Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a6231633a3a2f33322d3438203d3e203533303038.roa
File:                     323830343a6231633a3a2f33322d3438203d3e203533303038.roa (raw, json)
Hash identifier:          P+LzA872sEE33+w8eI30st9a1FgG2QCcncPfHdqjr94=
Subject key identifier:   0F:E8:C7:12:EE:B6:79:A6:63:BA:95:80:29:27:2B:AB:96:3C:AB:6D
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       2B5349C93B31A4A277C9D444605DF14A6C3AF98B
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a6231633a3a2f33322d3438203d3e203533303038.roa
Signing time:             Mon 08 Jul 2024 19:43:04 +0000
ROA not before:           Mon 08 Jul 2024 19:38:04 +0000
ROA not after:            Mon 07 Jul 2025 19:43:04 +0000
asID:                     53008
IP address blocks:        2804:b1c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:53:49:c9:3b:31:a4:a2:77:c9:d4:44:60:5d:f1:4a:6c:3a:f9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:04 2024 GMT
            Not After : Jul  7 19:43:04 2025 GMT
        Subject: CN=0FE8C712EEB679A663BA958029272BAB963CAB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:89:b6:48:e1:3a:0b:25:7e:1c:f8:8e:e7:
                    5a:c5:80:7f:b6:42:23:46:e3:99:f7:81:0a:a3:a9:
                    4d:24:53:23:cc:25:0d:11:20:dc:f4:93:45:24:3c:
                    06:d3:6b:16:b5:be:6a:a7:16:9f:48:2e:5a:83:56:
                    2a:e6:a9:1e:aa:7a:db:1f:23:ad:00:fc:be:32:7f:
                    94:f2:05:0a:3f:4d:26:17:e0:1a:07:dc:76:d3:50:
                    46:66:72:fb:4d:88:cc:b1:84:7a:23:a9:17:c3:a2:
                    fd:14:84:a4:ac:46:ea:c5:01:aa:2a:7e:5f:29:3c:
                    1e:b6:d8:86:6f:69:99:59:c7:85:a3:e4:21:bf:b1:
                    41:d1:92:6f:9d:06:cd:5e:58:11:ab:2a:63:b2:f2:
                    82:7e:9e:63:c4:86:04:47:bf:0d:ec:bd:d4:70:fc:
                    7d:20:fd:9d:82:b3:71:ad:47:1f:84:c3:21:b2:f3:
                    09:06:75:92:45:17:ff:60:5b:be:97:e9:a2:f5:06:
                    f3:cc:f8:f1:23:24:7e:54:b4:b1:8c:1f:2a:6d:5d:
                    76:8e:a4:28:44:76:af:de:55:0c:84:3f:f6:01:c9:
                    fd:c5:2c:31:fe:24:fa:2e:65:f6:cb:27:ad:de:79:
                    03:f4:cc:a9:f0:ff:8d:d6:5d:b3:f3:71:ef:82:4b:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:C7:12:EE:B6:79:A6:63:BA:95:80:29:27:2B:AB:96:3C:AB:6D
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a6231633a3a2f33322d3438203d3e203533303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:ab:c9:8d:11:b7:16:68:7b:0e:1b:8c:36:30:0c:2e:6b:f2:
         e2:25:3c:58:f6:0c:6d:09:01:cb:dd:37:b4:65:83:16:49:03:
         81:6b:0d:28:85:bb:33:f2:8f:da:e8:ca:18:4d:c6:78:7a:0d:
         03:85:f6:28:0a:19:8d:11:34:78:3c:93:fd:75:6b:ea:b9:b9:
         85:32:27:43:ed:28:59:74:db:9d:c2:b4:cf:ef:15:47:88:c6:
         0c:56:52:db:7d:53:e5:32:96:4f:7a:9d:64:ef:7e:bb:7c:b9:
         e8:bf:f8:5f:5a:d2:28:c3:15:a4:8c:c8:97:65:3f:4e:a1:9d:
         a0:4e:40:f6:b3:71:68:8c:3e:dc:98:cf:83:23:2f:19:61:b3:
         d6:02:de:7a:3b:16:a9:6c:9d:8d:96:28:ce:ba:f5:42:ed:bf:
         5f:d6:45:03:5c:d6:6e:e4:ba:eb:d3:d2:70:73:7c:63:69:97:
         97:4c:27:a8:87:39:a0:90:c3:49:2c:d2:31:28:95:2f:23:bd:
         5e:ff:e4:1c:de:99:5f:34:6f:bc:11:97:3d:7e:8c:cc:03:10:
         14:23:43:07:f6:b4:8e:4d:e4:20:7c:77:ff:bd:e7:f4:de:8b:
         29:7c:90:5f:4b:4a:6a:e0:db:3a:02:d7:de:77:56:b3:d5:2d:
         44:f3:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org