Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
File:                     323830343a6464303a3a2f33322d313238203d3e203238363339.roa (raw, json)
Hash identifier:          zs93PJTY+GlOjOMnh5Bej8KwwP6qMaP2bNehN7DC5go=
Subject key identifier:   AB:51:B0:95:7B:95:B7:9F:56:43:BE:A7:CF:D6:44:60:1E:70:9E:5E
Certificate issuer:       /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Certificate serial:       01DD7F80738101E50B099C4E5E2330FB253F1C02
Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
Signing time:             Wed 03 Apr 2024 22:49:24 +0000
ROA not before:           Wed 03 Apr 2024 22:44:24 +0000
ROA not after:            Wed 02 Apr 2025 22:49:24 +0000
asID:                     28639
IP address blocks:        2804:dd0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl
                          rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:dd:7f:80:73:81:01:e5:0b:09:9c:4e:5e:23:30:fb:25:3f:1c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
        Validity
            Not Before: Apr  3 22:44:24 2024 GMT
            Not After : Apr  2 22:49:24 2025 GMT
        Subject: CN=AB51B0957B95B79F5643BEA7CFD644601E709E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:cf:d6:7c:72:4f:f7:5c:fd:a6:95:6d:0e:
                    6b:3a:60:bc:04:c4:4e:6d:9a:aa:11:8b:63:78:ea:
                    18:ff:80:92:4e:8c:a0:c6:93:6a:c1:6a:07:dd:7d:
                    63:64:ea:c4:4d:17:be:91:6b:60:32:b3:43:26:e1:
                    d5:9e:8c:ab:f1:32:00:09:c0:13:88:31:1d:c8:cf:
                    c5:93:a0:db:02:a4:08:db:6b:b8:0a:a1:ba:36:b5:
                    d5:99:3f:ee:b8:f0:ea:71:e9:47:ae:7f:fa:78:6f:
                    06:3e:81:4e:1d:67:2e:fe:88:d5:2c:d9:46:f6:4d:
                    17:67:97:ae:bd:f6:69:ab:c4:57:a8:6d:4e:9c:e0:
                    8f:4e:72:52:ab:61:c6:39:e6:e0:48:d2:e4:b2:7d:
                    dc:ee:ec:bd:e8:22:12:29:2c:87:b3:c0:e4:2e:d0:
                    d4:81:2b:a6:df:0e:df:10:36:02:77:33:c4:02:c5:
                    c5:24:29:b5:34:ff:92:a2:b0:82:ee:af:20:ad:da:
                    c2:a6:b2:13:bd:3d:bc:54:38:d3:93:b1:fa:9e:e0:
                    71:f3:11:fa:99:e3:10:b7:e4:02:89:76:2a:d4:51:
                    73:a8:f8:73:61:57:2c:2a:9e:bf:75:21:51:ea:cb:
                    b0:dc:d9:23:ba:b1:b5:fd:14:86:12:6b:0d:ce:bb:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:51:B0:95:7B:95:B7:9F:56:43:BE:A7:CF:D6:44:60:1E:70:9E:5E
            X509v3 Authority Key Identifier:
                keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:e2:d4:9f:14:e5:8c:32:09:ac:91:ee:43:3c:5f:1e:75:
         16:c2:b2:69:f7:53:2d:0a:28:82:37:b3:2a:da:5e:80:55:b7:
         40:79:b6:c3:20:57:4e:38:61:7a:4e:b0:59:b8:a4:73:53:11:
         9d:bd:34:2d:cc:a7:00:93:d8:e3:12:c9:a0:e3:b0:95:53:fb:
         12:a1:1c:4e:3e:b8:76:40:18:67:38:24:18:1c:da:0c:e6:d0:
         11:55:0b:8a:ad:7f:23:45:9b:2f:74:eb:61:90:79:03:1c:d7:
         07:e7:fb:80:af:4f:ba:02:f5:0f:cf:f2:df:02:06:e6:c8:1d:
         ea:58:71:be:37:55:c1:29:f4:13:ea:8c:65:9d:e2:ee:8d:84:
         e8:b8:50:e3:79:6f:3e:78:76:2b:34:e6:1d:21:7f:2a:d0:09:
         c8:70:78:3d:3f:21:cf:54:38:f2:a1:c9:c3:71:38:98:3e:72:
         e9:a8:1d:a2:aa:5b:c4:04:ca:95:f0:34:dc:47:f8:2f:1a:bb:
         27:cd:e8:11:37:9e:97:98:97:b5:09:39:ff:42:7f:73:e7:bb:
         af:e8:52:39:98:49:66:d3:83:88:91:8a:d5:52:82:0c:18:86:
         aa:90:4c:88:53:53:aa:d8:53:a7:13:a0:aa:e4:46:5a:93:d1:
         3d:30:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org