Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/323830343a333731343a3a2f33322d3438203d3e20323636333838.roa
File:                     323830343a333731343a3a2f33322d3438203d3e20323636333838.roa (raw, json)
Hash identifier:          zt8kOnfunFs5lQip1qLXu4vgsydrOdTyWd6rsLDGvAo=
Subject key identifier:   2D:BF:7E:9B:AC:D0:41:F6:4B:39:17:A8:A2:92:5C:76:B4:1D:8D:20
Certificate issuer:       /CN=5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A
Certificate serial:       69B65292309F837E2C1D9B566ED2C7F5948010AD
Authority key identifier: 5C:E6:10:AA:B9:80:AB:0F:31:7F:CD:00:4D:2D:0A:36:4D:DB:CC:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/323830343a333731343a3a2f33322d3438203d3e20323636333838.roa
Signing time:             Wed 03 Apr 2024 20:26:04 +0000
ROA not before:           Wed 03 Apr 2024 20:21:04 +0000
ROA not after:            Wed 02 Apr 2025 20:26:04 +0000
asID:                     266388
IP address blocks:        2804:3714::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.crl
                          rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b6:52:92:30:9f:83:7e:2c:1d:9b:56:6e:d2:c7:f5:94:80:10:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A
        Validity
            Not Before: Apr  3 20:21:04 2024 GMT
            Not After : Apr  2 20:26:04 2025 GMT
        Subject: CN=2DBF7E9BACD041F64B3917A8A2925C76B41D8D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:94:bf:e9:25:6c:90:37:85:43:45:37:23:
                    8e:79:e8:07:0f:59:af:c8:ee:61:b8:88:b8:08:8c:
                    36:f3:0c:d4:45:e4:4b:3b:ed:61:a4:9c:99:88:a7:
                    7a:4c:ea:0a:56:97:4e:bd:77:aa:a7:7e:cc:70:1e:
                    3e:3e:28:10:c3:4b:87:1b:0d:9d:fc:06:26:7b:25:
                    b1:3f:6e:51:31:86:73:07:9b:34:c2:ad:a7:dd:67:
                    fa:fb:70:74:3d:25:68:11:77:31:5a:63:51:d2:f3:
                    41:d9:93:9a:b2:67:ab:f2:13:cb:66:79:4c:21:6b:
                    ce:2b:24:32:23:fb:a5:ae:f5:35:2f:6a:cb:a1:70:
                    17:48:ed:04:49:ea:ed:35:9b:18:60:12:a4:32:ad:
                    68:79:a5:74:6b:6a:8d:2d:6c:6a:6e:90:25:85:b7:
                    bd:73:f1:db:56:02:00:a6:89:71:cc:72:eb:1f:d5:
                    27:12:b5:6f:af:fc:7f:95:87:31:be:a0:e2:0f:86:
                    fa:5b:f4:07:73:6b:68:1c:4b:4c:80:b1:93:f0:f3:
                    91:39:0f:41:c0:0d:e9:33:91:42:00:fd:a4:12:65:
                    7e:fb:7a:f5:a4:a9:6d:1c:31:90:a5:b4:a6:57:d5:
                    6b:e5:f6:5c:4e:83:af:9b:4a:81:08:39:de:79:93:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BF:7E:9B:AC:D0:41:F6:4B:39:17:A8:A2:92:5C:76:B4:1D:8D:20
            X509v3 Authority Key Identifier:
                keyid:5C:E6:10:AA:B9:80:AB:0F:31:7F:CD:00:4D:2D:0A:36:4D:DB:CC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/323830343a333731343a3a2f33322d3438203d3e20323636333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3714::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:11:af:dd:51:f2:d9:43:27:18:72:72:64:b8:10:44:78:
         4c:c8:ce:f8:94:6d:ae:c4:01:50:ac:11:05:28:cf:e5:20:1d:
         af:e9:5f:5a:a7:5b:20:c6:67:e5:c7:2f:70:72:96:d9:f6:e9:
         53:5a:78:8c:bf:e9:f1:41:60:b5:18:86:0d:e6:af:5c:4d:8a:
         a0:63:e5:71:0c:f4:93:d4:66:01:07:63:e8:01:45:d3:da:a5:
         93:7f:b6:a6:45:f4:c8:67:e1:6d:94:61:66:77:2a:22:ff:4c:
         e6:ca:a6:bb:6b:6d:3e:dc:63:db:24:20:56:90:f8:a6:46:82:
         4a:d0:8b:62:70:57:8e:aa:dd:e6:af:59:de:92:6e:a2:56:56:
         93:14:ea:36:9a:b6:3f:3b:51:9e:7c:78:85:2f:d9:b4:c0:f0:
         48:c0:62:ae:91:70:3e:ac:1e:9d:27:be:a2:39:fe:78:43:e9:
         e3:51:1b:dc:74:94:73:1a:c7:f3:58:ce:c2:d0:ca:e1:b3:42:
         a6:df:9e:21:b5:22:e9:57:49:48:0e:86:3f:fd:b9:ff:54:6e:
         eb:dd:91:5c:88:f1:f3:a5:7a:8f:39:6e:22:61:9f:f1:27:c2:
         bb:44:bc:89:b0:48:3e:be:21:b8:9b:ba:6e:e8:e2:88:a6:e9:
         d5:2e:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:52 2024 by rpki-client on console-fra.rpki-client.org