Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33332d3333203d3e203532373732.roa
File:                     323830343a323539633a3a2f33332d3333203d3e203532373732.roa (raw, json)
Hash identifier:          9Hm9QcwxJ7hZZo+0Wbysr9yAntUASPE33QyJAH7/mJw=
Subject key identifier:   94:9C:E1:B5:56:A4:B2:7A:81:1D:CE:48:09:F1:A5:76:7A:EB:85:B9
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       770DC07856592D7EBE6146A8C5159AF9BBC2C9E2
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33332d3333203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:08 +0000
ROA not before:           Sat 31 Aug 2024 14:08:08 +0000
ROA not after:            Sat 30 Aug 2025 14:13:08 +0000
asID:                     52772
IP address blocks:        2804:259c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0d:c0:78:56:59:2d:7e:be:61:46:a8:c5:15:9a:f9:bb:c2:c9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:08 2024 GMT
            Not After : Aug 30 14:13:08 2025 GMT
        Subject: CN=949CE1B556A4B27A811DCE4809F1A5767AEB85B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:8e:25:cc:53:b9:09:c0:c1:4c:f4:76:98:
                    75:2d:98:63:80:1d:89:8f:a1:9f:a0:0f:ee:47:d7:
                    b1:43:56:42:09:37:4e:34:81:26:65:16:03:af:94:
                    95:8b:16:8f:4c:8d:98:80:44:e7:09:97:cd:e4:7c:
                    60:e4:cc:f6:c0:1d:56:89:fa:ba:86:95:05:96:83:
                    6c:f4:c7:23:0e:83:38:99:1c:a1:fa:da:14:b7:9b:
                    86:bd:22:ce:73:e1:81:f3:24:7d:89:83:be:80:23:
                    a1:ee:58:76:ec:dc:c4:26:2b:65:0a:75:ef:2c:82:
                    11:49:f4:6e:57:0b:88:f7:f5:11:65:4e:f3:67:f8:
                    83:3c:83:f9:c3:d7:5a:af:59:80:24:04:14:70:49:
                    b3:84:7d:81:e0:99:97:76:cd:7a:b3:a3:37:c5:14:
                    53:7d:43:d2:71:55:46:6f:fa:48:4f:ee:a7:29:e3:
                    a6:ad:55:d1:09:a1:d5:a1:1e:49:41:05:5d:0b:bf:
                    33:c3:46:3a:89:b7:b9:f4:3a:ae:f6:b9:b8:12:33:
                    b5:dd:c2:c7:e4:37:f5:f2:37:2a:60:57:80:5f:af:
                    51:4e:d5:10:91:76:c0:5c:fe:27:32:5e:78:6f:75:
                    65:17:6d:a5:e4:d7:f6:fd:c7:6b:fa:0e:52:45:1a:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:E1:B5:56:A4:B2:7A:81:1D:CE:48:09:F1:A5:76:7A:EB:85:B9
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33332d3333203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c::/33

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:f1:da:7c:c4:f0:27:4b:1e:1d:9f:d2:c5:5b:2c:e1:1a:
         d5:61:7d:b1:67:33:8d:11:37:a0:84:0c:0c:ed:60:50:06:b6:
         d9:eb:2c:31:5b:60:7a:69:02:06:e0:6e:fe:94:cb:34:2b:73:
         91:3b:8c:f8:0f:be:82:de:a7:6c:93:9a:83:3e:ad:2e:c4:ea:
         27:92:df:58:5c:44:d8:ba:4a:e7:6b:e2:6e:d1:fd:0a:cf:98:
         a6:da:18:3b:95:d2:b1:6a:3c:cf:6d:ae:24:b8:ce:ec:be:18:
         0c:2a:b6:5b:ee:37:13:f7:88:93:32:25:4e:28:56:06:b9:e9:
         16:33:b0:32:60:d9:25:c6:a0:63:16:d3:1e:cb:be:c9:44:89:
         c4:07:cc:80:0b:ea:2f:ba:be:50:24:49:70:68:6e:87:30:ff:
         0d:3c:d6:b8:c6:ea:0d:10:0c:79:ff:78:6f:f9:67:98:df:86:
         3f:c2:3d:f1:e9:eb:36:6f:5d:91:48:07:01:bc:65:e7:3f:f3:
         fd:61:69:b7:a5:8a:79:09:aa:24:e4:80:39:0e:bf:e5:56:24:
         dd:e7:fd:7e:c6:88:af:a5:e8:73:4c:dc:dc:68:b7:79:79:b9:
         c9:ca:71:7d:14:f8:88:03:da:27:fd:83:bb:fc:23:25:fb:04:
         a5:9d:8e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:14 2024 by rpki-client on console-ams.rpki-client.org