Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a323030303a3a2f33362d3336203d3e20323634313639.roa
File:                     323830343a323338633a323030303a3a2f33362d3336203d3e20323634313639.roa (raw, json)
Hash identifier:          t4n0weidsvMKgknW1LBIdW/CTV0LW1IFI23soC6w+u4=
Subject key identifier:   DF:1B:76:0A:10:82:19:62:39:9C:DD:8C:AE:F2:A9:F7:FA:5D:36:9C
Certificate issuer:       /CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
Certificate serial:       2DBF55AE7A0B6B6A26683631B50774FD4083251A
Authority key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a323030303a3a2f33362d3336203d3e20323634313639.roa
Signing time:             Tue 06 Aug 2024 13:30:28 +0000
ROA not before:           Tue 06 Aug 2024 13:25:28 +0000
ROA not after:            Tue 05 Aug 2025 13:30:28 +0000
asID:                     264169
IP address blocks:        2804:238c:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl
                          rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bf:55:ae:7a:0b:6b:6a:26:68:36:31:b5:07:74:fd:40:83:25:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
        Validity
            Not Before: Aug  6 13:25:28 2024 GMT
            Not After : Aug  5 13:30:28 2025 GMT
        Subject: CN=DF1B760A10821962399CDD8CAEF2A9F7FA5D369C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:be:a0:9b:95:f8:74:3d:a2:ab:e4:cc:1a:
                    3f:8b:63:97:29:60:2a:d7:f5:07:68:1e:17:cd:eb:
                    d8:a0:14:f1:7d:9e:d5:bc:59:33:f9:b6:e3:06:27:
                    f8:28:86:e2:c0:6e:9b:df:ce:fa:4a:7c:d6:29:02:
                    44:ea:22:d1:bd:fb:05:62:21:b1:27:92:13:73:af:
                    56:0b:79:b4:9b:c7:e6:41:d0:b3:d0:04:43:80:2d:
                    5b:0c:33:71:07:c4:8d:a3:65:0e:f1:d1:66:42:e7:
                    bb:d4:f0:1d:e8:99:b0:58:14:29:f1:61:45:13:f8:
                    fe:ce:3b:75:31:97:34:ee:9b:3f:31:fc:f7:15:20:
                    2d:ce:1d:41:91:40:10:34:42:0e:2a:d7:fb:f8:4d:
                    79:0c:b3:68:f9:25:41:bc:4c:ca:cf:55:d9:ac:49:
                    d1:60:fb:3c:ef:03:3a:79:cf:29:a9:b0:c5:31:12:
                    06:e7:f5:6a:db:b1:83:ee:dd:fa:a5:f7:51:f4:59:
                    fb:54:87:4d:e2:20:bb:57:3d:c1:2d:ab:4c:40:e3:
                    9b:cb:62:27:a6:30:d2:30:5f:bc:db:69:4f:98:64:
                    1a:cd:db:ce:2e:e0:5b:7c:15:fc:b7:b9:13:b3:78:
                    23:18:6f:0c:8b:82:c3:32:a5:ef:f9:f2:89:42:43:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1B:76:0A:10:82:19:62:39:9C:DD:8C:AE:F2:A9:F7:FA:5D:36:9C
            X509v3 Authority Key Identifier:
                keyid:5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a323030303a3a2f33362d3336203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:238c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:3b:3f:4a:09:51:87:fa:54:7c:6e:b9:7e:8c:ba:62:7c:35:
         fc:d5:fe:e5:e0:85:18:fd:e6:1d:64:e7:53:bb:a0:5e:02:ea:
         71:81:68:69:ee:01:61:7b:4c:a2:0f:2d:6c:da:04:a2:ff:c4:
         84:59:13:e3:5b:62:35:24:db:f9:2c:18:c5:88:c0:72:11:30:
         2a:5c:46:d1:01:ef:e0:79:1c:54:fe:74:7b:d7:15:a1:36:6f:
         05:ee:2a:ec:5a:fd:5c:61:c5:73:4a:fb:da:a7:13:05:9c:74:
         96:dd:4c:2c:cf:90:b9:d9:46:01:14:3d:1b:d3:72:c4:dd:e0:
         b1:68:db:df:fc:a8:15:57:0b:0d:f3:62:82:33:0a:70:38:1a:
         82:d7:9f:c8:38:22:fc:47:ed:d1:4b:a5:1d:41:00:2e:1d:e2:
         0d:33:4f:db:1a:48:2b:7b:ee:e0:27:1e:4d:18:72:11:fe:d4:
         53:3e:53:5d:39:77:1c:47:ad:b9:a8:a6:18:bb:d9:68:b7:38:
         27:a1:e5:7d:4c:0a:58:9b:19:a6:d3:d3:fc:6b:2e:a1:4b:9b:
         d1:ad:c5:1c:f5:e2:50:07:1b:c6:16:78:10:18:33:d5:0f:82:
         4b:bc:b7:c5:d9:ad:89:ba:8a:44:83:98:d8:c2:f1:c4:b8:bc:
         30:86:6d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:49 2024 by rpki-client on console-fra.rpki-client.org