Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa
File:                     323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa (raw, json)
Hash identifier:          WTp32bA3Nz3dOun/+AXx4lcWfPxUj3ty1bwMsIYd4p8=
Subject key identifier:   92:0D:F4:BA:46:E7:52:71:35:65:DF:04:74:FE:87:A5:4E:6D:50:D7
Certificate issuer:       /CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
Certificate serial:       030AF6FD0DCFB50F4A849A60A268E19EE4C5A093
Authority key identifier: C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa
Signing time:             Fri 14 Jun 2024 13:21:19 +0000
ROA not before:           Fri 14 Jun 2024 13:16:19 +0000
ROA not after:            Fri 13 Jun 2025 13:21:19 +0000
asID:                     271723
IP address blocks:        2804:8000:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl
                          rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0a:f6:fd:0d:cf:b5:0f:4a:84:9a:60:a2:68:e1:9e:e4:c5:a0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
        Validity
            Not Before: Jun 14 13:16:19 2024 GMT
            Not After : Jun 13 13:21:19 2025 GMT
        Subject: CN=920DF4BA46E752713565DF0474FE87A54E6D50D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:5c:83:b4:d1:77:7d:4e:24:38:e2:7f:d4:
                    63:5f:63:4f:10:df:5b:a3:41:ee:58:c2:99:10:18:
                    8a:38:70:04:7b:29:3c:43:d2:a0:81:06:01:25:08:
                    20:d0:d5:af:0d:36:0f:29:10:a7:0f:59:8c:89:0e:
                    c7:9d:bb:86:d2:c7:e5:10:0c:c7:9d:49:ad:36:74:
                    b7:39:08:43:0d:cb:b5:c7:20:d6:eb:49:09:16:3d:
                    fb:bd:57:e7:7c:54:25:af:af:2e:ab:57:0b:c1:33:
                    44:61:ac:8b:fb:a3:85:c4:31:64:b1:30:59:1b:54:
                    21:97:27:26:61:b6:7c:7c:9f:6e:9c:f4:42:11:0f:
                    3d:7c:b1:a5:b9:d5:b5:c8:24:ce:00:68:83:71:86:
                    f9:3c:c2:ad:81:8a:ed:4b:43:46:0b:7b:e1:a4:5d:
                    81:90:f2:ba:1f:99:e7:6d:9e:0f:c8:a9:73:9f:1e:
                    0f:a1:b3:f2:17:91:1d:c4:fa:76:fd:5b:15:ee:cf:
                    44:d3:de:4e:25:79:07:38:55:b9:24:0d:66:cf:5c:
                    98:9d:41:cc:14:51:2d:1c:b6:2f:33:b3:c3:18:a4:
                    ef:f2:5c:be:bb:d4:d4:18:80:63:c8:d2:99:17:7b:
                    b2:6c:18:45:3b:2f:f2:47:bf:87:61:56:90:b7:e2:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:F4:BA:46:E7:52:71:35:65:DF:04:74:FE:87:A5:4E:6D:50:D7
            X509v3 Authority Key Identifier:
                keyid:C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:97:ed:75:99:7a:2b:d1:22:f2:56:bc:06:36:65:2d:46:
         b2:a8:0c:3e:41:9d:5f:3e:5e:5a:79:03:2e:f4:cf:9f:4d:70:
         05:03:9b:dd:47:e6:f5:ba:10:28:85:41:1b:b1:95:f3:a8:0b:
         9a:b1:41:6d:d8:2a:de:43:24:3e:82:06:69:ca:c7:5f:ba:83:
         3e:12:ad:4c:c8:e3:6f:ec:c0:f9:df:62:ad:c8:01:1e:67:fa:
         d1:fc:aa:ad:41:64:27:04:4c:be:f5:c1:1b:a7:5f:0f:a3:c3:
         70:a3:78:d6:ab:ec:7a:c5:b4:74:3a:ff:e6:06:83:71:55:c9:
         e6:e4:85:4d:27:92:16:40:85:cc:06:91:74:51:6d:42:5a:af:
         34:ea:1f:c7:07:c7:0c:ec:d5:36:af:bb:50:7a:ad:cd:da:0b:
         3f:1a:e9:2f:5e:93:ba:f2:a4:b0:12:a8:05:09:b7:fa:10:de:
         16:08:05:cf:17:08:86:fd:e2:a9:66:24:a7:28:e6:63:fe:0e:
         cf:5b:bf:db:0f:ba:67:29:23:05:6c:7c:04:be:88:e7:0e:15:
         60:03:fd:f1:42:ba:c0:18:35:50:29:0a:16:e9:3c:46:f4:f4:
         f8:68:6a:8c:af:b4:96:eb:c4:9e:5a:97:e0:cd:6b:c2:03:2e:
         81:4c:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:52 2024 by rpki-client on console-fra.rpki-client.org