Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa
File:                     323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa (raw, json)
Hash identifier:          c0DK1GIyPii0rwUtN6h7PcdYvYydDg5Q2U0ypTVVPzY=
Subject key identifier:   5A:54:CE:18:27:79:BC:7C:FA:9C:CF:B6:23:BF:EE:AC:4C:3B:3A:2D
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       1F87B79426D77F0CAF8F437AA733932AC5EBB07A
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa
Signing time:             Thu 04 Apr 2024 18:18:27 +0000
ROA not before:           Thu 04 Apr 2024 18:13:27 +0000
ROA not after:            Thu 03 Apr 2025 18:18:27 +0000
asID:                     262617
IP address blocks:        2804:3d74:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:87:b7:94:26:d7:7f:0c:af:8f:43:7a:a7:33:93:2a:c5:eb:b0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Apr  4 18:13:27 2024 GMT
            Not After : Apr  3 18:18:27 2025 GMT
        Subject: CN=5A54CE182779BC7CFA9CCFB623BFEEAC4C3B3A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:73:d0:f2:0d:c7:49:09:87:d6:42:ad:83:
                    74:01:05:31:6c:c2:e8:3a:6a:97:c4:9a:89:b4:97:
                    58:5d:9e:41:42:1f:7f:d9:22:a8:1a:4b:42:82:2f:
                    44:74:e7:ef:c2:21:92:79:9e:0f:e8:b1:8d:c3:37:
                    38:ad:81:e0:74:e8:3b:f9:93:44:0c:0d:d2:42:68:
                    e8:94:fd:60:a1:00:92:11:d7:de:5e:f0:ea:03:7b:
                    a9:38:e1:61:8f:e7:46:3a:48:00:9f:a4:30:a6:fc:
                    e7:6b:b9:70:6b:38:04:e5:c5:46:b5:32:c0:b2:c3:
                    ac:91:e4:06:8a:84:df:68:1f:71:4e:3e:bd:4c:a4:
                    45:71:63:1b:e2:6c:8e:aa:75:47:3f:3a:29:41:01:
                    0a:ec:37:ee:ee:ae:a6:1f:e9:b6:69:0a:84:39:e4:
                    57:ab:a7:10:29:6a:1d:5b:5f:a4:73:81:6d:10:78:
                    28:1c:3e:95:e8:05:5d:cc:ba:8d:87:d4:16:7a:5c:
                    b3:36:c1:1b:d7:7f:88:b7:3c:50:d9:a0:f0:ea:41:
                    0d:3a:73:4b:45:89:58:80:78:7c:e7:c2:d4:8e:c0:
                    8b:77:9f:ed:47:e1:8e:87:6d:5b:c4:4c:37:37:60:
                    ec:81:69:aa:4f:ca:76:71:70:68:51:58:84:5f:80:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:54:CE:18:27:79:BC:7C:FA:9C:CF:B6:23:BF:EE:AC:4C:3B:3A:2D
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3430303a3a2f34302d3430203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:29:3e:c7:5c:52:cb:67:02:0a:a0:f8:66:3e:65:30:a8:91:
         aa:3c:e3:87:8e:a8:11:bc:4e:1c:31:0a:26:92:b4:e3:8c:49:
         75:fc:60:56:61:8d:01:c2:28:0e:96:c8:ba:f6:6e:a1:fc:65:
         33:b1:59:0b:9e:cb:5a:59:d7:8b:3b:de:52:52:47:15:a9:83:
         04:a5:ad:ba:19:ef:cb:0b:a7:f1:a8:ff:7a:24:5d:97:46:bd:
         38:86:52:3d:ec:09:37:93:df:7f:c8:73:3d:1c:e0:b7:78:4b:
         26:c7:17:1c:9f:1f:33:da:3c:35:7e:33:2f:6a:84:df:7e:89:
         cf:68:f4:ea:3a:bd:52:f7:7e:cb:32:d6:96:39:f5:6f:d6:49:
         a2:84:68:63:46:51:27:22:5a:f3:47:f8:b7:cd:7a:3a:b9:60:
         46:f7:a5:5a:24:48:b2:63:d9:de:c1:df:93:af:f3:67:f5:79:
         5b:93:15:5e:0f:96:db:71:7f:1e:61:00:d7:b6:7b:e3:40:94:
         dd:8d:7a:0a:8f:17:04:35:dc:62:a6:e1:66:b1:cd:90:0a:5b:
         bd:2b:a8:55:47:3b:8c:d4:5f:5a:1f:b3:88:f9:c2:22:0d:d2:
         b8:ce:81:15:b1:a3:ce:66:17:2d:39:81:f3:c4:7c:08:fb:1a:
         ce:aa:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:03 2024 by rpki-client on console-fra.rpki-client.org