Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
File:                     323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (raw, json)
Hash identifier:          GbtBYK7tURSpirrclKHm/q3LG/8pc+6VAzL3zzPx3w4=
Subject key identifier:   9B:EA:72:66:48:9A:61:4E:35:46:B7:20:D7:9B:E9:A2:3B:00:24:8A
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       5D107319290D9FF712E7A0FA47C15144BEAE92C3
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
Signing time:             Thu 04 Apr 2024 07:50:19 +0000
ROA not before:           Thu 04 Apr 2024 07:45:19 +0000
ROA not after:            Thu 03 Apr 2025 07:50:19 +0000
asID:                     264544
IP address blocks:        2804:213c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
                          rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:10:73:19:29:0d:9f:f7:12:e7:a0:fa:47:c1:51:44:be:ae:92:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Apr  4 07:45:19 2024 GMT
            Not After : Apr  3 07:50:19 2025 GMT
        Subject: CN=9BEA7266489A614E3546B720D79BE9A23B00248A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:a0:14:17:99:d3:3a:54:39:a3:74:32:a1:
                    e6:5b:20:7d:7c:75:c2:5e:cf:ae:76:3e:ee:ae:af:
                    87:35:2f:f8:a6:cd:37:cf:c9:56:d3:e7:ec:9b:53:
                    f4:27:fd:f2:c6:c3:1c:54:6c:77:0e:2c:f1:b9:25:
                    ef:61:c3:dc:ed:b9:ac:63:ca:b3:cf:31:ed:12:2d:
                    03:24:f5:04:94:49:1d:ab:6d:78:28:ca:b8:7a:bd:
                    35:c6:c0:b6:18:31:9c:d3:3d:0f:36:4c:07:54:b5:
                    95:1f:31:66:64:0d:b6:97:b9:89:fe:15:80:2b:5e:
                    7c:a6:e5:bb:aa:80:3e:7d:2a:78:52:43:8e:fb:26:
                    76:a1:65:b0:17:fd:f1:80:db:34:0b:b4:6b:f6:97:
                    41:fd:eb:af:5f:b8:3a:57:2e:a4:b9:f3:af:2d:fc:
                    40:12:95:0a:76:5d:39:f0:0f:40:29:4f:3e:d8:58:
                    ff:89:0d:88:cd:b8:01:d2:f8:4d:c3:dd:55:9f:fa:
                    9c:a4:45:5c:a6:8e:a6:70:ce:89:7d:8c:0e:62:88:
                    c3:95:35:5d:d6:a8:0e:c1:c2:a6:83:f0:25:88:68:
                    9e:9d:36:27:9a:6e:08:21:78:2a:16:c2:fd:5f:fc:
                    9a:f1:79:1c:a2:8f:30:c4:22:cd:bb:2a:ba:59:f7:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EA:72:66:48:9A:61:4E:35:46:B7:20:D7:9B:E9:A2:3B:00:24:8A
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:213c::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:7d:7d:b8:b1:ed:91:41:bf:ac:c7:d6:a2:2e:f8:6a:b7:
         ab:f7:f5:a8:cf:de:55:d7:a6:0b:b0:c1:84:34:fb:fb:9c:2d:
         e0:ce:4e:33:ce:86:2d:63:cc:60:77:44:40:10:f2:04:d5:da:
         a1:ac:87:5e:2c:84:f4:13:ed:76:43:14:13:57:66:c8:b2:f8:
         88:b2:e6:07:56:92:15:a6:91:6c:b2:76:6d:fb:7b:38:28:72:
         43:dd:1a:d3:d6:44:86:15:67:34:7f:a4:4d:39:24:22:ac:13:
         24:4d:cd:7a:04:d9:cc:1a:0b:14:bb:9a:0d:0e:bf:75:af:fb:
         9e:b3:bf:54:e4:aa:de:08:bf:bc:2a:bd:38:f8:c4:b9:33:46:
         0e:6b:18:23:f6:f6:67:44:f5:2b:d4:01:5c:5d:8d:27:1f:45:
         7a:84:99:c6:65:03:fd:5b:08:de:75:b1:0a:4f:e1:b7:cf:93:
         f6:ab:20:81:08:bc:11:15:ba:6d:d5:4b:d7:37:0c:1e:98:11:
         c6:d1:19:fe:5c:2f:2c:7c:06:41:f9:71:2c:ba:72:b5:c9:c0:
         2f:42:3e:dd:0c:9c:8d:69:66:56:fe:7c:ff:e2:39:b1:79:b0:
         f8:2d:19:07:25:60:0a:ad:e4:7c:31:a2:af:2d:c8:29:76:2c:
         a3:a2:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org