Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/323830343a346235383a3a2f33322d3334203d3e20323637323939.roa
File:                     323830343a346235383a3a2f33322d3334203d3e20323637323939.roa (raw, json)
Hash identifier:          mURpdrR/sgwWvGkMCCYcNlxHmcaJVcOGa+lQlNSihqc=
Subject key identifier:   9C:59:3D:2D:30:47:F3:F7:B8:94:DB:87:7D:46:BF:2C:EE:59:15:13
Certificate issuer:       /CN=F1819F336E15B82769119C5B919D4F6F3543575A
Certificate serial:       5B7E71A2AE89FB15054C2B012682EB4D40A203F9
Authority key identifier: F1:81:9F:33:6E:15:B8:27:69:11:9C:5B:91:9D:4F:6F:35:43:57:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/323830343a346235383a3a2f33322d3334203d3e20323637323939.roa
Signing time:             Thu 04 Apr 2024 16:14:55 +0000
ROA not before:           Thu 04 Apr 2024 16:09:55 +0000
ROA not after:            Thu 03 Apr 2025 16:14:55 +0000
asID:                     267299
IP address blocks:        2804:4b58::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.crl
                          rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7e:71:a2:ae:89:fb:15:05:4c:2b:01:26:82:eb:4d:40:a2:03:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1819F336E15B82769119C5B919D4F6F3543575A
        Validity
            Not Before: Apr  4 16:09:55 2024 GMT
            Not After : Apr  3 16:14:55 2025 GMT
        Subject: CN=9C593D2D3047F3F7B894DB877D46BF2CEE591513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:b7:1e:5d:79:06:28:e5:86:ee:fa:b9:2a:
                    dc:62:9a:de:dd:1c:25:c9:8b:04:81:65:4e:b5:79:
                    b9:2f:46:df:a2:3a:95:47:71:60:a2:51:29:c7:13:
                    1f:a7:7f:aa:53:0f:a5:72:a6:32:3c:90:81:82:0a:
                    63:a5:6c:f3:a8:07:d8:c0:ae:68:98:53:cf:67:49:
                    ed:45:e4:2c:89:39:9b:cd:ea:4b:00:21:ac:3e:28:
                    01:5c:dd:e5:20:24:22:54:2f:b2:e6:0c:e0:0d:28:
                    9b:dd:f0:03:6a:e3:85:9d:3b:a1:d7:99:36:61:87:
                    4e:0d:56:42:2b:51:75:40:0d:cc:ab:d3:e3:3c:c2:
                    5d:a4:f2:f8:c3:39:14:ad:95:ef:7c:4f:be:48:af:
                    b0:c9:c9:7f:e0:67:90:d2:2d:6c:03:9e:cd:63:73:
                    ec:db:63:3a:e0:d8:6a:36:27:3f:8f:5d:82:b7:95:
                    14:c6:30:4c:b5:36:f3:75:3c:ee:48:c0:f2:b1:73:
                    db:d4:f4:31:ff:4e:a2:71:27:73:8b:db:44:aa:e7:
                    7a:d7:41:c7:8d:7e:86:a8:b8:2c:27:bd:24:04:5f:
                    e3:9f:6b:08:55:23:ea:33:83:59:40:25:59:b9:b1:
                    62:3c:06:db:45:e9:cc:4f:77:f0:0f:b4:02:2a:8e:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:59:3D:2D:30:47:F3:F7:B8:94:DB:87:7D:46:BF:2C:EE:59:15:13
            X509v3 Authority Key Identifier:
                keyid:F1:81:9F:33:6E:15:B8:27:69:11:9C:5B:91:9D:4F:6F:35:43:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/323830343a346235383a3a2f33322d3334203d3e20323637323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:69:67:84:ed:1b:7f:71:4b:10:5d:c7:2c:21:b1:de:b2:f6:
         49:de:2a:24:f2:1d:e5:c7:d4:fe:2c:db:a4:66:83:ff:09:00:
         bc:8f:45:c9:2a:7f:61:f7:44:c7:27:18:d5:b6:fe:f5:c5:38:
         3c:f1:6a:79:64:2b:60:c7:7b:6d:e2:cb:ec:ef:01:e7:7e:eb:
         08:c8:f0:79:5c:98:79:9e:96:98:39:51:eb:fd:a4:f9:74:b9:
         d8:47:93:27:68:4b:fe:76:11:ea:04:ba:e2:10:1c:7c:ea:55:
         d7:50:d9:75:60:e6:57:a8:c4:f5:ff:47:aa:46:46:11:4a:b4:
         13:8f:66:1a:83:cc:c8:b8:c0:3c:39:99:a5:08:f8:a3:76:0d:
         f2:d6:77:a5:26:38:49:b7:ed:be:f1:f1:c2:6f:c7:ae:5c:27:
         2c:ae:44:9d:c8:8b:cd:6f:43:91:2e:d3:35:8f:fe:c6:70:e3:
         05:45:8b:46:2a:85:3d:05:be:9c:c8:6b:03:1a:c7:17:86:e7:
         c2:71:0b:2c:c8:8a:93:5d:e7:26:1e:32:2a:00:88:0b:04:80:
         5c:4d:13:ea:f1:73:76:7a:8d:02:d7:cb:71:aa:bc:e2:6b:a1:
         1c:fb:03:7b:bc:47:7d:fa:c2:6b:47:90:d4:f1:a2:c5:d5:8e:
         b4:2e:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org