Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a623a3a2f34382d3438203d3e203238333638.roa
File:                     323830343a3835343a623a3a2f34382d3438203d3e203238333638.roa (raw, json)
Hash identifier:          Rn1RGDFLDP1+rvwvyi/NL7fGyltFDXa6Vr2JT+MJGcw=
Subject key identifier:   08:06:7C:1C:B9:41:90:82:96:25:3A:55:E7:F7:E3:35:0C:9C:23:93
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       1F8742D68FA0C80B7A2D34E5018BAD62E85D19FB
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a623a3a2f34382d3438203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:18 +0000
ROA not before:           Thu 04 Apr 2024 02:21:18 +0000
ROA not after:            Thu 03 Apr 2025 02:26:18 +0000
asID:                     28368
IP address blocks:        2804:854:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:87:42:d6:8f:a0:c8:0b:7a:2d:34:e5:01:8b:ad:62:e8:5d:19:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:18 2024 GMT
            Not After : Apr  3 02:26:18 2025 GMT
        Subject: CN=08067C1CB941908296253A55E7F7E3350C9C2393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:bd:c0:40:87:d1:52:78:4a:a5:52:b0:d7:
                    07:c9:de:27:3c:13:b8:7e:2c:db:2e:93:97:fd:7e:
                    81:a4:bb:88:5a:8d:6d:aa:06:db:dc:f6:48:75:ad:
                    3d:a7:f2:df:a1:d0:5c:21:1c:5e:f0:80:ee:b6:1d:
                    01:93:cf:39:b7:4c:34:ee:22:f5:04:bf:d1:69:87:
                    c9:2a:2b:24:71:7d:fc:92:a6:0c:d8:b4:46:85:b6:
                    0a:d8:8a:35:4e:b9:e3:33:b1:85:41:84:4f:53:85:
                    0f:a5:95:f9:0e:c6:e4:de:4d:37:b6:80:b8:09:7e:
                    58:b2:84:83:bd:86:fe:1e:1a:7a:84:15:c9:c1:58:
                    5c:64:b2:52:59:40:36:6b:75:59:7b:99:2d:82:bd:
                    ee:09:06:08:f7:b8:af:85:01:5f:a5:98:4f:1e:5e:
                    57:9a:3f:84:01:f4:34:55:53:72:1b:6c:63:96:e1:
                    57:17:44:95:23:ec:00:bb:3e:b2:13:9f:2d:b9:97:
                    94:65:50:b6:2f:43:0e:38:71:01:6b:67:c6:52:3d:
                    af:cc:e9:aa:cd:18:1a:5d:b4:72:c2:ee:1e:6e:cc:
                    5a:f2:2f:25:09:ac:4a:3a:e8:2b:48:4b:8a:5f:32:
                    ed:b5:96:46:0d:bc:2b:82:76:b4:e8:7d:16:27:6f:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:06:7C:1C:B9:41:90:82:96:25:3A:55:E7:F7:E3:35:0C:9C:23:93
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a623a3a2f34382d3438203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:854:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:c7:67:8a:3e:81:f2:c1:90:3d:ce:2b:8c:f5:4e:d4:44:
         76:e0:62:9e:c2:df:fb:f5:41:d0:14:cb:c4:41:84:37:62:0b:
         99:07:37:4a:dd:a5:19:c8:fa:67:57:cf:b4:e4:2c:b5:fe:eb:
         8f:34:39:82:b6:6d:ab:4f:ad:3a:a7:9b:55:e1:d9:58:17:df:
         68:96:8a:62:1e:3a:59:df:f1:e2:09:e4:66:4f:4c:d4:65:a0:
         7d:f8:c9:d6:00:f8:62:90:2b:93:03:45:a0:e3:e7:f3:48:85:
         a6:27:ad:e9:11:2f:2e:62:99:42:87:82:eb:60:aa:a1:61:d8:
         eb:28:00:61:f7:2a:77:04:06:f5:de:28:06:27:5a:2a:be:ec:
         80:48:51:9d:1f:0a:8e:4f:c9:40:d1:42:a2:ec:2b:f0:58:07:
         61:34:d2:3b:94:9e:e4:6d:73:9e:53:93:c6:63:2f:7e:e7:6e:
         0a:24:ae:15:9a:9d:c0:08:04:5e:e1:d1:d6:5f:27:dc:f1:28:
         60:b7:d1:62:6c:fd:57:cc:d5:af:32:99:86:ee:f4:db:d2:27:
         95:eb:c9:5c:d7:be:8d:b5:d7:a7:9d:02:23:cb:2b:28:17:c5:
         f9:34:a9:fb:89:c7:ce:b0:41:c0:3b:c5:cd:e4:f3:e9:9c:b0:
         86:c3:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org