Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203533313831.roa
File:                     323830343a6636633a3a2f33322d3438203d3e203533313831.roa (raw, json)
Hash identifier:          bTKkWQE0tbknCZXt3faEtEW9N9L0zh5RwmNl+4nJ+iM=
Subject key identifier:   DE:5D:6C:0B:D7:6B:45:D0:2B:10:CD:DF:2F:25:1D:4F:96:E8:71:96
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       2E3E5DF98A39C1BFE9AF79EF6F7F0367204F8BF8
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203533313831.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     53181
IP address blocks:        2804:f6c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3e:5d:f9:8a:39:c1:bf:e9:af:79:ef:6f:7f:03:67:20:4f:8b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject: CN=3082010A0282010100A0BD176104F2D23DC952FF46E79A32B37F8C4674F96D3BC9BD3146DBA8367D341F0E22A8494FB57F8507C9C836C8FB390FEBAAB04580B9929FDC0CCCB90669B48C1E26664FE9AC23D724964027CD5CB89C7CE5954BE1515DE4A751282676528B75E748EE8DF793393A2C040AF8E0E19D21BA32168867FE9DABC3F9B6492CECE47E310A113CECF13B54B4ADC1C8DCE9E88FB1548C92F7E8C6CB182F5B8FBB04FECFADEA6940FD22082EF00F9A098518B01AFBF5D185986E676D8D9A755E7279A56D618BF62AB198C5BA52BAD97A904D43BAF8DE1688588300DE7D9B61FAF3ECD0D10E823F022E92C3B62F8D562F09500BD15198A587876EE45C8C5662D2DE1E290203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:17:61:04:f2:d2:3d:c9:52:ff:46:e7:9a:
                    32:b3:7f:8c:46:74:f9:6d:3b:c9:bd:31:46:db:a8:
                    36:7d:34:1f:0e:22:a8:49:4f:b5:7f:85:07:c9:c8:
                    36:c8:fb:39:0f:eb:aa:b0:45:80:b9:92:9f:dc:0c:
                    cc:b9:06:69:b4:8c:1e:26:66:4f:e9:ac:23:d7:24:
                    96:40:27:cd:5c:b8:9c:7c:e5:95:4b:e1:51:5d:e4:
                    a7:51:28:26:76:52:8b:75:e7:48:ee:8d:f7:93:39:
                    3a:2c:04:0a:f8:e0:e1:9d:21:ba:32:16:88:67:fe:
                    9d:ab:c3:f9:b6:49:2c:ec:e4:7e:31:0a:11:3c:ec:
                    f1:3b:54:b4:ad:c1:c8:dc:e9:e8:8f:b1:54:8c:92:
                    f7:e8:c6:cb:18:2f:5b:8f:bb:04:fe:cf:ad:ea:69:
                    40:fd:22:08:2e:f0:0f:9a:09:85:18:b0:1a:fb:f5:
                    d1:85:98:6e:67:6d:8d:9a:75:5e:72:79:a5:6d:61:
                    8b:f6:2a:b1:98:c5:ba:52:ba:d9:7a:90:4d:43:ba:
                    f8:de:16:88:58:83:00:de:7d:9b:61:fa:f3:ec:d0:
                    d1:0e:82:3f:02:2e:92:c3:b6:2f:8d:56:2f:09:50:
                    0b:d1:51:98:a5:87:87:6e:e4:5c:8c:56:62:d2:de:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5D:6C:0B:D7:6B:45:D0:2B:10:CD:DF:2F:25:1D:4F:96:E8:71:96
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:a8:9c:45:44:2d:18:f7:d5:87:83:fd:9d:49:a2:fb:c4:
         21:c7:73:d6:5f:75:c4:d3:0b:7b:ea:c0:e8:20:7d:28:47:31:
         80:20:26:6a:47:12:4d:0c:23:25:b3:1c:28:16:9c:9c:bb:80:
         3b:c7:0f:d3:c0:f7:72:e5:28:e7:18:f5:41:e8:80:d6:08:81:
         b3:f6:bb:4b:ee:51:dc:25:12:5e:1a:8e:45:57:71:e0:5b:a5:
         ad:26:39:29:54:14:40:55:4d:3b:20:85:03:07:b1:ee:75:2c:
         f3:73:2f:3a:b2:e3:4b:49:7f:fd:e5:87:76:87:d9:d0:c4:b9:
         6c:ba:ec:67:ad:9e:41:02:2d:87:db:65:9a:18:e7:74:89:85:
         bf:11:eb:50:c0:d1:c7:ed:ae:16:28:a1:ea:cb:3d:f9:82:cc:
         34:33:d4:c2:52:3a:c4:d1:97:7f:ad:a0:30:9e:36:5d:77:78:
         c8:8f:98:58:a0:d7:b9:62:f1:09:0a:13:f5:1e:fb:a4:c0:0d:
         72:22:4a:ec:c5:dd:e3:77:25:b8:af:ec:f6:9f:d6:55:a5:b5:
         32:21:91:d3:30:eb:6d:08:3e:9b:ca:a6:95:fe:cf:00:ea:9c:
         07:8d:b5:a2:bc:c8:4f:82:38:55:ab:b5:68:72:80:c9:62:89:
         58:02:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org