Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/323830343a6431303a383030303a3a2f33332d3333203d3e203532353933.roa
File:                     323830343a6431303a383030303a3a2f33332d3333203d3e203532353933.roa (raw, json)
Hash identifier:          0rTWP5DGYf8ZrG+U76xvqXFaIXWynuVgFB+KEMpLl6U=
Subject key identifier:   1E:E7:38:2F:D6:05:27:2E:BB:5C:76:6C:AB:54:BA:DC:DB:AC:A1:E1
Certificate issuer:       /CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
Certificate serial:       25A0E1280DFB3D62749334A687E807897F551E07
Authority key identifier: 71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/323830343a6431303a383030303a3a2f33332d3333203d3e203532353933.roa
Signing time:             Wed 03 Apr 2024 22:00:31 +0000
ROA not before:           Wed 03 Apr 2024 21:55:31 +0000
ROA not after:            Wed 02 Apr 2025 22:00:31 +0000
asID:                     52593
IP address blocks:        2804:d10:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a0:e1:28:0d:fb:3d:62:74:93:34:a6:87:e8:07:89:7f:55:1e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
        Validity
            Not Before: Apr  3 21:55:31 2024 GMT
            Not After : Apr  2 22:00:31 2025 GMT
        Subject: CN=1EE7382FD605272EBB5C766CAB54BADCDBACA1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ae:66:33:24:13:ab:3e:01:ab:34:21:73:ed:
                    38:cd:67:c0:65:41:80:e5:8d:01:7a:7b:ce:7c:71:
                    e2:ed:5b:a1:7f:85:5a:59:27:ff:e3:49:2f:cc:62:
                    0b:57:a4:e6:64:7c:96:fd:33:08:58:7f:75:16:41:
                    04:3b:6b:84:a3:8c:d0:27:a4:9e:84:26:03:6c:75:
                    11:f7:59:6f:9b:2e:d4:81:f8:44:94:24:f5:c9:b1:
                    74:50:8b:f2:b3:75:41:db:ed:83:5d:79:e7:2e:33:
                    2a:ed:20:31:c8:27:89:f0:cc:fc:b1:87:58:e5:79:
                    f8:4e:76:e9:66:ff:45:4b:7d:37:f4:82:b3:17:a0:
                    13:4a:9d:0a:e8:b5:f1:15:48:48:86:f1:8c:7e:77:
                    bd:5c:4c:e9:58:68:90:c1:92:bd:78:a2:93:6c:9b:
                    db:2f:d2:6a:67:14:70:94:09:0f:38:a6:98:05:33:
                    99:cb:c9:bf:25:78:76:40:86:7f:8e:aa:0f:a6:54:
                    72:3e:44:6f:3f:9c:91:81:9c:cc:84:3a:8d:da:dd:
                    f2:58:56:42:e3:4d:98:88:ab:b1:e8:89:76:92:1e:
                    ab:3e:73:1d:f4:fe:3e:44:43:6a:25:59:3a:d1:bc:
                    6d:b2:5a:36:d1:64:98:2f:46:12:44:b6:71:04:48:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E7:38:2F:D6:05:27:2E:BB:5C:76:6C:AB:54:BA:DC:DB:AC:A1:E1
            X509v3 Authority Key Identifier:
                keyid:71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/323830343a6431303a383030303a3a2f33332d3333203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:c5:d2:d7:1b:94:91:f2:58:e7:90:02:67:3b:10:88:87:e4:
         b4:4a:06:06:4a:e3:3c:70:35:f5:45:66:49:e5:41:17:aa:5b:
         49:41:08:aa:de:10:3e:d1:92:f1:1b:63:40:38:a8:99:6d:3a:
         b9:bc:71:35:43:52:4c:9f:e6:74:95:94:c6:16:23:33:fb:16:
         3b:32:c7:83:9c:b5:75:63:c8:01:25:7b:c5:3e:68:44:59:d5:
         7f:e3:43:73:dd:11:9c:17:c5:21:4d:cf:3b:a7:32:c9:20:48:
         52:6b:40:1d:ff:84:e1:de:6e:05:c6:2d:87:60:42:e2:1f:9d:
         a3:73:14:ef:55:ba:98:86:b2:31:b4:9f:bc:85:1b:49:e6:cb:
         53:61:cb:98:28:5d:0c:49:58:b4:1f:d2:88:29:70:0e:fb:2d:
         1d:21:17:b9:dc:2e:31:86:76:9d:7f:f4:c6:f6:5a:0d:d9:4e:
         2e:96:38:2a:f5:54:59:ed:42:5e:9a:70:5b:18:e9:5d:8e:05:
         f5:72:de:2a:f0:d6:5a:ae:ae:2b:e5:24:fa:aa:d3:6e:6e:aa:
         33:3e:86:13:0b:a3:9a:f7:39:e5:d0:87:38:cc:66:71:b1:0e:
         32:8c:f6:e9:8c:95:c9:53:89:eb:2c:b4:ce:55:10:9c:d5:6a:
         a0:f1:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:38 2024 by rpki-client on console-ams.rpki-client.org