Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33322d3332203d3e20323638313732.roa
File:                     323830343a353932383a3a2f33322d3332203d3e20323638313732.roa (raw, json)
Hash identifier:          XyWmXPzUEt3eY00XJRAsvS4wVeVhJP/dEz6MnauBWjg=
Subject key identifier:   A0:0B:89:89:2C:BC:27:E1:8E:F6:E8:FB:09:51:16:61:F9:DF:6B:6C
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       7AFADCD0C3945831E0D1482BC38E2CF6328720C0
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33322d3332203d3e20323638313732.roa
Signing time:             Fri 03 May 2024 15:00:39 +0000
ROA not before:           Fri 03 May 2024 14:55:39 +0000
ROA not after:            Fri 02 May 2025 15:00:39 +0000
asID:                     268172
IP address blocks:        2804:5928::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fa:dc:d0:c3:94:58:31:e0:d1:48:2b:c3:8e:2c:f6:32:87:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: May  3 14:55:39 2024 GMT
            Not After : May  2 15:00:39 2025 GMT
        Subject: CN=A00B89892CBC27E18EF6E8FB09511661F9DF6B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:7c:f7:e6:c1:64:63:26:a7:85:4f:1b:fa:
                    61:ca:02:33:c1:4a:27:5e:7d:2e:24:ea:92:ee:7a:
                    e0:c2:c5:e4:d4:be:66:b3:3d:8e:02:80:67:7c:e0:
                    c8:01:c7:d5:e5:7e:40:7e:51:de:f1:ba:b3:cb:a2:
                    e3:2e:55:cd:79:94:84:97:9a:8e:65:ab:b1:bb:75:
                    9c:6a:4d:51:3d:d0:d3:16:24:7d:19:5c:36:4b:01:
                    74:7d:41:6a:a3:a1:13:16:ae:92:f9:5b:51:e8:94:
                    5b:22:b1:a7:d3:fa:d2:29:78:b0:ed:c2:a9:ea:fe:
                    6d:f6:d0:54:01:d5:bd:ed:31:09:8f:63:61:05:d8:
                    c5:b3:57:6f:ff:89:ec:2c:45:c8:4c:21:d9:38:29:
                    79:79:4b:92:48:a7:5f:fd:a1:d8:b0:4f:5c:b9:9d:
                    34:c5:27:bf:c2:01:8c:41:5b:b5:c7:c7:8b:36:b7:
                    99:a5:7f:84:fa:6f:16:52:a8:c5:8f:2d:13:e1:31:
                    22:37:25:2c:22:11:28:e9:3c:68:1b:02:8f:62:67:
                    6a:aa:c6:69:ed:af:b0:bd:fd:3b:67:68:50:a4:26:
                    44:7c:fa:a9:73:de:8d:ba:0c:a3:fe:6a:f3:8c:d9:
                    39:76:22:18:d0:a0:7f:7b:e3:db:55:71:ac:25:d5:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0B:89:89:2C:BC:27:E1:8E:F6:E8:FB:09:51:16:61:F9:DF:6B:6C
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33322d3332203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5928::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:a6:d1:62:3c:49:f8:ef:68:6d:b6:db:b2:9b:f0:bb:58:
         9a:ab:09:08:df:cc:83:b6:ac:60:b0:9e:54:f5:2d:b6:17:d0:
         ee:52:36:5a:15:52:02:ec:68:2f:48:a7:9f:84:a6:b0:5c:64:
         7a:12:31:d9:52:4f:e5:ea:0c:d0:5b:f4:6d:ee:ac:a2:b5:16:
         cd:19:2d:6d:cb:d7:3d:39:bc:70:9f:2c:4d:3b:fe:eb:dc:b0:
         b4:88:89:f7:61:4e:64:17:87:d7:6f:5c:47:a7:8f:c2:a9:a7:
         31:25:7d:6a:f7:eb:a9:dd:c5:4f:56:03:d3:be:2f:4f:e8:17:
         7a:99:73:16:43:5f:7a:af:ce:69:8b:4d:a0:48:ea:75:6d:73:
         31:cb:89:ed:39:6e:3f:4d:8a:ce:44:38:a0:f4:c8:d5:de:07:
         3b:9a:59:1b:90:48:cc:05:87:90:97:d4:4a:23:87:92:6e:61:
         e4:2f:d1:42:80:60:e6:99:0d:07:ad:d5:f7:47:81:57:e6:3c:
         cc:56:88:6a:47:e4:7c:ba:38:40:a0:59:df:6e:a8:3d:79:7c:
         85:b1:34:d3:fd:9a:81:e3:1f:c3:1a:83:8c:3c:11:7c:11:1f:
         21:5d:ae:c1:be:52:5d:e1:a2:4a:b4:57:44:79:b3:3d:c1:44:
         1d:45:f1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:21 2024 by rpki-client on console-fra.rpki-client.org