Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a3a2f34302d3430203d3e203631363636.roa
File:                     323830343a316361303a3a2f34302d3430203d3e203631363636.roa (raw, json)
Hash identifier:          rHfYfRhPNWsYMUeQQeU/OJNaHeuvdUA7UpXSQdm5OV0=
Subject key identifier:   00:CA:BE:82:01:9E:ED:BF:3A:2D:F6:59:E9:2B:03:22:01:D3:53:14
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       4FA4F8454214C69B17E07441CFEEBE3B8CF9FB7D
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a3a2f34302d3430203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:08 +0000
ROA not before:           Wed 03 Apr 2024 20:19:08 +0000
ROA not after:            Wed 02 Apr 2025 20:24:08 +0000
asID:                     61666
IP address blocks:        2804:1ca0::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a4:f8:45:42:14:c6:9b:17:e0:74:41:cf:ee:be:3b:8c:f9:fb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:08 2024 GMT
            Not After : Apr  2 20:24:08 2025 GMT
        Subject: CN=00CABE82019EEDBF3A2DF659E92B032201D35314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:ad:36:aa:81:3c:5c:92:f5:a3:2e:49:a8:
                    ba:6f:d7:92:fe:f9:86:69:63:9b:b8:de:eb:eb:49:
                    50:5b:2b:19:eb:7b:28:97:ea:a3:23:c7:41:dd:f3:
                    25:a5:c6:8b:12:77:80:27:c1:a4:8d:c6:7d:70:d2:
                    e8:ae:1a:c4:4e:20:96:b6:f5:7e:4e:51:33:7c:76:
                    97:d7:62:a9:c4:6b:86:9d:51:13:07:d4:49:d8:70:
                    03:26:cd:91:60:3a:68:9a:0d:1b:ac:ef:ce:2c:5d:
                    d4:cb:e5:ce:9d:fd:6f:fc:9b:4f:a5:47:ef:74:9b:
                    94:55:06:a5:02:40:51:91:67:c7:90:f8:69:ba:84:
                    e9:9b:7d:a2:4b:9e:11:61:45:f2:42:f5:9e:bd:d8:
                    43:c3:d1:6b:d3:33:38:71:f8:f0:a1:cb:8f:fc:26:
                    ab:ac:69:17:1b:ab:e0:5e:0b:56:f1:e4:1d:af:04:
                    ab:4f:9a:11:e9:5d:c6:d2:80:c0:7e:e4:95:44:17:
                    7a:ea:f2:3c:8e:80:67:b6:84:1a:31:e9:c3:81:d5:
                    9f:e1:f2:ff:26:00:31:bd:4e:5a:d3:62:90:60:25:
                    36:ea:4d:6b:7a:83:31:81:a6:71:ac:b6:2f:39:e1:
                    61:f7:dc:c3:83:e8:50:e4:cd:62:13:d2:5d:56:41:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CA:BE:82:01:9E:ED:BF:3A:2D:F6:59:E9:2B:03:22:01:D3:53:14
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a3a2f34302d3430203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ca0::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:84:fd:6b:e9:b8:fa:03:46:76:9a:49:1c:4b:f9:7a:47:7c:
         12:c3:ce:e2:7c:75:20:e5:2d:27:27:05:8b:a6:a0:08:1d:c0:
         2a:42:9a:c5:1b:a3:35:2a:b4:d0:84:7a:0a:16:ab:4c:33:09:
         a4:f6:12:ee:19:c1:34:67:58:f1:75:47:73:88:31:e8:b8:cc:
         07:85:7d:cd:2c:f9:d8:a9:a3:3e:73:b5:a4:52:36:18:9f:d7:
         b8:6b:9c:e3:d3:e3:3e:e4:76:48:f6:84:89:76:30:73:cd:91:
         18:7a:f6:f8:e4:18:64:0e:d9:8f:23:5a:61:fb:7a:1c:a0:e0:
         d1:c6:ff:33:26:c1:d9:d1:a6:43:ea:74:43:a1:c1:f6:85:c2:
         71:a0:bd:cb:e7:79:ac:ff:25:6b:61:04:a5:76:59:8a:f8:76:
         08:6d:1e:07:88:f3:70:3e:a6:5d:b5:a5:71:de:ea:cc:df:d8:
         40:c1:6b:62:70:24:ee:e2:e9:4a:8c:6e:95:81:f7:7e:c5:e1:
         db:79:18:af:89:92:ad:a4:c0:5f:6a:90:61:28:2c:a5:60:8a:
         68:49:cc:45:91:60:0b:f6:ec:b3:72:f3:b1:fa:96:76:dd:77:
         d2:67:4a:9d:d8:95:7d:6b:59:f0:b7:7d:e3:09:59:a2:7c:b1:
         9e:53:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org