Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa
File:                     323830343a373865343a3a2f33322d313238203d3e20323731323732.roa (raw, json)
Hash identifier:          +Z5zYEjYPBMf9NerOq7L/qVzNiMGYwRwBzdoxThp/FQ=
Subject key identifier:   98:93:74:22:27:20:29:FC:C5:02:20:DE:95:B3:4A:71:50:CC:40:23
Certificate issuer:       /CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
Certificate serial:       040986AB5F5A6AE4754DF300A848550E5B36B614
Authority key identifier: D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa
Signing time:             Thu 04 Apr 2024 09:00:19 +0000
ROA not before:           Thu 04 Apr 2024 08:55:19 +0000
ROA not after:            Thu 03 Apr 2025 09:00:19 +0000
asID:                     271272
IP address blocks:        2804:78e4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl
                          rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:86:ab:5f:5a:6a:e4:75:4d:f3:00:a8:48:55:0e:5b:36:b6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
        Validity
            Not Before: Apr  4 08:55:19 2024 GMT
            Not After : Apr  3 09:00:19 2025 GMT
        Subject: CN=98937422272029FCC50220DE95B34A7150CC4023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:f9:4f:d9:db:6b:39:26:f6:72:24:82:f5:
                    f6:b5:fb:61:7a:b1:a2:5e:59:75:2d:0b:2e:b6:55:
                    ba:3a:b7:ea:0d:46:d8:06:06:41:c5:11:b5:aa:ad:
                    a8:51:6e:ca:40:b4:fb:69:a8:73:c5:85:69:6d:f9:
                    2b:a2:5b:a3:9a:67:c0:3c:fc:96:41:6b:40:53:de:
                    e2:91:cb:23:33:63:b7:57:0f:38:43:b0:04:48:a6:
                    eb:cd:75:1c:cd:5b:d0:17:fe:b9:95:2b:b5:9a:34:
                    23:9f:3d:04:12:e3:c8:b3:cd:6f:36:f7:01:d8:37:
                    33:49:c9:ff:17:84:55:02:f7:36:43:d2:e9:e1:c8:
                    ae:e2:70:50:57:49:bd:71:db:e0:4b:3e:9e:a8:fb:
                    9c:1f:10:2f:dc:e7:78:a9:f3:f5:6c:39:e4:f9:fd:
                    8b:f4:1e:b2:33:7b:2e:2f:74:09:ae:52:07:0e:fb:
                    2b:74:de:94:b2:63:67:4d:7d:da:06:89:e7:00:34:
                    85:3b:90:fb:20:dd:b2:28:a9:da:ba:fe:64:50:26:
                    d3:7c:b9:5d:98:11:95:31:33:4e:f7:29:e2:29:fb:
                    43:80:84:8d:da:ef:37:c7:d0:ee:e2:10:bb:63:94:
                    5a:d5:10:ec:87:ea:92:68:14:d8:b1:5a:27:dd:de:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:93:74:22:27:20:29:FC:C5:02:20:DE:95:B3:4A:71:50:CC:40:23
            X509v3 Authority Key Identifier:
                keyid:D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:f5:6f:d8:5e:0e:25:d0:37:a1:49:c8:de:de:13:aa:87:44:
         d9:87:6f:05:af:50:8c:7c:8a:58:a2:44:74:0a:b9:4a:fe:0a:
         14:b4:23:d1:60:b7:64:04:05:a6:1f:b8:46:b5:fb:ed:7e:5a:
         e9:a2:6f:bb:fb:00:59:e3:0b:aa:76:b9:d3:cc:75:31:41:ab:
         d7:3f:59:c4:7c:65:ab:b6:07:e3:f1:87:83:b5:07:4c:6f:3e:
         d4:ae:1a:c5:bd:86:be:e8:26:f6:40:b6:56:3b:ed:27:ce:d5:
         c5:5f:85:7a:66:6d:8f:f1:c5:43:d8:8c:bd:49:30:a6:ce:50:
         34:59:06:51:3d:e0:83:da:4f:c5:04:5c:c5:0e:05:3b:a2:ae:
         01:74:0f:9a:17:d4:db:d7:86:ae:8c:b8:35:ae:1d:21:63:b9:
         1f:36:82:94:ea:b9:7a:0c:1e:48:a6:c6:ea:57:7a:ab:91:8b:
         33:9e:7a:1a:94:f8:4f:32:a2:b0:bc:07:23:55:2f:1b:b7:f1:
         fe:9e:5f:cc:23:56:4d:73:7e:f4:11:df:f2:cd:26:83:2d:f4:
         af:53:6b:fe:ee:35:16:98:1c:77:66:29:34:3c:5d:48:6e:87:
         44:4c:c5:bf:5e:6f:04:e9:d7:03:a4:7c:c0:1d:2a:60:63:29:
         39:96:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:29 2024 by rpki-client on console-fra.rpki-client.org