Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/323830343a333864383a3a2f33322d3334203d3e20323636353035.roa
File:                     323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (raw, json)
Hash identifier:          p2TxFej2cuAsJFUKPqYMeqD76Fbn74qb57RPthXetUM=
Subject key identifier:   16:A5:6D:E8:39:B3:65:ED:56:F1:CF:23:5F:45:22:CB:4E:F3:56:F3
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       7DAA1D3FD729DF3C2A9DCAE75D2E7401DD132B99
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/323830343a333864383a3a2f33322d3334203d3e20323636353035.roa
Signing time:             Wed 03 Apr 2024 18:30:33 +0000
ROA not before:           Wed 03 Apr 2024 18:25:33 +0000
ROA not after:            Wed 02 Apr 2025 18:30:33 +0000
asID:                     266505
IP address blocks:        2804:38d8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:aa:1d:3f:d7:29:df:3c:2a:9d:ca:e7:5d:2e:74:01:dd:13:2b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Apr  3 18:25:33 2024 GMT
            Not After : Apr  2 18:30:33 2025 GMT
        Subject: CN=16A56DE839B365ED56F1CF235F4522CB4EF356F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:7e:ae:a4:56:7f:32:a0:99:69:23:83:26:
                    c1:38:16:f4:00:7c:d6:02:89:1a:29:da:85:4f:8f:
                    60:87:07:e9:e5:e9:18:61:0d:d5:4d:47:c1:06:1b:
                    92:f0:2c:98:ca:4b:d7:4e:66:ef:67:a2:9b:35:ad:
                    44:7e:59:14:cd:f0:0d:4f:1d:82:dd:98:49:37:47:
                    f0:65:a9:52:29:ae:34:da:6c:5c:08:42:43:18:42:
                    13:b3:53:72:2e:14:fa:34:0f:b1:dd:4d:39:3f:17:
                    5f:a6:f5:f1:18:7c:03:cb:aa:61:54:10:56:ab:f2:
                    0f:7e:21:91:74:18:dd:0a:3b:2c:1d:b2:c6:91:e8:
                    88:ee:6c:32:02:00:17:0d:8d:57:41:6a:1e:51:ba:
                    31:84:91:6a:16:5f:b4:b4:85:ea:b6:46:3c:1a:ac:
                    d0:20:ff:07:b8:57:92:85:ba:ba:12:ff:4b:8a:a4:
                    6c:a3:c7:0b:ac:ac:68:fb:3e:41:cc:a9:c2:ed:bf:
                    d0:d8:a0:44:c0:ea:d4:07:2c:fc:61:ad:51:55:d8:
                    b6:5c:12:63:29:b6:be:7d:8a:8e:ff:c5:14:94:0f:
                    b4:da:57:ce:48:31:42:0c:d2:a9:27:ca:95:8c:f6:
                    f3:c3:3d:45:81:0c:6f:a4:5d:f8:90:0d:f9:af:64:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A5:6D:E8:39:B3:65:ED:56:F1:CF:23:5F:45:22:CB:4E:F3:56:F3
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/323830343a333864383a3a2f33322d3334203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:8b:91:b1:aa:8e:59:a1:57:bf:7b:dd:95:2a:2f:8f:5d:15:
         b8:3a:4d:d6:db:18:76:78:4a:f6:0d:25:01:e8:2e:20:dd:c5:
         30:f4:5a:0b:92:f1:a6:6b:c8:de:89:d1:77:d3:93:0a:b3:5e:
         04:69:9a:bf:52:a5:5e:b4:bb:2a:21:14:95:fb:b1:2d:d8:d0:
         2f:ee:1f:90:9b:49:fe:70:45:f5:b3:7f:8e:11:3b:de:e7:e6:
         a4:47:de:59:18:f1:ae:1e:1d:8b:c7:9f:f2:bf:fc:68:c6:6b:
         92:2e:8d:43:79:08:f0:20:a7:b3:e9:c6:1e:30:83:40:0c:0d:
         7c:91:12:e3:2b:7a:be:b3:17:5c:92:ad:1f:55:47:f0:ee:3d:
         8d:41:03:07:d1:5d:9f:c4:84:3a:c5:96:f4:96:21:a2:ae:80:
         bb:f7:51:27:87:ee:b8:30:50:09:b1:11:28:a7:df:54:c5:55:
         aa:28:9e:b8:23:1f:d1:82:36:1d:fc:e1:eb:46:0e:fa:cc:63:
         a2:4f:81:bb:12:7a:bb:f8:ce:f8:f5:24:ba:c6:90:40:d7:ae:
         78:9e:3b:8a:80:af:0d:d8:2f:9a:c5:10:57:cb:63:8f:92:9b:
         eb:a7:21:20:4c:6d:aa:15:4a:6a:24:8a:92:36:0b:68:b3:30:
         ec:dd:1a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:09 2024 by rpki-client on console-fra.rpki-client.org