Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/323830343a346436303a3a2f33322d3334203d3e20323633303936.roa
File:                     323830343a346436303a3a2f33322d3334203d3e20323633303936.roa (raw, json)
Hash identifier:          du+t67faFV+DugtMfxFnMFgMI6meam4trnPwKC6eL7E=
Subject key identifier:   F5:65:23:D4:F7:DC:E9:60:CE:E8:12:89:33:ED:8E:FC:8C:D3:EB:62
Certificate issuer:       /CN=7292FC5483AF008ACAD31348DC7D4F5B8ABF4970
Certificate serial:       16C6E5DD9C27E3B6D9343E37B60A56F01FCF6659
Authority key identifier: 72:92:FC:54:83:AF:00:8A:CA:D3:13:48:DC:7D:4F:5B:8A:BF:49:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/323830343a346436303a3a2f33322d3334203d3e20323633303936.roa
Signing time:             Thu 04 Apr 2024 20:07:23 +0000
ROA not before:           Thu 04 Apr 2024 20:02:23 +0000
ROA not after:            Thu 03 Apr 2025 20:07:23 +0000
asID:                     263096
IP address blocks:        2804:4d60::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.crl
                          rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c6:e5:dd:9c:27:e3:b6:d9:34:3e:37:b6:0a:56:f0:1f:cf:66:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7292FC5483AF008ACAD31348DC7D4F5B8ABF4970
        Validity
            Not Before: Apr  4 20:02:23 2024 GMT
            Not After : Apr  3 20:07:23 2025 GMT
        Subject: CN=F56523D4F7DCE960CEE8128933ED8EFC8CD3EB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:e0:4c:71:f0:fd:88:db:8b:42:5a:33:a4:
                    75:50:a8:8f:23:1d:15:f3:5f:27:5c:d3:41:6d:97:
                    6c:27:43:1b:f8:ad:10:68:36:ae:fd:bf:5c:79:66:
                    b4:7b:d3:e0:b4:a4:63:eb:7a:72:e2:4b:44:46:c5:
                    f8:e1:ba:b0:9c:f4:a8:02:6a:c2:40:85:ec:5d:ba:
                    35:ec:72:45:d2:1f:8a:17:4e:1d:40:fe:7d:bc:da:
                    e9:d0:a6:07:7e:af:bf:15:e8:57:39:23:d1:ac:11:
                    2a:0b:ff:35:16:73:1a:b5:b1:be:98:3d:25:1d:4b:
                    63:a2:99:98:cd:fb:00:7f:2c:ad:a4:5f:38:fa:23:
                    3f:03:b7:fb:52:bd:e0:b7:e1:8a:b0:98:0a:68:84:
                    ef:33:2d:0b:e4:3e:bb:d1:cb:93:81:c7:48:ce:37:
                    ea:69:1e:83:b8:a7:62:7a:ba:b9:3e:7d:bb:00:d4:
                    9e:dc:01:61:f7:af:b3:8a:7c:d9:3f:e6:b7:ab:25:
                    aa:6f:7c:b5:4d:87:73:65:2b:aa:4f:89:93:2f:86:
                    64:07:df:7d:e2:06:88:dd:33:4b:d3:8f:c1:8e:9c:
                    e8:dc:fc:43:05:b1:9f:93:f4:22:61:a2:97:8b:7e:
                    ec:0b:f4:a5:dd:d0:11:69:b5:d7:3b:7b:67:22:1d:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:65:23:D4:F7:DC:E9:60:CE:E8:12:89:33:ED:8E:FC:8C:D3:EB:62
            X509v3 Authority Key Identifier:
                keyid:72:92:FC:54:83:AF:00:8A:CA:D3:13:48:DC:7D:4F:5B:8A:BF:49:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/323830343a346436303a3a2f33322d3334203d3e20323633303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:33:54:92:8f:43:c9:ec:cb:65:40:6c:20:1f:be:d5:74:40:
         be:13:fa:08:2e:46:78:24:3b:b2:9c:c8:86:bc:d8:a9:6d:1a:
         c1:41:10:d1:23:63:81:90:8c:19:59:6e:70:97:63:75:77:61:
         0f:89:a5:03:74:63:18:21:8b:f1:1c:f1:28:32:21:be:1c:40:
         da:dc:b1:c3:ec:26:9f:56:14:cc:c7:4a:71:e8:54:9b:55:16:
         0c:40:b4:c4:ac:4c:27:a8:63:82:77:29:13:79:54:10:29:0d:
         96:59:47:c1:fd:ba:d5:74:1e:ea:0d:a3:6b:3e:40:c0:6f:5f:
         87:fa:d4:ff:45:87:17:f8:f2:78:bb:03:1f:e9:37:a9:89:3e:
         b3:4d:92:66:eb:e8:65:20:87:0e:d4:7b:88:8e:56:d8:50:22:
         cd:3d:77:6f:24:e5:f8:8a:d0:3b:b0:1f:db:89:44:a4:4c:a9:
         f2:c4:de:25:d5:62:79:fb:09:61:3b:3b:b6:cd:e2:31:b6:73:
         b1:bf:64:67:c1:5d:80:13:30:89:ea:60:77:61:90:fe:c2:2d:
         f8:0f:9d:24:81:50:7b:a7:28:a7:6d:e8:b3:97:31:81:fc:a2:
         e7:26:e6:9e:89:2a:fb:01:d1:ca:fd:d9:94:f3:dc:f7:85:44:
         53:29:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:54 2024 by rpki-client on console-fra.rpki-client.org