Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3430203d3e203532353837.roa
File:                     323830343a386563303a3a2f33322d3430203d3e203532353837.roa (raw, json)
Hash identifier:          rCU39CyqxzXGnk0YiOLQrc0gsr0NaBuDRWe3eIXHbqg=
Subject key identifier:   D2:7A:B5:16:29:1A:9F:98:68:7D:82:6C:56:0E:16:CD:01:11:B2:23
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       1B1A3BB2ABC77A8A0ED41D7B6B988C36BF7CC880
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3430203d3e203532353837.roa
Signing time:             Fri 24 May 2024 18:36:27 +0000
ROA not before:           Fri 24 May 2024 18:31:27 +0000
ROA not after:            Fri 23 May 2025 18:36:27 +0000
asID:                     52587
IP address blocks:        2804:8ec0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Jun 2024 11:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1a:3b:b2:ab:c7:7a:8a:0e:d4:1d:7b:6b:98:8c:36:bf:7c:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: May 24 18:31:27 2024 GMT
            Not After : May 23 18:36:27 2025 GMT
        Subject: CN=D27AB516291A9F98687D826C560E16CD0111B223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d9:c0:dd:71:b1:29:b0:11:d5:c9:e8:a9:53:
                    3e:e2:e1:64:c9:6c:64:48:53:4e:c4:e3:1c:69:d0:
                    25:bf:32:cb:0b:80:4a:df:d3:b9:f5:65:7c:82:36:
                    b5:e7:48:9d:ea:98:e6:53:0c:39:a0:be:77:25:aa:
                    26:85:78:87:73:35:08:0c:16:59:61:0f:d5:56:7f:
                    4e:4b:5a:48:c6:51:6f:46:48:fa:66:72:ee:cc:f6:
                    c1:b2:80:7c:db:fd:a4:b9:c0:86:39:48:57:96:f2:
                    bb:ab:64:9d:25:a5:a7:d8:c9:ac:8c:64:85:9e:17:
                    85:1d:59:4c:32:26:91:4a:5c:9a:ed:39:3c:9b:f7:
                    3c:5b:8a:cf:f8:84:39:a3:eb:36:57:df:72:19:3f:
                    f9:db:12:3b:41:d5:c1:1e:14:16:6d:51:87:c9:cf:
                    68:41:c3:6a:45:93:f1:de:d0:80:c3:fd:9c:db:ad:
                    7b:f7:61:a0:8d:cf:31:8c:b0:69:e7:ce:25:41:1e:
                    f7:ee:c1:1c:4a:5a:fd:7a:e7:54:cb:54:52:4f:7c:
                    9d:68:f0:f1:2f:d5:33:85:46:42:5c:f8:87:4b:15:
                    18:ce:5a:85:67:aa:eb:15:7f:ec:64:19:71:50:ec:
                    68:78:43:74:5d:3c:d5:32:fb:cd:20:3e:85:79:4c:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7A:B5:16:29:1A:9F:98:68:7D:82:6C:56:0E:16:CD:01:11:B2:23
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3430203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:e1:ff:b4:36:1c:f3:9e:06:fd:54:a5:b3:c5:96:e8:6d:69:
         b9:99:c7:9b:3e:90:ba:79:b3:a1:c2:b8:bb:fd:59:e5:19:36:
         70:3f:e7:ab:14:7a:b2:c8:f9:0b:0f:75:05:19:78:3e:be:58:
         d4:c9:5e:c5:2f:cb:2a:0f:ba:8a:1e:82:18:3a:38:96:a9:22:
         24:f7:a4:50:60:1d:75:20:14:69:74:bb:16:ba:42:de:92:b4:
         97:96:ee:f2:e1:95:64:a9:04:2b:72:03:38:d3:13:f8:dd:30:
         59:24:3d:85:99:46:44:fa:9a:f2:e7:c8:9f:2a:e2:d7:ad:ba:
         1c:3c:5a:cb:6c:47:6a:ca:ea:4c:38:c9:52:6c:b1:9d:e3:cf:
         4d:59:61:03:32:79:2f:2d:e9:62:74:45:ad:b6:e8:5b:9c:8f:
         f6:c5:18:dc:fb:85:e8:9e:86:4f:57:89:45:5f:50:2e:9e:fc:
         25:f4:3d:c0:f6:b1:54:c6:cd:77:e9:7d:81:40:2d:d6:ad:ab:
         79:ae:05:df:00:9a:44:e3:6f:dc:30:12:f8:5c:5e:d1:17:18:
         16:3c:31:e3:2c:33:4a:56:c4:0f:12:4b:b9:39:e2:6a:9d:73:
         f3:69:88:19:fb:9e:b8:48:69:e3:3d:f8:72:07:8f:2f:0a:2d:
         17:6b:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 12:13:33 2024 by rpki-client on console-ams.rpki-client.org