Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          ealPo67KghAFtdhRJwEzzqZIFpvjtgamC3cqMxRhPWg=
Subject key identifier:   84:B5:FE:33:E3:28:A9:22:FE:7D:F1:88:76:F0:05:5B:29:22:AB:D8
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       789608D9B90A1C6057512DDCE5EAE8E3BA929E56
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:17 +0000
ROA not before:           Thu 04 Apr 2024 09:13:17 +0000
ROA not after:            Thu 03 Apr 2025 09:18:17 +0000
asID:                     52613
IP address blocks:        2804:d3c::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:96:08:d9:b9:0a:1c:60:57:51:2d:dc:e5:ea:e8:e3:ba:92:9e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:17 2024 GMT
            Not After : Apr  3 09:18:17 2025 GMT
        Subject: CN=84B5FE33E328A922FE7DF18876F0055B2922ABD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:3b:3c:39:2c:1f:9d:74:71:19:10:d9:63:
                    85:8b:7f:e6:86:5d:1f:34:39:f7:56:20:c3:cb:43:
                    a1:d1:da:33:c8:99:bd:90:05:78:c5:20:1d:3a:ad:
                    90:7b:c8:24:65:53:82:e7:c3:43:51:43:4a:7f:c1:
                    d4:2e:4e:8c:74:98:b6:7f:f5:0d:7d:e0:8b:71:66:
                    05:cd:f3:a7:16:31:c0:50:df:3c:53:65:e9:2e:9d:
                    92:5d:23:72:84:a2:e7:bd:75:e2:71:90:14:50:b2:
                    d8:2c:21:ba:97:e0:e5:70:a2:a0:d5:52:3e:16:83:
                    93:7b:64:cb:3d:5c:96:b0:d3:1b:5f:f4:ba:2c:0e:
                    57:bd:79:74:7a:f4:3f:90:33:9d:ce:f1:fc:a5:cf:
                    32:7e:e2:95:a9:50:d9:69:09:f5:90:a1:35:ec:67:
                    c8:a1:e1:c9:ed:11:e2:28:d7:8b:c9:c3:c4:c8:9c:
                    90:b7:67:14:72:b0:e7:40:76:d9:bd:fb:d4:2f:34:
                    25:6c:9e:1c:52:f6:0f:1e:e4:13:6b:a5:16:53:22:
                    f9:19:3d:ea:eb:5b:c5:5f:74:b3:be:23:83:c3:47:
                    96:97:01:ab:23:60:e3:18:47:d6:92:da:c1:ee:05:
                    ee:9b:1e:58:84:a9:e9:c9:d4:17:ae:a0:58:14:6c:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B5:FE:33:E3:28:A9:22:FE:7D:F1:88:76:F0:05:5B:29:22:AB:D8
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c::/64

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:7c:70:2d:b3:16:c4:21:38:02:c8:20:02:d5:b3:8b:92:
         76:dc:12:7e:50:cb:80:81:4f:e6:1c:3d:71:25:f9:fa:ef:f7:
         9b:d9:8e:10:4f:c2:10:f5:8a:25:63:e5:3f:3f:4c:29:9d:21:
         ae:f4:3d:da:c0:80:cc:de:40:11:f2:25:c6:ff:d1:16:0c:45:
         7b:27:64:d3:b1:72:10:73:4b:f2:34:d2:dc:2f:89:a2:51:8b:
         54:a4:82:30:be:2c:20:9e:88:f2:74:1c:56:7a:67:77:e4:2d:
         90:09:46:55:cd:37:68:54:02:b7:71:26:47:21:2f:e0:fc:62:
         fa:74:95:42:9b:a6:66:37:5b:ca:72:9d:fd:ff:c6:d2:22:12:
         08:e6:b4:81:7f:5a:9a:a8:45:5f:a4:12:34:72:17:e5:f6:c8:
         07:b5:8f:e6:2d:61:f1:74:51:9a:b6:4e:9b:c5:6d:77:fc:60:
         87:81:02:a2:95:91:a8:83:e6:1f:8d:75:49:e2:fa:7b:ee:2e:
         29:b5:5d:01:6f:7c:84:4a:82:44:90:f7:da:84:0c:aa:1b:07:
         78:e0:e2:aa:ed:19:f9:02:9a:d5:2e:ea:cc:e5:e6:81:88:81:
         7e:c3:1c:ea:0f:2e:e8:4e:59:14:b5:6b:07:9d:d6:d0:2c:2a:
         b8:82:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:08 2024 by rpki-client on console-ams.rpki-client.org