Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33322d3438203d3e20323639363536.roa
File:                     323830343a363765303a3a2f33322d3438203d3e20323639363536.roa (raw, json)
Hash identifier:          fXI8tW2X3zNG4t1InN64D/2asrlAu/gIgd6PTG7RJZk=
Subject key identifier:   31:96:D2:13:03:1E:0D:48:92:E2:22:00:6B:4D:65:B0:B9:18:58:78
Certificate issuer:       /CN=39ADE53D58805E5FE43277F03B00463702D1142A
Certificate serial:       1C42735579307A6C4182758E299C5B946A411797
Authority key identifier: 39:AD:E5:3D:58:80:5E:5F:E4:32:77:F0:3B:00:46:37:02:D1:14:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33322d3438203d3e20323639363536.roa
Signing time:             Mon 15 Jul 2024 19:38:54 +0000
ROA not before:           Mon 15 Jul 2024 19:33:54 +0000
ROA not after:            Mon 14 Jul 2025 19:38:54 +0000
asID:                     269656
IP address blocks:        2804:67e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 10:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:42:73:55:79:30:7a:6c:41:82:75:8e:29:9c:5b:94:6a:41:17:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ADE53D58805E5FE43277F03B00463702D1142A
        Validity
            Not Before: Jul 15 19:33:54 2024 GMT
            Not After : Jul 14 19:38:54 2025 GMT
        Subject: CN=3196D213031E0D4892E222006B4D65B0B9185878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c8:82:9f:66:af:4e:fd:b5:f4:7f:e8:09:95:
                    1c:aa:68:8f:4f:0e:43:96:69:87:99:8b:42:64:9a:
                    5d:92:a0:ff:b0:90:34:9c:b9:8b:2e:40:8c:e1:45:
                    56:4b:8b:77:7d:4c:04:88:07:84:56:15:1c:db:78:
                    81:0e:f6:23:ca:63:35:97:1a:97:af:94:bd:da:9e:
                    d1:01:57:fe:28:72:10:ea:f3:a5:65:1f:1f:1e:f8:
                    84:94:ed:7e:f1:56:74:71:8c:38:cc:c1:1b:fc:6f:
                    a6:23:c8:4c:22:b4:31:a2:ee:2a:73:87:1c:eb:00:
                    f9:e0:13:25:b0:4e:33:3a:e0:c8:6f:a4:3c:65:f1:
                    0c:44:db:db:e2:fc:dc:1b:a7:17:c4:98:0b:f2:b0:
                    89:11:d7:b5:c2:b5:f4:6b:69:6e:4d:c7:0d:29:04:
                    60:00:06:f8:02:06:51:d5:6e:3e:57:9a:bf:a1:c8:
                    e8:f7:d4:8e:94:aa:3b:bf:78:88:28:f1:14:a7:4c:
                    12:f6:e8:78:43:ee:d7:52:4d:84:be:d4:95:b3:9d:
                    c5:7c:e8:05:db:bc:2f:78:39:e4:53:6b:06:ea:ee:
                    d7:fc:b8:ff:2b:aa:77:f5:68:d3:e6:e9:eb:d4:bf:
                    31:1e:b7:e6:98:96:a3:e4:95:e7:a3:75:bd:cb:92:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:96:D2:13:03:1E:0D:48:92:E2:22:00:6B:4D:65:B0:B9:18:58:78
            X509v3 Authority Key Identifier:
                keyid:39:AD:E5:3D:58:80:5E:5F:E4:32:77:F0:3B:00:46:37:02:D1:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33322d3438203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:6e:9d:4a:0a:77:5b:22:df:bc:b5:d7:6c:6d:b9:06:c1:2a:
         bd:a1:36:4f:cd:9f:b7:9b:4e:89:75:73:0a:bb:80:4e:df:78:
         ab:14:e0:e6:f9:b8:f2:1a:80:ee:15:15:ac:6e:d2:8d:af:21:
         33:05:7a:5a:81:eb:22:23:c1:ea:ce:32:03:12:fb:d3:1f:21:
         2d:9c:1b:a1:aa:24:91:ec:a1:da:3a:ef:92:83:f1:4a:d4:b4:
         4a:1d:17:7c:28:42:3b:5b:9a:a4:58:46:b7:60:7d:fe:eb:ef:
         67:6c:de:5d:56:b8:31:c6:fa:0a:2b:eb:72:e7:f7:65:ec:ba:
         d7:a2:7b:d7:01:00:af:8a:5c:1f:f0:dc:ca:ae:92:c2:e6:15:
         d0:33:a4:e8:66:ee:ae:64:8f:ee:02:f2:fa:b3:2e:55:e6:70:
         25:d7:9e:1c:e7:70:98:23:22:de:03:7d:95:15:8f:ff:46:c8:
         8a:fd:18:f1:bc:1a:32:d4:29:d6:e6:6c:01:2a:d4:02:a0:ba:
         d9:25:b1:50:cf:f6:1d:da:97:92:a8:b8:fe:3c:2f:91:ed:b8:
         0e:7b:fb:b7:f1:37:60:fb:86:b5:01:0c:e6:1f:34:7d:45:9c:
         b7:c1:7a:8c:2e:6c:8b:43:2e:dc:26:eb:8d:f8:25:a4:d7:53:
         51:3a:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 10:53:35 2024 by rpki-client on console-ams.rpki-client.org