Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a666630323a3a2f34382d3438203d3e203631363636.roa
File:                     323830343a316361303a666630323a3a2f34382d3438203d3e203631363636.roa (raw, json)
Hash identifier:          I7iRxXtP/E0wVM3VQMPpABnlKg4yMtSxysBXWS6gLpQ=
Subject key identifier:   1B:A5:F2:73:5E:53:55:FE:21:1F:4C:C7:F9:3A:34:91:B7:23:93:B2
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       2D74DC51702C2642B0A246BE89F98CBED0EBA17A
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a666630323a3a2f34382d3438203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:09 +0000
ROA not before:           Wed 03 Apr 2024 20:19:09 +0000
ROA not after:            Wed 02 Apr 2025 20:24:09 +0000
asID:                     61666
IP address blocks:        2804:1ca0:ff02::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:74:dc:51:70:2c:26:42:b0:a2:46:be:89:f9:8c:be:d0:eb:a1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:09 2024 GMT
            Not After : Apr  2 20:24:09 2025 GMT
        Subject: CN=1BA5F2735E5355FE211F4CC7F93A3491B72393B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:77:21:fa:e0:2e:73:de:42:49:20:f8:0c:
                    00:79:ad:fe:e8:34:b0:1c:97:be:20:c9:da:a8:d3:
                    be:07:d6:23:73:7a:54:24:a6:4b:d6:33:b6:76:28:
                    b2:8b:84:ae:8f:1b:15:97:8c:a1:b0:27:9b:10:72:
                    76:83:84:dd:55:f5:e1:d8:0d:7a:f0:6a:4b:92:95:
                    a1:a8:25:fb:ba:34:07:90:63:a9:be:81:87:6b:a7:
                    cd:a8:6f:4c:55:df:ad:c3:7c:ef:4e:e4:4a:ef:38:
                    77:a7:3b:28:fd:51:67:a3:c1:ff:37:e8:71:37:fd:
                    59:46:8e:d0:16:9f:45:9d:59:a8:09:dd:b4:03:ec:
                    ca:0a:f1:93:44:6f:64:81:f8:7d:f4:a6:04:b1:1d:
                    4c:b1:83:c4:db:b7:b1:5d:04:e3:4f:27:47:dd:75:
                    08:72:2d:de:01:ad:1b:3c:2e:51:4f:df:94:dd:56:
                    0e:39:5b:ab:f3:3c:a8:11:75:35:76:ca:6e:7f:f7:
                    9e:42:13:e1:59:6a:28:81:80:a9:fd:6e:b9:f9:b6:
                    1e:f4:36:33:8a:5f:a2:46:04:44:c4:f2:95:85:f8:
                    dc:31:9d:01:d6:35:ce:6e:13:53:55:c1:78:12:0d:
                    d1:ea:87:d4:f9:0d:33:bd:a5:0b:09:76:51:db:12:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:F2:73:5E:53:55:FE:21:1F:4C:C7:F9:3A:34:91:B7:23:93:B2
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a666630323a3a2f34382d3438203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ca0:ff02::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:f0:4f:9c:a0:a3:3e:e6:a2:fb:5c:a5:ff:27:5e:af:80:81:
         e7:a9:00:85:75:43:d7:33:56:f2:44:bc:2b:f1:55:fe:31:62:
         4e:05:4c:d0:0a:7b:6b:a5:28:1f:06:f5:28:e2:ce:2e:d8:b9:
         81:42:96:04:f1:fb:92:c0:69:9b:c5:13:52:6c:36:11:7f:f1:
         1d:80:ab:af:7c:f9:5a:ec:10:76:54:98:af:e0:a0:58:4c:fb:
         25:79:1c:64:03:7a:66:79:5e:cf:46:69:94:14:93:e2:87:24:
         cf:4c:47:a2:c3:e7:26:58:29:eb:c6:0e:ce:e4:de:ae:bb:ed:
         71:9d:a6:55:c3:5d:26:3e:e9:06:6b:67:d8:7b:ad:eb:e3:7a:
         dc:53:80:02:90:7e:5f:5c:bf:0b:b3:49:8e:ee:b5:c6:a4:a3:
         bc:a9:19:d7:cf:23:9b:a9:35:fe:6d:ba:73:5c:8a:0b:47:5d:
         38:5c:5f:7d:f3:34:80:3c:52:7c:46:42:5a:cf:b3:36:91:61:
         4d:d7:4d:af:ef:62:5e:f4:13:7a:06:f5:00:7d:5e:17:ca:40:
         c8:4f:0d:75:6f:a6:eb:67:66:4a:cc:13:84:37:26:92:a5:fe:
         b7:f5:7f:37:6d:35:12:24:ab:eb:5f:02:55:45:8e:ff:d1:37:
         bb:49:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org