Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          FH7tPCfwGjoL9KzhBAcWgQIIT9Jv0qXSX/ALhFC8GGI=
Subject key identifier:   AA:9B:36:9E:FA:A7:C6:5C:E4:32:16:47:8F:66:90:A9:22:8C:7A:D4
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       3CB771A95EEEBD54F0949DC761C2D359157D2278
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:15 +0000
ROA not before:           Thu 04 Apr 2024 09:13:15 +0000
ROA not after:            Thu 03 Apr 2025 09:18:15 +0000
asID:                     52613
IP address blocks:        2804:d3c:face::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b7:71:a9:5e:ee:bd:54:f0:94:9d:c7:61:c2:d3:59:15:7d:22:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:15 2024 GMT
            Not After : Apr  3 09:18:15 2025 GMT
        Subject: CN=AA9B369EFAA7C65CE43216478F6690A9228C7AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:fc:0c:f6:c4:fb:bf:40:a5:a9:74:92:08:
                    cf:34:61:48:61:2c:d1:56:47:ab:0d:a3:ef:64:be:
                    ad:71:cb:ef:ca:cf:de:33:e3:a6:65:59:79:96:f0:
                    81:71:b0:c7:e2:93:63:b2:f6:38:0a:bd:73:03:df:
                    66:4f:5e:c4:b2:89:55:ea:ce:80:53:b9:83:79:47:
                    6f:20:a5:33:9b:51:dc:3c:74:90:0b:66:76:b0:59:
                    36:19:46:3b:60:a8:01:84:a3:74:b2:d0:09:78:94:
                    7a:be:bb:2c:cd:e1:62:79:b2:8b:08:2d:8c:8a:19:
                    ca:f2:38:4f:4d:00:48:4f:e3:06:66:e1:4e:17:30:
                    ce:30:e2:8b:b8:2f:e6:fd:89:a0:81:cc:87:85:15:
                    9a:45:02:40:55:e5:3b:a8:c8:88:53:eb:f8:b8:a7:
                    c3:bb:68:f8:a6:d9:f7:7a:ca:7e:5b:dd:78:05:5c:
                    61:ae:f8:2e:7a:6e:36:5d:61:ff:83:6d:0e:ea:d1:
                    af:3c:64:99:bf:4b:13:f1:ea:73:ba:0c:d5:42:aa:
                    86:e2:4e:20:91:d3:ff:b7:38:dd:b5:85:6f:be:0d:
                    4c:85:07:a7:ba:0a:6a:1e:2d:45:de:4e:02:25:85:
                    d8:49:47:8c:93:2d:9e:53:87:7e:cd:a4:46:57:1a:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9B:36:9E:FA:A7:C6:5C:E4:32:16:47:8F:66:90:A9:22:8C:7A:D4
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:face::/64

    Signature Algorithm: sha256WithRSAEncryption
         99:68:7c:61:44:7f:f9:51:81:6e:c8:70:cb:ad:7e:1d:00:4b:
         d2:0b:0d:57:12:12:18:1c:c7:45:dd:52:bd:97:7d:c7:8c:02:
         16:0f:b6:75:a5:e8:86:6b:5e:80:37:75:10:60:e3:12:e9:18:
         38:61:00:82:5f:84:be:3a:49:ec:67:3b:c5:56:69:6e:4f:72:
         a7:28:8d:f0:f5:1e:c6:b4:2e:73:04:02:7a:28:bd:81:33:d4:
         ee:6b:66:d4:9f:ca:25:bf:90:9b:1c:16:04:38:48:77:32:02:
         40:74:0c:3b:92:a5:1a:bc:b9:e8:65:f4:f5:31:e2:12:4c:76:
         9b:de:7a:55:41:4a:3e:b4:63:53:99:b0:d3:2a:42:ed:6b:ce:
         44:68:ec:9e:31:70:4a:a9:3e:cb:58:22:7a:94:9c:42:e2:56:
         9f:cf:92:e8:2e:27:98:fa:1b:3a:0d:83:c9:5d:3d:b6:bc:11:
         c1:9a:c3:48:57:48:ae:1f:f0:26:f6:c4:29:7d:13:e5:65:0e:
         f7:d4:a2:e1:83:30:16:ed:be:14:ca:d0:91:87:b1:a5:32:ef:
         2a:0e:67:1b:d7:cf:97:cc:a3:34:e2:26:c4:1c:1c:55:c2:e2:
         fc:2b:ae:c0:69:53:d0:7e:63:55:d9:da:95:49:7b:5e:24:d1:
         19:e8:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:08 2024 by rpki-client on console-ams.rpki-client.org