Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a383030303a3a2f33362d3336203d3e20323632333338.roa
File:                     323830343a3830343a383030303a3a2f33362d3336203d3e20323632333338.roa (raw, json)
Hash identifier:          NkNisXD5gUc7/Gda7aOIGSvcTzqj8Bx86BiBMr6aUoY=
Subject key identifier:   07:9D:8D:14:42:F3:E3:07:96:67:1A:46:80:92:8D:16:50:EE:83:E4
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       71C2A1A3682B71613D8D73EE0DF0ED79842B626E
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a383030303a3a2f33362d3336203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:44:56 +0000
ROA not before:           Wed 24 Apr 2024 12:39:56 +0000
ROA not after:            Wed 23 Apr 2025 12:44:56 +0000
asID:                     262338
IP address blocks:        2804:804:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 07:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c2:a1:a3:68:2b:71:61:3d:8d:73:ee:0d:f0:ed:79:84:2b:62:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:39:56 2024 GMT
            Not After : Apr 23 12:44:56 2025 GMT
        Subject: CN=079D8D1442F3E30796671A4680928D1650EE83E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:7d:16:e2:ba:ca:a7:e2:5c:c2:a9:07:00:
                    d9:e2:a9:db:39:f2:f2:25:6e:09:43:64:16:ac:14:
                    22:2a:9f:c6:d6:71:9d:eb:44:02:77:b6:57:16:b7:
                    42:9b:f7:9f:ab:5b:cc:51:c5:ea:5d:af:8f:05:89:
                    ec:f4:47:89:d2:dc:3c:a5:cf:7d:26:92:b1:eb:87:
                    20:de:ae:cd:dc:5b:16:a0:37:e2:ac:7d:52:48:09:
                    54:ed:03:10:85:32:f9:30:92:68:08:80:43:93:78:
                    31:b1:06:46:d1:fc:62:fc:68:78:f4:3d:59:34:d8:
                    aa:e0:f5:8c:5f:9e:72:19:83:71:48:05:87:f2:24:
                    e0:9c:08:15:61:3c:31:54:69:81:26:1d:af:71:55:
                    c1:32:79:8a:f6:39:b7:2f:fc:01:1b:72:c3:3a:74:
                    71:8c:6c:8b:3a:c4:c1:89:da:3c:97:0c:4e:b7:57:
                    3a:1e:a3:65:1d:24:e5:c8:05:7d:6a:f9:48:59:d7:
                    bf:06:49:6e:d2:43:cc:88:c1:6d:b5:3b:a3:07:13:
                    26:2f:72:6b:a8:ab:79:4a:c7:38:ac:8a:c8:8e:d6:
                    e7:90:82:78:b9:91:47:d0:2f:56:a5:3b:ca:58:98:
                    e9:b7:ac:62:db:3b:9f:c0:6d:ad:27:12:1a:03:c7:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9D:8D:14:42:F3:E3:07:96:67:1A:46:80:92:8D:16:50:EE:83:E4
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a383030303a3a2f33362d3336203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:804:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:60:6e:f7:27:ac:a1:a9:fe:b2:0f:df:ef:cc:a6:5b:ce:3f:
         70:01:45:cb:ad:b4:51:d2:fc:95:9e:1c:83:f8:52:fc:18:ce:
         3c:8a:87:fe:10:6a:34:79:60:df:3f:28:ef:b2:f5:8a:a7:c4:
         1c:a5:88:83:10:70:aa:e8:75:f1:9e:f1:7f:c9:14:ff:8b:db:
         36:87:5f:17:2a:78:be:56:1b:36:7b:6a:a8:4d:32:ca:6e:82:
         dd:3f:bb:ed:f0:f5:7a:4b:e0:ba:a1:82:01:6a:e8:2a:16:18:
         c0:98:05:65:b7:6f:dc:7a:e3:94:b1:a9:7f:53:91:2f:e8:a2:
         b0:f5:f9:1a:6b:b9:cc:f6:31:51:ea:d5:9c:a6:36:d8:42:5c:
         44:9f:51:ec:41:42:29:9a:82:7f:07:b5:6b:97:4d:ab:ad:13:
         49:c6:6d:31:cb:82:8b:6a:68:ec:52:20:5a:09:d3:64:8c:18:
         c9:a6:15:52:df:a4:96:d1:9a:ca:5d:a6:dc:e7:62:43:09:61:
         fd:c3:ae:47:22:62:cc:48:36:b1:22:72:61:10:16:c0:a1:aa:
         01:1c:1d:1e:5b:8a:cc:65:c1:6a:2e:43:34:24:fc:63:66:17:
         ec:be:44:47:38:93:40:58:d1:a0:3f:c0:68:76:0d:20:63:34:
         90:57:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:35 2024 by rpki-client on console-fra.rpki-client.org