Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/323830343a316135633a3a2f33322d3438203d3e203631383536.roa
File:                     323830343a316135633a3a2f33322d3438203d3e203631383536.roa (raw, json)
Hash identifier:          /2+nbpm4T5WOyY4xMpo4fxROWMjs4QZdUEYevaSIUjg=
Subject key identifier:   C7:4B:C7:34:96:69:9B:B8:F4:B7:1F:82:27:30:CA:F8:D0:54:59:42
Certificate issuer:       /CN=9954871A58BD1D563C66245B157E43881A74A8D7
Certificate serial:       393BECEF429B0783A05C3C0A189EE26BB4C22E95
Authority key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/323830343a316135633a3a2f33322d3438203d3e203631383536.roa
Signing time:             Thu 04 Apr 2024 06:12:19 +0000
ROA not before:           Thu 04 Apr 2024 06:07:19 +0000
ROA not after:            Thu 03 Apr 2025 06:12:19 +0000
asID:                     61856
IP address blocks:        2804:1a5c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl
                          rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3b:ec:ef:42:9b:07:83:a0:5c:3c:0a:18:9e:e2:6b:b4:c2:2e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9954871A58BD1D563C66245B157E43881A74A8D7
        Validity
            Not Before: Apr  4 06:07:19 2024 GMT
            Not After : Apr  3 06:12:19 2025 GMT
        Subject: CN=C74BC73496699BB8F4B71F822730CAF8D0545942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:a0:9a:f6:4a:bc:9c:1a:c1:c1:51:80:58:
                    c2:b7:0b:72:15:d9:dc:97:05:d1:1c:dc:d0:06:b2:
                    e1:43:30:33:30:50:60:fa:f4:d0:55:1a:97:a9:32:
                    3a:08:30:54:5e:e2:df:0f:a6:9c:50:c4:b8:1d:52:
                    ef:01:a2:93:14:e7:18:6f:fa:30:56:9b:4d:88:57:
                    d9:f3:16:63:6f:66:96:4d:77:03:f0:c1:3b:06:55:
                    74:3a:02:a5:44:0e:4a:11:2b:dc:16:88:06:ac:91:
                    5b:41:93:cc:58:03:64:09:5c:2c:ac:98:6c:e5:7b:
                    91:d9:c9:fe:f7:d2:ae:54:d7:16:c6:b0:6d:7f:b4:
                    29:99:43:40:3f:34:3d:a6:93:31:e2:aa:11:e7:4f:
                    60:eb:c2:25:ce:3f:80:52:23:c6:36:26:91:ef:d6:
                    e2:14:b5:e4:bc:a4:ba:e7:37:9f:6c:0a:56:89:31:
                    94:c1:d6:03:85:84:ea:96:29:50:de:97:d0:c4:aa:
                    b3:f6:e3:f1:9e:cb:e2:31:92:37:c2:e3:5d:89:ec:
                    53:57:5f:22:60:3c:64:e9:3c:bb:1e:87:6a:d9:d6:
                    11:86:bb:60:1b:72:7b:76:80:f6:b0:dd:af:3f:fd:
                    59:07:59:96:d6:a0:e9:1c:94:cc:2d:39:92:c5:05:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4B:C7:34:96:69:9B:B8:F4:B7:1F:82:27:30:CA:F8:D0:54:59:42
            X509v3 Authority Key Identifier:
                keyid:99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/323830343a316135633a3a2f33322d3438203d3e203631383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:93:bf:ed:52:3a:42:99:92:78:e4:5f:76:46:6f:ff:db:05:
         8a:59:51:80:45:d2:79:f4:d4:af:ed:7a:a7:be:f6:a9:bc:3a:
         1f:02:39:7b:01:c1:8c:17:96:17:c4:5b:7b:c5:04:1e:f5:fa:
         e5:79:5a:70:b7:f3:e2:18:63:cb:04:a1:c8:28:18:cb:0c:b4:
         94:af:52:1f:42:fa:97:a2:1a:69:f4:26:66:29:93:ca:73:62:
         f9:f2:3b:11:1e:90:7d:7f:59:80:9b:d1:94:6d:6b:a2:d8:71:
         9b:4e:77:05:3b:e4:e3:54:5b:b4:e3:8e:f7:1b:f6:6f:b9:25:
         1e:6a:15:29:71:ed:54:28:2b:15:eb:d2:f2:19:0c:fa:a1:81:
         4b:9b:db:2e:b6:8c:b5:0a:71:76:36:dd:5a:f1:0c:1c:43:fe:
         d3:bc:ee:fa:e7:47:03:8b:25:c7:17:da:18:09:9c:96:47:4d:
         0c:5b:7f:56:67:e8:20:38:a0:3c:b9:4f:84:ec:43:64:cb:d4:
         b0:9c:e3:9b:ec:d7:b9:34:d8:dd:ed:e7:47:29:5f:f8:ea:06:
         50:fd:ae:72:cb:ee:b2:10:87:17:bd:43:2f:00:77:39:45:56:
         44:33:16:ef:95:5d:ff:f5:9b:35:66:93:1f:21:af:27:9e:b5:
         54:3d:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:50 2024 by rpki-client on console-fra.rpki-client.org