Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
File:                     323830343a383865303a3a2f33322d3438203d3e203238333236.roa (raw, json)
Hash identifier:          H1H13m/8kUhRFbaM5uLCg+NY14wFBl8TkjDTPzyaiQM=
Subject key identifier:   8A:C2:09:42:CE:62:31:E7:A7:9E:0B:74:98:42:2A:60:78:5F:55:5A
Certificate issuer:       /CN=425279A675F326D0577BF774BBB20A14508381AD
Certificate serial:       5E592296899930EF91D37F0EE0A4B11153450EB9
Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
Signing time:             Thu 04 Apr 2024 13:54:38 +0000
ROA not before:           Thu 04 Apr 2024 13:49:38 +0000
ROA not after:            Thu 03 Apr 2025 13:54:38 +0000
asID:                     28326
IP address blocks:        2804:88e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl
                          rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:59:22:96:89:99:30:ef:91:d3:7f:0e:e0:a4:b1:11:53:45:0e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD
        Validity
            Not Before: Apr  4 13:49:38 2024 GMT
            Not After : Apr  3 13:54:38 2025 GMT
        Subject: CN=8AC20942CE6231E7A79E0B7498422A60785F555A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:1b:07:7c:9a:ce:76:23:49:e1:98:38:7f:
                    90:fa:bb:18:29:46:89:d4:75:3c:8c:18:dc:46:8f:
                    6a:56:c8:c3:1b:e6:44:18:4c:b1:d3:fd:4d:8c:44:
                    45:56:88:74:66:5e:28:fb:cf:af:88:c8:87:ba:98:
                    11:70:a6:ba:4a:a2:80:e4:e8:55:61:00:98:26:20:
                    f2:02:47:6a:d6:35:00:2d:ee:4f:ca:c7:f8:9f:78:
                    19:55:b7:ea:2e:c7:e6:39:17:da:77:88:1f:3b:e9:
                    81:34:68:0d:a3:f6:57:ae:93:a0:74:72:64:e8:a4:
                    18:94:fb:16:f9:9c:3d:cc:b4:ff:e9:c9:7c:2c:90:
                    5c:e3:2a:fc:02:60:c4:dd:d0:21:38:d6:8f:3d:0d:
                    1a:dc:a6:59:b8:8c:59:3d:58:d8:0f:d7:9c:03:78:
                    1e:44:a5:bb:8f:e9:25:1f:8a:40:de:0e:97:47:08:
                    1d:b4:bd:cb:07:d3:5f:0d:37:6a:2b:71:7e:d2:5b:
                    44:ac:1b:a0:65:2c:a3:62:f4:46:f4:89:f2:08:27:
                    82:38:b9:87:dc:ae:1d:cc:b0:ab:ec:be:30:c8:8b:
                    f7:f0:d7:08:e3:ac:66:75:5d:ce:02:f0:13:d9:18:
                    5c:96:bd:cc:9d:f2:83:27:2f:bf:b9:1f:0a:d4:1f:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C2:09:42:CE:62:31:E7:A7:9E:0B:74:98:42:2A:60:78:5F:55:5A
            X509v3 Authority Key Identifier:
                keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:3f:6b:48:e9:fd:a2:96:a4:86:57:97:73:7c:87:24:d1:
         a4:ab:93:3d:94:6c:c1:4f:65:38:ab:c2:9a:a6:9b:b9:21:5a:
         6d:02:d8:91:a7:9c:42:36:ca:85:39:b6:fa:f0:d6:fd:87:54:
         82:91:08:c7:8b:09:d2:46:ee:5c:b0:88:63:45:fe:11:8a:1d:
         90:6f:dc:4c:38:95:09:a9:8f:f1:a6:13:e9:2e:da:f2:61:67:
         13:8c:cd:f7:67:69:0c:1a:fc:8b:c3:28:85:6c:55:0c:04:ff:
         50:d3:e2:35:85:2f:fe:d9:f9:a5:65:ba:45:a3:0c:f9:dd:bb:
         da:a1:ba:6f:d5:c4:71:24:ac:9f:3e:5c:18:54:57:e3:81:aa:
         64:d4:3a:02:12:92:45:c0:bf:49:88:39:77:5d:fb:0c:22:d9:
         da:95:18:d0:b3:37:fb:53:90:52:3e:ff:7e:c7:37:34:6b:6f:
         97:41:d0:43:8d:b5:ab:5b:03:57:81:20:58:d4:38:57:f6:59:
         7a:d2:17:cd:56:38:e2:c9:f4:93:fa:c8:8c:a5:3b:b2:ae:68:
         e3:c8:a6:65:46:b5:50:b3:36:43:57:55:29:84:59:02:20:bd:
         c9:1c:cc:1c:bb:7a:e4:b8:7f:8a:b0:a7:6d:35:dd:7a:5f:ef:
         fb:55:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org