Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a3835343a613a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          2Ti7+K/3LNdjnWusO7QS9x+m6dgvw6WNQsfkf4EaZqU=
Subject key identifier:   1E:60:76:75:AD:8C:3D:EC:38:70:F5:38:FB:31:AF:77:B3:6C:B9:4D
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       58BBD2716F0DBB28E5E9B4866D9782465A33AD48
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 04 Apr 2024 02:26:17 +0000
ROA not before:           Thu 04 Apr 2024 02:21:17 +0000
ROA not after:            Thu 03 Apr 2025 02:26:17 +0000
asID:                     61832
IP address blocks:        2804:854:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bb:d2:71:6f:0d:bb:28:e5:e9:b4:86:6d:97:82:46:5a:33:ad:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:17 2024 GMT
            Not After : Apr  3 02:26:17 2025 GMT
        Subject: CN=1E607675AD8C3DEC3870F538FB31AF77B36CB94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:4b:4b:3a:34:10:d3:e8:9f:cb:3f:5f:8f:
                    73:d8:61:90:55:41:1d:e0:71:a6:11:6a:9d:07:9a:
                    ab:f9:af:e7:7d:8e:10:98:04:df:f9:9a:ec:77:43:
                    4b:be:53:be:b9:3c:a6:7a:ea:ba:be:a6:c8:c8:ae:
                    ce:08:fb:0d:4d:2a:1c:21:7b:ff:4a:f8:8c:f5:ab:
                    5e:b0:23:35:2f:5a:80:1c:25:66:70:00:35:91:d5:
                    02:ae:b2:8c:fe:99:e5:d4:b2:be:43:8e:de:8f:0f:
                    03:fa:ee:29:21:84:8d:88:94:94:56:c5:6e:23:f7:
                    27:1d:02:de:e9:37:c8:7d:71:d5:ce:50:e9:6b:ae:
                    cb:b9:73:31:ad:4f:03:df:3a:8a:61:4a:14:b3:f7:
                    7e:31:9f:8c:05:26:1b:0f:50:4f:a6:aa:23:e9:40:
                    42:25:73:77:00:c2:37:d9:69:1b:f0:02:61:9e:97:
                    aa:c2:de:ed:7c:10:e5:68:f9:5e:a6:7e:9f:23:4b:
                    59:d1:43:19:c5:0d:70:3e:1e:2b:f0:09:be:6e:08:
                    bc:8d:fa:ce:e9:37:9e:fb:dd:58:da:fd:ac:ad:06:
                    3d:6e:e3:cb:48:7a:56:ae:3e:5d:8f:09:27:8d:c6:
                    7c:94:47:a8:18:2e:b7:3d:18:99:23:90:dc:09:66:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:60:76:75:AD:8C:3D:EC:38:70:F5:38:FB:31:AF:77:B3:6C:B9:4D
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:854:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:95:54:02:7d:dd:35:ae:d2:93:0a:33:ea:ff:d5:30:ff:ad:
         84:15:fc:07:84:a9:8e:ae:7d:2f:39:12:bb:b4:1c:3d:2b:8e:
         2e:ee:62:1d:e7:4b:4f:61:20:81:9a:f9:2e:b6:1a:d9:78:a6:
         4c:79:9d:d7:a9:5b:c0:43:cd:65:0b:ad:eb:95:f5:f4:6e:39:
         31:0f:b7:ac:00:1c:c2:30:05:f9:c1:64:63:48:a6:75:a6:54:
         d2:fc:ee:29:ec:dd:8f:bc:9e:c8:1a:2a:e0:7a:c1:d1:e2:8e:
         2b:09:21:82:0b:4d:72:09:03:92:18:77:f1:30:d3:77:58:4d:
         c7:8c:42:e8:c7:f2:dd:b3:23:2a:52:48:4e:e6:84:ab:d6:95:
         46:1e:d5:9f:39:c5:f4:11:5d:40:c0:5c:72:d8:f4:e8:b2:84:
         cd:f8:a2:03:b2:64:82:84:f9:ea:99:b4:54:ca:ce:4f:cb:03:
         65:ec:79:8f:0a:c5:fb:67:0a:20:8d:2b:92:cf:9d:7b:ae:28:
         b2:d8:79:cb:b5:9b:cc:60:4e:84:cc:ad:4b:63:85:e2:6b:7c:
         c7:ca:58:7d:ab:a1:b1:0a:e8:5e:e2:9f:50:65:4e:b4:64:c6:
         75:96:2e:cc:63:4c:a3:29:7c:4e:37:d1:20:9a:6e:62:82:72:
         8b:52:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:34 2024 by rpki-client on console-ams.rpki-client.org