Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/323830343a336135343a3a2f33322d3438203d3e20323636303833.roa
File:                     323830343a336135343a3a2f33322d3438203d3e20323636303833.roa (raw, json)
Hash identifier:          fsI7oS40tZFMFlUwt9GP3FdqDM6368RLabd3Zc2BAww=
Subject key identifier:   DD:6F:8E:A9:95:8D:0B:70:63:2D:3E:BE:5F:6B:79:44:27:16:0C:FD
Certificate issuer:       /CN=87A87992D41AF8237F09E4D559791775A6B6EA10
Certificate serial:       1EA1C0736B2095EB9829101735B02925F7323D02
Authority key identifier: 87:A8:79:92:D4:1A:F8:23:7F:09:E4:D5:59:79:17:75:A6:B6:EA:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/323830343a336135343a3a2f33322d3438203d3e20323636303833.roa
Signing time:             Thu 04 Apr 2024 22:45:24 +0000
ROA not before:           Thu 04 Apr 2024 22:40:24 +0000
ROA not after:            Thu 03 Apr 2025 22:45:24 +0000
asID:                     266083
IP address blocks:        2804:3a54::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.crl
                          rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a1:c0:73:6b:20:95:eb:98:29:10:17:35:b0:29:25:f7:32:3d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A87992D41AF8237F09E4D559791775A6B6EA10
        Validity
            Not Before: Apr  4 22:40:24 2024 GMT
            Not After : Apr  3 22:45:24 2025 GMT
        Subject: CN=DD6F8EA9958D0B70632D3EBE5F6B794427160CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:4e:78:f6:60:d1:23:36:e6:22:7c:27:9d:
                    91:8e:3b:28:4f:08:a1:03:fe:b9:d5:58:3f:f2:66:
                    5c:e8:70:8b:a4:bd:d7:78:8d:4e:8a:07:91:70:8f:
                    f1:60:db:23:da:37:bb:fe:1a:b9:cd:82:3b:bc:3a:
                    3b:e1:92:58:de:e3:e1:6a:61:e1:4f:24:63:c6:be:
                    6d:21:b4:a9:41:a9:70:bf:5a:ca:70:fb:06:b4:4c:
                    c6:18:02:d1:9d:37:b1:03:7c:5d:74:f9:77:ed:ee:
                    ba:59:57:c3:da:e6:d6:4f:b5:ed:8c:bc:c0:0b:62:
                    15:16:5b:4a:1c:c7:41:eb:9e:a5:b7:aa:4c:10:d4:
                    46:5d:30:03:56:20:5c:48:9b:b9:1f:16:54:35:b4:
                    56:ab:34:24:81:49:0d:d2:a1:b3:63:ff:31:8a:6c:
                    17:0e:32:4f:bb:8c:57:5a:7a:de:fd:80:99:36:84:
                    bf:89:e8:46:4d:2d:4f:5c:26:93:09:06:4f:c5:5a:
                    60:45:c2:b7:bb:ca:45:7d:0c:5e:be:83:88:f6:d4:
                    cb:98:8e:97:7c:ec:e9:30:9a:aa:3f:89:00:eb:1a:
                    47:59:76:00:4b:bc:81:fa:67:93:7d:1e:da:9c:34:
                    14:61:57:47:bc:ad:5c:54:6a:ab:c0:f8:79:70:e4:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6F:8E:A9:95:8D:0B:70:63:2D:3E:BE:5F:6B:79:44:27:16:0C:FD
            X509v3 Authority Key Identifier:
                keyid:87:A8:79:92:D4:1A:F8:23:7F:09:E4:D5:59:79:17:75:A6:B6:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/323830343a336135343a3a2f33322d3438203d3e20323636303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a54::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:75:5a:3d:c5:92:d8:ec:32:5d:72:b7:d2:c9:04:13:55:
         a3:a6:ec:dc:e6:aa:f8:ec:ea:28:75:30:21:fd:c9:48:6e:2e:
         a6:4a:07:65:cf:ab:8e:9a:63:68:f5:93:91:d9:a4:59:1b:0c:
         12:1f:ca:41:43:31:b1:25:b4:56:a2:d5:0f:59:a5:73:1e:68:
         95:1c:69:98:63:c2:68:43:f1:ea:56:a9:fd:a1:6c:36:d7:2e:
         44:6a:03:d4:7e:61:80:48:94:03:24:c6:6b:7a:f2:ef:53:2c:
         48:24:b5:7e:d8:72:42:b0:d8:a4:87:f7:89:ec:0a:d1:12:36:
         ed:4b:c4:c1:bc:86:6b:e2:31:33:ec:43:a0:4d:27:9a:b3:b1:
         c7:4a:34:95:7e:31:96:81:9c:68:03:98:ac:0b:b1:e1:1d:73:
         1f:0c:eb:09:58:12:4a:4f:4a:2c:9e:90:a1:4e:78:63:84:e1:
         ad:35:d4:95:d5:6f:98:56:dc:1b:3e:0f:e7:f3:11:c8:6c:67:
         9a:ee:a4:cf:3c:b6:ef:bf:c4:21:26:19:7b:27:ca:b9:73:32:
         b3:60:30:86:c2:a1:01:df:21:97:84:9b:76:5c:bf:fa:c8:18:
         5e:ae:67:9d:98:67:bf:3a:27:c2:8b:de:ea:99:5a:22:24:1a:
         06:91:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:30 2024 by rpki-client on console-ams.rpki-client.org