e5:fa:c8:af:d8:ab:21:c2:94:d7:9c:
         7c:88:1d:48:72:72:39:e6:50:19:a0:ff:8a:2c:62:80:48:a6:
         1a:06:14:f6:27:86:da:11:cf:1e:9b:31:09:a2:10:a4:88:6a:
         5c:19:2b:77:cf:9b:4a:1c:e7:f7:08:8a:f7:33:72:8b:43:b4:
         f8:19:be:5e:e0:6b:d7:3c:e2:da:8c:d5:12:ea:43:cf:ca:7e:
         f9:22:86:c0:05:55:60:eb:a1:93:d4:79:12:00:c9:1d:d7:11:
         25:01:5b:89:8d:18:b2:ec:a3:f3:88:cb:6f:e2:63:bd:41:3b:
         b8:3e:33:96:a0:33:18:d6:00:7b:eb:8c:a5:2e:9d:67:a1:7f:
         10:3e:44:bc:91:a5:fc:39:1f:56:71:e5:84:2d:a0:e0:5b:35:
         99:c7:21:af:e3:aa:38:f8:ca:b0:1b:6d:56:61:cf:ec:65:a1:
         74:9c:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org