Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d3438203d3e20323733373832.roa
File:                     323830343a386332343a3a2f33322d3438203d3e20323733373832.roa (raw, json)
Hash identifier:          CenQ0dvwqB0pULUDmOdO7oaBtlyv4aKKxbpsIjOw09w=
Subject key identifier:   16:03:29:D5:92:C3:51:A6:63:FB:9B:43:D5:94:96:7B:05:66:13:56
Certificate issuer:       /CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
Certificate serial:       6A3D97D37EDA018C1E3BAB20C72A5FF9AE6C19BB
Authority key identifier: AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d3438203d3e20323733373832.roa
Signing time:             Wed 05 Jun 2024 19:20:50 +0000
ROA not before:           Wed 05 Jun 2024 19:15:50 +0000
ROA not after:            Wed 04 Jun 2025 19:20:50 +0000
asID:                     273782
IP address blocks:        2804:8c24::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl
                          rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3d:97:d3:7e:da:01:8c:1e:3b:ab:20:c7:2a:5f:f9:ae:6c:19:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
        Validity
            Not Before: Jun  5 19:15:50 2024 GMT
            Not After : Jun  4 19:20:50 2025 GMT
        Subject: CN=160329D592C351A663FB9B43D594967B05661356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:21:4f:59:a6:b5:55:61:9b:65:aa:cc:d9:
                    74:28:fb:e8:b4:60:15:c7:6e:13:23:e1:07:67:16:
                    35:71:a4:aa:b6:f1:19:8d:4e:9b:39:9a:d4:20:5b:
                    ef:e2:e5:95:e2:1f:b7:fe:83:7c:1c:80:60:7f:5a:
                    28:64:60:69:21:62:8e:5e:7b:8c:f3:6c:6d:47:44:
                    22:41:9a:62:fc:76:5d:77:6a:2e:08:d7:66:78:57:
                    56:95:55:3b:57:19:75:7d:6e:4b:73:28:27:e0:10:
                    9f:e2:04:3f:f5:c2:3d:b9:c5:cd:55:2a:e3:cb:ea:
                    25:d2:1c:e1:70:3a:cc:9b:39:6d:86:bf:48:ce:e1:
                    6c:52:d0:97:8a:4b:72:09:85:6d:74:08:55:ba:22:
                    9c:a9:49:32:7e:58:46:19:64:48:cf:96:6b:ce:bc:
                    c7:fb:6a:fc:0a:45:e7:ca:8c:61:2e:c8:64:b1:b9:
                    d6:82:c2:b4:81:c5:10:20:e7:50:cb:65:5b:ed:fe:
                    30:98:fb:d2:75:8e:fa:b5:71:ff:1e:84:88:ff:25:
                    4d:e1:25:45:3d:df:c5:4f:e0:84:2e:e1:5c:58:af:
                    6e:9a:0d:6f:0c:bd:5d:d7:39:b9:5d:6d:6f:35:e9:
                    1c:7a:1b:c7:d6:83:e7:64:91:df:f0:fb:70:47:58:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:03:29:D5:92:C3:51:A6:63:FB:9B:43:D5:94:96:7B:05:66:13:56
            X509v3 Authority Key Identifier:
                keyid:AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d3438203d3e20323733373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:78:4f:21:de:42:6c:b7:a7:d6:54:b7:8b:6e:f8:ef:34:
         c5:59:84:1e:5a:5a:8f:bf:8d:91:bc:f8:9c:b9:f9:00:2a:b6:
         2c:68:2f:ab:ab:f7:d3:10:8f:81:a5:fb:c5:e5:4b:a6:05:8b:
         02:f7:d0:b6:4f:06:1b:63:43:e0:b1:17:41:95:3e:46:21:30:
         85:3a:c9:6f:59:e2:29:b7:fc:a3:b0:ed:5f:91:89:33:3a:8f:
         6a:5a:a0:8d:81:59:b6:ca:f5:b2:15:29:d1:d7:4c:54:89:97:
         f5:34:b1:12:82:1e:4f:ef:c8:fe:b3:c9:c2:39:a7:7e:76:fd:
         c0:10:39:fa:34:c6:8b:d7:76:85:15:cf:5e:c6:a1:00:2a:33:
         f0:ee:74:ed:45:8c:f1:14:23:f3:97:87:06:cd:7c:36:44:e1:
         e4:89:4e:71:82:97:90:66:5b:23:8d:c2:29:06:5f:4d:29:52:
         eb:89:ee:e1:fa:07:1f:f4:b3:5c:08:f8:c2:b6:59:ea:36:02:
         36:89:5c:08:d4:10:83:66:d4:6e:3f:ce:e5:77:fb:40:74:18:
         83:41:d4:47:e3:9a:37:67:5c:27:61:d1:0b:ef:f1:29:26:d6:
         0d:a9:b9:7a:f5:96:50:a8:d0:3e:69:da:e0:ed:ac:10:b2:22:
         b4:d1:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:19 2024 by rpki-client on console-fra.rpki-client.org