Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
File:                     323830343a6431633a3a2f33322d313238203d3e203532363030.roa (raw, json)
Hash identifier:          4itlm5KV5vLMmZdclH+JcOfGbzantqBanEabQqyO8Mg=
Subject key identifier:   E7:90:29:AD:5B:D7:49:D9:28:3D:89:7C:B6:0D:91:87:72:76:F6:C0
Certificate issuer:       /CN=59F73133C9108C206FE9409E22591FE97847518A
Certificate serial:       2892B4BCB3F60F39F8A9EA4992A0B80CF481CCCF
Authority key identifier: 59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
Signing time:             Thu 04 Apr 2024 18:36:43 +0000
ROA not before:           Thu 04 Apr 2024 18:31:43 +0000
ROA not after:            Thu 03 Apr 2025 18:36:43 +0000
asID:                     52600
IP address blocks:        2804:d1c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl
                          rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:92:b4:bc:b3:f6:0f:39:f8:a9:ea:49:92:a0:b8:0c:f4:81:cc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59F73133C9108C206FE9409E22591FE97847518A
        Validity
            Not Before: Apr  4 18:31:43 2024 GMT
            Not After : Apr  3 18:36:43 2025 GMT
        Subject: CN=E79029AD5BD749D9283D897CB60D91877276F6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:ab:e0:93:ed:5e:70:7b:3b:21:c4:dc:11:
                    11:fe:fa:2f:97:a9:4d:b6:32:dd:b7:b9:fb:5e:1b:
                    94:30:97:22:38:29:2b:70:b9:95:78:23:61:0b:1e:
                    d5:32:e5:69:e3:df:3a:74:68:22:d7:95:a9:8a:cb:
                    3b:a3:bd:1a:9a:eb:c7:44:9b:ca:58:5b:85:2c:be:
                    c9:06:4a:e0:35:cc:32:f8:f1:c2:f7:8e:00:3e:a2:
                    41:19:d4:f6:2f:af:78:9a:71:06:74:0e:b2:2c:ae:
                    df:b2:28:b2:a7:94:83:8f:c8:e2:36:a0:3d:47:78:
                    12:76:34:f5:d8:be:88:9f:15:c3:c2:79:9e:81:3e:
                    bd:0a:6e:78:87:04:44:cb:24:b5:6d:47:3a:7b:ed:
                    59:8b:00:cb:82:74:e8:ff:0f:e6:d7:bd:2f:c5:e5:
                    96:bb:ba:d6:d6:d3:d8:f8:2f:54:5a:98:cf:9c:b9:
                    6d:fb:85:b7:a6:74:2b:23:73:55:98:82:06:6c:74:
                    a8:c1:be:48:3c:ef:af:75:a3:15:bf:49:03:6b:d7:
                    39:69:56:61:75:0d:c9:c3:d2:c5:01:4b:31:21:56:
                    99:af:99:c6:94:a0:ea:6b:d3:33:59:7a:23:ec:3b:
                    fd:75:e1:4f:c0:fc:08:71:47:5f:ca:c6:e0:6a:f1:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:29:AD:5B:D7:49:D9:28:3D:89:7C:B6:0D:91:87:72:76:F6:C0
            X509v3 Authority Key Identifier:
                keyid:59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:30:b7:42:1d:79:87:d0:85:f8:d1:2f:78:79:00:d9:95:
         c2:46:3e:e5:23:23:5b:e4:5a:b7:5b:33:ab:8e:87:dc:62:85:
         1c:23:27:4a:be:9b:8e:fd:7f:35:36:ff:59:48:39:49:49:50:
         6f:1f:53:91:60:dd:4d:5d:34:c3:0a:27:6d:cb:89:ce:48:9d:
         99:c2:39:c2:ec:4e:be:dd:6c:ee:fd:95:6c:a6:5f:2f:f0:f9:
         0d:5f:d1:36:68:18:87:ec:3f:b1:49:5e:46:b2:3f:93:cd:41:
         d3:76:b4:24:65:8a:48:87:db:cb:5c:c4:5d:55:a1:eb:19:b3:
         26:13:fe:46:89:51:a4:30:df:70:a4:98:55:c5:b5:fe:06:cd:
         94:fd:c1:18:fb:f4:89:fa:c6:f7:b8:d1:53:63:1d:13:51:42:
         02:d8:28:71:9b:6b:1d:3e:72:2f:3c:70:bc:7f:1d:5a:21:63:
         5c:b6:9f:6d:66:af:5b:c0:b1:e3:60:91:51:9e:4c:9f:f9:67:
         bf:0a:53:0b:00:b3:e8:e8:c8:a5:96:31:ae:f0:3f:72:dc:d6:
         f9:4e:1f:2c:dd:a2:5d:b2:dc:bf:20:93:8a:3a:6a:a7:cf:42:
         63:6d:00:40:de:45:f3:be:6a:e0:66:7a:49:10:8f:31:c2:4c:
         44:4b:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org