Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/323830343a6330343a3a2f33322d313238203d3e203532363630.roa
File:                     323830343a6330343a3a2f33322d313238203d3e203532363630.roa (raw, json)
Hash identifier:          UPs/XXqeMbibQeIviU133c9So+MeXUFi7sLPYuMVO5Q=
Subject key identifier:   83:C0:D6:E1:84:6B:71:39:8D:F0:F0:F8:13:30:F9:14:15:7E:10:3A
Certificate issuer:       /CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
Certificate serial:       7DBB1243540CB1BCDB9297AB3AD18654107B423A
Authority key identifier: 9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/323830343a6330343a3a2f33322d313238203d3e203532363630.roa
Signing time:             Fri 31 May 2024 17:45:40 +0000
ROA not before:           Fri 31 May 2024 17:40:40 +0000
ROA not after:            Fri 30 May 2025 17:45:40 +0000
asID:                     52660
IP address blocks:        2804:c04::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl
                          rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bb:12:43:54:0c:b1:bc:db:92:97:ab:3a:d1:86:54:10:7b:42:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
        Validity
            Not Before: May 31 17:40:40 2024 GMT
            Not After : May 30 17:45:40 2025 GMT
        Subject: CN=83C0D6E1846B71398DF0F0F81330F914157E103A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:3f:1a:88:bd:74:77:3e:2a:c3:7d:42:70:
                    41:91:47:c0:cc:b7:43:ab:ff:52:85:7d:08:a1:14:
                    d2:71:e5:39:21:ab:74:e2:fe:94:c5:76:98:69:a1:
                    43:70:00:e5:7a:59:50:00:bd:59:78:43:e7:44:03:
                    e4:e7:d8:be:2f:96:3c:92:fb:5d:a5:53:4b:c6:19:
                    0b:e0:e3:2d:7f:6c:d8:e2:13:f3:ce:4d:e2:e7:4d:
                    d5:8e:1d:fd:69:88:27:c6:4c:97:1f:e6:93:93:80:
                    90:41:73:a4:59:90:8f:a2:b1:6d:6e:dc:ab:3f:6e:
                    c6:9d:5a:41:2b:ed:58:96:ea:30:e9:2f:b3:1d:d3:
                    fc:63:54:3f:f0:25:92:e4:19:d8:87:03:e1:07:c9:
                    5d:73:de:1b:26:1b:69:7b:32:61:30:15:0a:5c:f4:
                    7a:be:40:57:56:89:7d:0b:52:14:00:16:4a:b9:c6:
                    7b:e3:8d:a3:95:b0:1f:bc:e8:98:2b:27:f8:db:4b:
                    be:c7:6a:a6:f7:4b:06:25:81:8c:00:52:4b:dd:a4:
                    cf:4d:3c:22:60:b5:47:65:b6:d1:59:c1:63:14:30:
                    42:67:9f:0d:a2:d7:3b:21:da:41:8f:d3:82:3c:f7:
                    26:c7:08:b3:c4:74:06:1d:32:83:8d:03:b0:f8:66:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C0:D6:E1:84:6B:71:39:8D:F0:F0:F8:13:30:F9:14:15:7E:10:3A
            X509v3 Authority Key Identifier:
                keyid:9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/323830343a6330343a3a2f33322d313238203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c04::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:56:47:50:2f:f1:2c:87:f2:9c:cc:c0:aa:63:05:6c:0e:c2:
         2d:fe:e9:4e:ee:6c:0c:3c:1d:67:ab:35:8c:c6:64:8d:1b:b8:
         92:25:12:ff:4c:29:9e:3b:52:47:78:66:60:56:f1:f8:4d:b5:
         e2:1e:29:b9:64:51:5d:5b:97:be:bf:fe:27:b0:ad:a2:7b:2a:
         ba:26:83:a2:5f:f2:97:83:9c:5a:52:5c:a6:8b:e6:9a:0a:96:
         f8:66:15:21:2f:6e:62:2f:41:1c:4a:48:4e:16:d8:6f:3d:b2:
         1f:8c:9c:97:7a:47:0f:06:23:c9:2c:87:07:da:8f:6d:d3:4c:
         14:09:6f:8f:06:83:2d:3a:f8:a5:31:f2:b1:24:8d:d9:d5:45:
         d8:ea:bc:99:b2:5b:d0:a4:3e:d6:f7:6a:f3:6e:60:45:bd:ba:
         27:a7:93:67:60:99:8e:6c:08:59:71:f1:91:6d:01:ea:f5:a8:
         ee:3e:67:f2:12:b2:c6:0d:96:2f:dd:54:9d:e8:27:ab:48:2f:
         a4:8d:9b:48:93:82:ec:ff:ed:87:66:a1:ec:78:f0:81:59:b8:
         b7:f0:8f:2e:22:71:f8:8d:cc:f9:14:e9:be:8a:a1:84:ea:b2:
         5a:ae:83:9c:01:fb:af:93:ab:ae:77:50:67:30:25:48:0c:07:
         38:19:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:56 2024 by rpki-client on console-fra.rpki-client.org