Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/323830343a373035383a3a2f33322d3438203d3e20323730373231.roa
File:                     323830343a373035383a3a2f33322d3438203d3e20323730373231.roa (raw, json)
Hash identifier:          dQLzQAlHdgTDz47AJU3QH9Fl4kFL/E/YRU0AqiRKka4=
Subject key identifier:   C5:03:22:39:6B:26:FC:FC:B1:F6:AE:F4:95:42:BD:18:4B:FF:D8:30
Certificate issuer:       /CN=88317B76B846F9CB3074395BEF7D4F045F879D1E
Certificate serial:       0DE42D84FE6F39C03B23C4C09406994D1A1FD07A
Authority key identifier: 88:31:7B:76:B8:46:F9:CB:30:74:39:5B:EF:7D:4F:04:5F:87:9D:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/323830343a373035383a3a2f33322d3438203d3e20323730373231.roa
Signing time:             Wed 24 Jul 2024 19:45:02 +0000
ROA not before:           Wed 24 Jul 2024 19:40:02 +0000
ROA not after:            Wed 23 Jul 2025 19:45:02 +0000
asID:                     270721
IP address blocks:        2804:7058::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.crl
                          rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e4:2d:84:fe:6f:39:c0:3b:23:c4:c0:94:06:99:4d:1a:1f:d0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88317B76B846F9CB3074395BEF7D4F045F879D1E
        Validity
            Not Before: Jul 24 19:40:02 2024 GMT
            Not After : Jul 23 19:45:02 2025 GMT
        Subject: CN=C50322396B26FCFCB1F6AEF49542BD184BFFD830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ad:ff:ee:88:50:e4:09:7c:2c:8e:39:61:f7:
                    26:cc:19:ec:7d:39:16:0b:36:7b:15:86:8d:b1:78:
                    6b:ae:7f:d0:58:4e:84:80:55:b7:a3:2c:59:8f:a9:
                    f4:2e:95:a4:8f:45:94:fe:cb:e2:d7:b9:31:fb:5b:
                    56:cf:98:04:43:df:ea:0c:49:a8:ee:26:b7:33:9c:
                    09:7c:a6:af:18:0e:4e:ba:e4:ff:74:d1:e4:5e:ab:
                    18:23:15:93:6a:13:ad:df:70:c8:53:a8:70:d0:f8:
                    fa:33:f0:54:58:ab:6c:07:42:fe:30:7f:84:39:21:
                    45:5c:37:d2:02:44:1d:90:96:29:2f:7d:cb:71:32:
                    79:26:56:86:1e:0e:3b:7e:19:03:34:d6:98:68:9a:
                    14:30:21:d6:13:90:a7:bb:fd:49:99:1f:2d:77:4d:
                    fd:cc:b0:2a:2a:00:2d:dd:3d:7c:ce:89:8d:70:e3:
                    5f:6f:c9:9a:49:f1:88:0e:a4:38:25:39:ee:8d:60:
                    32:e7:eb:7c:e9:40:3f:0d:1b:b2:fb:57:7e:36:da:
                    99:24:2c:d7:e6:08:04:48:e0:a9:9e:a8:15:38:e6:
                    9b:32:61:b6:06:60:63:c1:83:93:a1:b9:82:24:3e:
                    4f:78:05:58:7a:84:ea:18:45:47:9f:6d:8b:75:c4:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:03:22:39:6B:26:FC:FC:B1:F6:AE:F4:95:42:BD:18:4B:FF:D8:30
            X509v3 Authority Key Identifier:
                keyid:88:31:7B:76:B8:46:F9:CB:30:74:39:5B:EF:7D:4F:04:5F:87:9D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/323830343a373035383a3a2f33322d3438203d3e20323730373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7058::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:78:b5:57:17:b5:c0:6a:a1:84:e3:0b:00:75:77:fd:af:
         c3:17:f7:6d:ce:44:26:02:33:3d:ca:cf:69:c0:6f:2d:4f:77:
         21:c7:72:d5:77:4d:a1:ab:cc:06:04:84:10:2e:61:54:f8:38:
         40:c2:32:d1:b3:f0:a8:24:96:8d:38:ab:59:45:a6:13:ad:83:
         85:68:a5:d8:a6:f7:d9:41:8f:d9:c8:c4:b7:7f:d3:8a:96:35:
         86:fd:69:59:d0:98:15:c0:06:33:68:95:5c:70:fd:4d:93:08:
         43:6d:6c:be:6d:ee:8c:49:d6:59:88:71:d1:65:e5:7a:4f:eb:
         30:a5:80:7e:c9:e2:c7:06:7f:52:e7:d3:c7:83:f0:7a:90:15:
         ee:b4:2f:42:09:2e:0c:46:94:3e:12:2b:f5:4d:48:33:4b:87:
         b1:01:69:a6:8b:b1:52:e6:7b:ce:20:f1:b3:2d:97:2d:f1:fd:
         19:c7:dd:b8:99:99:06:2b:9e:c4:14:d9:7c:24:3e:b3:06:d9:
         1e:c8:06:f9:b6:6e:f2:27:d6:21:08:39:f5:42:84:ed:e2:40:
         73:8f:09:dc:14:85:eb:1c:6e:14:98:b0:d0:4e:03:e3:d6:c0:
         dc:74:c8:e3:37:2b:25:4e:be:f7:95:25:1d:be:17:cc:0d:a3:
         1e:4b:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:50 2024 by rpki-client on console-fra.rpki-client.org