Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa
File:                     323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa (raw, json)
Hash identifier:          Xue65Buvqq90JMdKBU1St3WKaeKOq/501+2mXywZc6U=
Subject key identifier:   F9:7B:C1:03:85:0F:CB:16:1F:DE:19:3C:3B:AC:53:7E:CF:FB:95:82
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       27A92B9AD817FC7153F9D15AEE8671598282E2C3
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:09 +0000
ROA not before:           Sat 31 Aug 2024 14:08:09 +0000
ROA not after:            Sat 30 Aug 2025 14:13:09 +0000
asID:                     52772
IP address blocks:        2804:259c:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a9:2b:9a:d8:17:fc:71:53:f9:d1:5a:ee:86:71:59:82:82:e2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:09 2024 GMT
            Not After : Aug 30 14:13:09 2025 GMT
        Subject: CN=F97BC103850FCB161FDE193C3BAC537ECFFB9582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:9b:91:8d:e5:90:f5:55:fb:89:86:cd:26:
                    09:fd:38:7e:41:41:7f:8c:c1:8c:fa:c4:83:08:d4:
                    cd:e7:32:ae:00:8f:d8:15:0e:f1:ed:b9:db:ab:51:
                    cf:e3:8c:cf:9a:40:83:cb:4b:3a:52:16:66:ba:f8:
                    2a:fc:2d:fb:a3:c9:10:19:e9:34:bc:85:3a:79:00:
                    f7:6a:3c:0c:63:fb:e9:9a:ab:2b:10:be:d9:fd:a4:
                    64:03:20:bf:37:52:3e:dd:09:08:34:6b:c3:20:dd:
                    68:6e:26:06:fb:e6:5f:64:1e:f6:4c:db:94:f2:65:
                    b6:d9:4b:f0:6b:ed:8a:53:f5:51:0b:18:6d:3d:a5:
                    2d:64:a2:97:00:38:cc:40:1c:bc:f5:14:33:03:76:
                    54:3b:c5:b1:7e:bf:61:0a:46:c7:fb:50:6b:81:62:
                    dc:af:92:9b:b4:dc:b3:60:84:58:d8:c6:17:e2:ad:
                    4c:ea:2e:f2:62:bd:a8:fd:31:8f:0f:f0:a2:c7:3f:
                    f7:10:25:12:dd:4f:47:07:a4:25:09:5b:3f:b5:57:
                    d7:54:4f:24:27:8b:b1:3f:aa:e2:84:55:0c:fd:81:
                    7f:ee:e8:07:6e:c8:85:98:7b:01:d7:ff:16:fb:6a:
                    81:91:cc:dc:45:92:5a:10:b6:d8:80:a1:c9:fe:e2:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:C1:03:85:0F:CB:16:1F:DE:19:3C:3B:AC:53:7E:CF:FB:95:82
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:97:5a:96:53:0e:40:b3:fe:66:19:c9:c1:2d:59:e0:31:46:
         c5:73:b1:b0:83:28:d6:12:cb:a6:2e:0e:5b:01:d0:e1:41:3c:
         2b:1c:3d:98:2d:24:30:b3:3c:b9:12:2b:d0:c9:11:99:9b:ea:
         b8:c4:c4:27:bc:78:d7:34:8b:38:6e:88:6e:64:7e:a3:8f:c9:
         b1:09:f2:b9:bf:e7:2d:e2:f3:7c:52:b7:6e:51:ec:ed:ed:6f:
         34:16:75:18:da:0d:e2:28:71:6a:b0:b2:43:ec:8b:b8:97:5c:
         43:f4:fa:25:db:6b:f8:9f:27:c0:28:60:bd:78:8b:9c:22:7f:
         8a:5e:eb:b2:8a:bc:6a:c0:5d:a5:1e:eb:27:12:e4:86:fd:64:
         35:04:03:34:4d:cd:ed:57:2d:d2:c8:6c:6c:56:93:08:6e:a8:
         4d:55:11:0f:27:26:d7:5a:1d:fe:4a:87:4d:14:59:ff:8f:89:
         98:22:1b:07:af:65:0c:ca:30:f8:dc:7f:a7:ad:87:2c:91:2d:
         af:f6:17:b8:02:c0:d2:fe:51:79:f7:3f:4d:0c:c0:29:d6:1b:
         b9:45:89:b9:bf:86:9c:9a:e8:0f:75:ab:dd:21:d3:18:2e:47:
         5c:c9:be:3c:de:d5:57:21:e1:29:db:72:72:c1:24:2c:ef:8d:
         00:2e:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:14 2024 by rpki-client on console-ams.rpki-client.org