Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3334203d3e203230343733.roa
File:                     323830343a376436303a3a2f33322d3334203d3e203230343733.roa (download)
Hash identifier:          O080Z3/4rePTGlJAnemukZsTacrsGljncD1I4vJdSNM=
Subject key identifier:   B5:DA:72:42:88:AC:CE:99:C3:83:83:35:21:B6:74:66:F6:2F:7D:9F
Certificate issuer:       /CN=8C50B18948FB749C5395482072FE7285BFCC98F1
Certificate serial:       2527986D3B693F0F7715F46823FB18A3C62F3D7A
Authority key identifier: 8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3334203d3e203230343733.roa
ROA valid until:          Mar 25 14:29:03 2023 GMT
asID:                     20473
IP address blocks:
    1: 2804:7d60::/32 maxlen: 34

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:27:98:6d:3b:69:3f:0f:77:15:f4:68:23:fb:18:a3:c6:2f:3d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C50B18948FB749C5395482072FE7285BFCC98F1
        Validity
            Not Before: Mar 26 14:24:03 2022 GMT
            Not After : Mar 25 14:29:03 2023 GMT
        Subject: CN=B5DA724288ACCE99C383833521B67466F62F7D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:06:63:12:44:ae:da:02:33:23:54:89:a7:
                    0a:61:84:33:1e:34:37:3c:49:3b:c3:6e:d4:93:8f:
                    66:53:61:c0:31:ba:05:e1:f2:97:4a:46:f8:e1:0b:
                    bc:3c:c7:80:12:57:4c:6c:c9:ca:d1:84:7d:83:97:
                    71:8d:7e:41:5f:1a:84:99:b0:39:14:2a:1b:ca:45:
                    c6:89:f4:f3:f9:e3:e5:46:64:4b:c3:09:b2:39:88:
                    0b:ac:be:4e:f8:c7:f6:5b:56:58:4e:7c:cc:1e:88:
                    41:55:61:73:d4:2b:fd:62:22:48:bf:f8:ca:a2:ff:
                    05:dd:24:d2:69:13:1c:28:4a:4a:98:aa:0b:6c:ed:
                    03:54:87:eb:44:a2:24:24:b7:1c:38:18:39:33:5a:
                    59:18:e1:bb:c8:6c:b0:cd:6f:a9:99:fa:27:63:06:
                    9b:5d:55:9b:4a:20:6b:21:9c:94:b4:4f:e0:57:b1:
                    6b:9c:7a:af:33:29:1d:fb:42:a7:4f:50:e9:7a:4c:
                    54:c9:23:55:62:2e:78:fb:60:2a:33:b7:c9:df:f7:
                    40:bf:2b:41:e8:ac:83:ce:a0:f6:07:54:a0:76:e4:
                    44:6e:85:59:60:3d:b8:64:45:1f:95:e1:4a:ef:57:
                    30:1c:99:8f:b3:53:37:55:3a:f8:98:e6:76:da:75:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B5:DA:72:42:88:AC:CE:99:C3:83:83:35:21:B6:74:66:F6:2F:7D:9F
            X509v3 Authority Key Identifier: 
                keyid:8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3334203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:11:d9:02:9d:10:6f:b9:d1:38:49:70:c3:76:4e:93:e9:
         6f:0d:13:80:63:90:25:44:f2:df:ee:b9:59:eb:60:29:d2:22:
         f4:54:6a:05:84:8f:c6:9f:07:5b:75:bb:43:89:68:51:32:18:
         84:3f:42:91:94:be:3c:d9:89:84:f5:80:ec:4e:eb:5c:45:61:
         b1:79:ad:ca:59:92:de:f0:98:a2:cf:68:69:11:97:f5:7a:5d:
         6e:77:28:16:f3:e1:74:c2:64:e5:50:2b:a9:97:8e:92:dd:93:
         96:d5:7d:74:e2:d6:3a:0e:34:39:f2:5d:e0:f2:28:92:52:61:
         2e:ff:8e:74:c9:89:85:06:2f:46:44:a1:92:09:cd:fe:97:a3:
         ac:0a:55:79:13:29:b6:1d:1d:98:65:b7:30:78:d8:7e:e4:81:
         51:c2:26:c0:40:93:6d:37:b9:c6:2d:47:fe:d0:94:f1:91:3e:
         c3:b2:4f:10:5c:3b:6d:f2:82:9c:c5:41:28:c3:6c:cd:42:08:
         1e:28:42:59:2b:bd:f9:ac:3e:88:fe:60:6e:08:bb:29:a6:ba:
         03:74:1e:56:00:5c:5b:cf:cb:73:d7:a9:58:0d:69:98:3d:64:
         cc:25:cc:7c:b5:1c:e6:54:e3:c8:7c:b7:60:f8:dc:45:2e:44:
         7e:ca:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:27:25 2022 by rpki-client.