Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
File:                     323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier:          qDAc4OXcG28anbXf7u8C3oCW4NrSSSmOpt7qE74nc3M=
Subject key identifier:   DA:4A:5C:55:4F:9F:DA:0A:20:0C:C9:E6:81:ED:C2:33:55:9E:8B:06
Certificate issuer:       /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial:       3FA4FB0304AA2EB666B13A985C266CD6FF27C616
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
Signing time:             Thu 04 Apr 2024 19:57:48 +0000
ROA not before:           Thu 04 Apr 2024 19:52:48 +0000
ROA not after:            Thu 03 Apr 2025 19:57:48 +0000
asID:                     268308
IP address blocks:        2804:4f28:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a4:fb:03:04:aa:2e:b6:66:b1:3a:98:5c:26:6c:d6:ff:27:c6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
        Validity
            Not Before: Apr  4 19:52:48 2024 GMT
            Not After : Apr  3 19:57:48 2025 GMT
        Subject: CN=DA4A5C554F9FDA0A200CC9E681EDC233559E8B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:43:3b:a4:16:43:21:4a:b9:d1:01:9e:4f:
                    dc:40:10:79:30:6e:09:61:1d:de:66:89:9b:77:c0:
                    94:6f:57:3e:c6:0c:00:17:da:56:e8:58:a8:4a:c1:
                    32:f1:55:48:8f:46:f9:65:ad:a7:c2:26:f8:04:32:
                    be:1d:44:a2:bb:35:72:e6:c0:cb:4b:b3:13:7f:b2:
                    1f:90:32:f3:17:bc:fa:94:c4:a0:03:19:6f:21:f7:
                    e6:7f:6a:1b:64:9e:36:3c:97:f9:21:b7:db:01:4a:
                    f1:9b:0d:c9:06:7f:a7:54:be:40:7c:35:97:aa:78:
                    b9:26:7a:93:7a:c5:5c:c1:8d:0d:b9:67:9a:f1:f9:
                    37:b5:1e:1a:5a:64:ed:a2:c2:74:b2:3d:0e:c9:7d:
                    7a:0b:6c:06:23:0d:94:cc:53:7e:da:aa:7f:9c:8c:
                    4e:c5:ca:ed:49:1c:e1:d4:b5:50:16:32:fc:04:59:
                    d4:58:bf:fd:dd:2a:9c:ac:d6:a2:ed:70:43:ac:68:
                    b7:b0:f3:56:52:8e:4e:0c:d6:db:fb:fa:42:82:82:
                    99:34:fc:d9:6e:1d:dc:f6:d7:f6:bb:1f:ed:ae:2a:
                    d2:93:3d:04:19:a6:0d:f6:c8:bf:ee:fb:92:29:b0:
                    d9:88:bc:9f:72:e7:48:fb:1d:fb:50:ee:77:eb:4e:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4A:5C:55:4F:9F:DA:0A:20:0C:C9:E6:81:ED:C2:33:55:9E:8B:06
            X509v3 Authority Key Identifier:
                keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         12:ff:2b:94:db:2e:4a:3d:f1:c9:ba:d0:a8:63:08:22:83:36:
         e3:cb:01:2b:64:15:45:a8:b4:6a:97:c1:91:c1:47:7c:c6:ff:
         62:98:a1:85:77:ee:05:95:d5:29:2e:19:ce:46:77:ba:53:92:
         e1:e2:04:11:a8:f5:1c:9e:44:45:13:30:c4:b7:71:48:c9:14:
         a7:12:33:b9:7e:bc:3c:a6:23:23:2c:73:37:dc:cd:50:3e:b5:
         f8:ad:83:62:72:15:fe:e2:62:79:46:2a:a3:3f:4e:d6:cc:21:
         ab:01:ee:7e:cf:3b:41:cd:5c:81:81:5c:29:4d:79:57:1b:90:
         bc:1c:24:f4:fc:ae:07:10:eb:71:3b:1b:bd:3f:c9:d8:e8:0d:
         c7:a7:aa:e1:aa:3a:97:31:c8:1b:d0:34:c5:6b:c6:27:00:59:
         d7:b6:c7:60:05:4b:ce:28:36:c9:62:64:15:28:28:7d:36:0d:
         f8:05:10:c2:5d:22:2d:27:b6:60:2e:e0:25:7b:50:1f:ef:18:
         d9:b3:a9:2f:9d:12:52:49:41:74:b8:36:44:72:d0:4b:6a:61:
         89:bd:78:e6:03:c4:8d:9e:c8:1b:3a:5e:e8:b0:7f:97:a8:2f:
         e4:25:0b:07:04:f0:a0:c6:ac:4f:cf:15:f6:27:f1:5d:32:02:
         df:40:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org