Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/323830343a313838343a3a2f33322d313238203d3e203631393337.roa
File:                     323830343a313838343a3a2f33322d313238203d3e203631393337.roa (raw, json)
Hash identifier:          vP2icQWvFWbesjCpkIkBW5Yvs6RLc6XZQc05EEqqVB4=
Subject key identifier:   C0:85:BD:51:9E:96:3A:D8:6C:8F:73:27:81:C8:D6:99:56:24:87:BB
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       6F9C5AB59D74989A2DED82DAA4D49CE5388B6846
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/323830343a313838343a3a2f33322d313238203d3e203631393337.roa
Signing time:             Thu 04 Apr 2024 08:48:12 +0000
ROA not before:           Thu 04 Apr 2024 08:43:12 +0000
ROA not after:            Thu 03 Apr 2025 08:48:12 +0000
asID:                     61937
IP address blocks:        2804:1884::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9c:5a:b5:9d:74:98:9a:2d:ed:82:da:a4:d4:9c:e5:38:8b:68:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Apr  4 08:43:12 2024 GMT
            Not After : Apr  3 08:48:12 2025 GMT
        Subject: CN=C085BD519E963AD86C8F732781C8D699562487BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:60:1c:a4:c4:cb:45:16:83:af:d5:52:e1:
                    03:83:6c:62:21:f1:af:d8:94:31:da:59:13:e6:4d:
                    29:c7:3c:7d:de:40:82:be:2c:7a:1c:09:2c:06:c3:
                    c1:1e:37:63:f8:17:bf:21:d8:fc:d8:07:2f:cd:d0:
                    9f:5a:bb:dd:c6:e6:c6:b9:a6:f4:66:b3:27:5d:42:
                    0a:7f:c0:75:7d:aa:c3:7f:3d:75:08:37:41:c0:27:
                    de:d4:79:58:14:ff:04:45:1f:58:e0:8c:07:0e:f2:
                    dc:3c:e5:c7:17:41:fc:25:90:9d:cf:2b:14:c7:9d:
                    d8:05:9e:d0:45:eb:bb:bc:ec:7b:6c:06:2e:1b:25:
                    8c:4e:58:56:8e:7a:dc:9c:d0:95:ef:50:13:9c:74:
                    8a:7c:69:16:31:b4:56:3b:3c:2e:24:05:46:2f:41:
                    64:94:07:46:14:13:01:03:c7:fd:a0:be:ce:5c:93:
                    41:da:22:fc:68:19:b3:1b:d9:e8:12:d9:6d:2a:fb:
                    e0:5e:f6:a5:32:16:2d:12:a8:4a:6c:fd:55:00:1c:
                    ae:cf:7e:90:86:29:1d:e1:e2:ad:fa:9b:ea:e0:5d:
                    b2:58:36:44:93:02:15:e4:b8:85:5a:66:bb:95:10:
                    95:16:74:09:f4:cd:85:7f:2b:9d:d0:db:7d:d1:e8:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:85:BD:51:9E:96:3A:D8:6C:8F:73:27:81:C8:D6:99:56:24:87:BB
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/323830343a313838343a3a2f33322d313238203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1884::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:73:b6:67:66:e1:80:39:38:40:3b:16:69:7a:ae:a2:7d:e0:
         66:e8:db:de:67:f8:6a:cf:0a:2b:f3:61:40:d6:26:2d:88:34:
         96:be:51:6e:c7:29:d5:4a:8a:4b:73:e6:c8:d7:7b:f8:4b:87:
         c1:bd:0e:1a:27:18:d0:df:de:9f:d3:65:5d:42:f0:25:27:83:
         5b:54:6e:67:15:d7:2d:ec:92:41:52:cd:14:e2:88:0d:50:37:
         7c:f1:d3:3d:48:b5:b5:9e:bd:51:5a:71:37:91:dc:26:a9:3f:
         78:ad:ed:d8:88:e4:1c:55:1d:9a:73:cb:25:3e:f4:92:67:63:
         2d:e1:73:66:72:ca:ae:b9:13:5d:91:e4:d7:66:fb:4c:91:2f:
         32:3b:6a:53:6e:5a:ad:c5:8e:93:42:2f:0f:97:d2:0b:2e:60:
         53:e0:9e:fb:05:ed:ac:b1:36:52:27:99:e2:e8:47:a8:4d:9a:
         1e:54:16:6a:a9:2c:23:7d:da:d4:ee:76:d2:fc:02:d3:6a:e4:
         9a:ee:c3:a3:1f:b6:38:16:67:cc:e7:80:a2:9d:f2:ac:ae:22:
         fb:bc:9c:ac:2d:b4:77:b9:7c:71:21:8b:ee:dd:18:9a:c0:15:
         70:83:6b:06:47:0e:cc:90:e7:32:04:41:ca:33:dd:2f:a9:b6:
         aa:56:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:26 2024 by rpki-client on console-fra.rpki-client.org