Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/323830343a323664343a3a2f33322d3336203d3e20323633383630.roa
File:                     323830343a323664343a3a2f33322d3336203d3e20323633383630.roa (raw, json)
Hash identifier:          vGhacjzsg6zXlP9dQwA3WCPp1jeNLTaC4NxdTKuwnbU=
Subject key identifier:   81:1A:B6:E2:C2:A7:99:1A:DC:6A:79:F7:E3:91:D7:3A:00:14:41:E8
Certificate issuer:       /CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
Certificate serial:       5A10BEA830E43EF642849FC818FF5678A2081ED4
Authority key identifier: 56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/323830343a323664343a3a2f33322d3336203d3e20323633383630.roa
Signing time:             Wed 03 Apr 2024 22:04:49 +0000
ROA not before:           Wed 03 Apr 2024 21:59:49 +0000
ROA not after:            Wed 02 Apr 2025 22:04:49 +0000
asID:                     263860
IP address blocks:        2804:26d4::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl
                          rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:10:be:a8:30:e4:3e:f6:42:84:9f:c8:18:ff:56:78:a2:08:1e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
        Validity
            Not Before: Apr  3 21:59:49 2024 GMT
            Not After : Apr  2 22:04:49 2025 GMT
        Subject: CN=811AB6E2C2A7991ADC6A79F7E391D73A001441E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:29:48:aa:ea:7b:65:48:bb:97:97:00:02:
                    72:ad:61:17:e3:ce:20:33:f2:9f:b2:0a:be:70:49:
                    cd:dd:c3:d9:7b:b5:d0:c0:d9:56:ca:09:6b:1b:22:
                    db:fe:58:a5:15:52:6b:f8:83:6c:7f:53:46:66:fb:
                    c8:5a:3a:52:4a:c5:83:3d:ad:aa:5b:7a:75:97:7c:
                    79:b4:f9:04:b1:f8:37:aa:43:d9:32:92:9f:01:6a:
                    ad:7e:8c:0d:c8:a0:74:cd:87:cd:3f:bf:f9:14:82:
                    ef:fa:22:fa:71:af:31:75:14:a2:d9:c4:f9:d4:07:
                    b3:43:09:91:d4:1f:97:e9:11:0d:f6:0c:8c:ae:32:
                    a7:06:96:0c:3a:b6:e2:31:e3:d7:6d:2c:b7:a0:d7:
                    0b:90:87:35:8f:bb:3e:f0:67:ff:23:9b:52:c8:5b:
                    b2:2b:91:29:46:b1:dc:74:71:31:ba:12:99:36:1f:
                    e8:1c:9b:3e:81:0c:5e:70:c3:d6:97:51:3d:99:72:
                    42:74:df:ef:f3:47:d4:a4:25:14:27:10:ee:e2:68:
                    88:e9:47:d2:6c:62:09:63:94:b1:e1:34:5b:d1:f7:
                    1d:2a:ae:c6:a7:31:d5:f2:ae:0b:db:29:20:f8:69:
                    08:50:2f:18:22:9b:65:83:e5:73:a2:07:6e:f0:ca:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1A:B6:E2:C2:A7:99:1A:DC:6A:79:F7:E3:91:D7:3A:00:14:41:E8
            X509v3 Authority Key Identifier:
                keyid:56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/323830343a323664343a3a2f33322d3336203d3e20323633383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:d4:6f:b3:cd:f3:11:dd:72:ed:f1:c7:4c:f8:62:68:38:4e:
         c7:d9:cd:1a:97:2f:c5:86:1c:90:81:86:e5:cd:2b:f5:2a:d1:
         e3:4b:78:a6:da:98:3f:bf:5d:f1:ab:07:1a:34:40:b8:ba:f0:
         07:93:b8:16:80:18:50:cc:af:99:ef:2f:b7:99:ed:6c:80:e2:
         c7:94:40:e7:b5:45:f9:96:af:be:8a:c0:5e:9f:e6:03:b0:1a:
         44:d9:91:98:02:a7:60:27:6d:e7:76:c1:31:41:26:a6:30:24:
         1b:b7:be:ea:9c:84:f0:62:4c:c3:55:e9:da:8a:33:a3:b9:f8:
         b5:42:0f:cc:25:c3:97:31:4f:42:c8:98:58:4d:9c:de:81:bb:
         e2:12:c3:46:72:5a:bc:c2:e0:df:10:50:27:6c:9d:09:77:d2:
         21:4a:01:0d:6b:39:9a:eb:22:e3:dc:73:85:0d:db:de:ca:80:
         21:60:c2:09:c0:a5:71:f7:d9:74:8f:23:ce:07:d2:b0:ed:3a:
         9c:2c:b1:00:38:69:8f:44:2b:1a:c6:61:67:06:9b:86:ea:5f:
         c1:69:36:90:9b:69:fd:39:12:7d:95:69:35:87:d1:bb:f6:d2:
         14:6c:ee:cf:cf:ba:7a:96:97:e9:ed:f2:5e:de:a0:18:62:8a:
         5c:14:77:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:55 2024 by rpki-client on console-ams.rpki-client.org