Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33352d3335203d3e20323632373239.roa
File:                     323830343a313664383a343030303a3a2f33352d3335203d3e20323632373239.roa (raw, json)
Hash identifier:          keCb2fL2aVeu+6ey2eIFaM5nNwq1Mc90hF6NqebUIqw=
Subject key identifier:   F0:3F:73:29:D3:F6:75:0E:00:A2:13:A7:39:E1:25:0A:E0:D5:2B:56
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       6B1353C2C2FAE6E14D567CAD7CA1A23943046820
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33352d3335203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        2804:16d8:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:13:53:c2:c2:fa:e6:e1:4d:56:7c:ad:7c:a1:a2:39:43:04:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=F03F7329D3F6750E00A213A739E1250AE0D52B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:ab:75:c4:7e:ed:e5:be:f8:a5:7a:0d:fb:
                    78:bd:38:fb:62:04:ad:cf:a7:41:c0:65:b2:f2:04:
                    a6:c4:d1:c1:e7:6a:ed:9f:0e:26:ae:7f:f1:f9:34:
                    f9:3b:5c:74:3b:1e:ca:43:56:bf:ca:2b:97:7b:2d:
                    da:5a:82:f1:f4:46:3f:3d:20:54:b1:56:d9:55:16:
                    a1:cc:96:77:dc:08:25:b8:a3:82:1d:6e:30:95:f3:
                    f7:e4:fa:9b:c1:38:69:e2:6d:e1:d7:2b:46:70:35:
                    15:92:bd:b8:47:0e:bf:79:00:8e:48:59:9e:c9:24:
                    fa:51:c0:5d:32:fb:6a:92:61:ad:80:13:bf:5e:ee:
                    52:de:80:c3:77:70:e5:8b:bb:51:a5:5b:62:df:9b:
                    1e:4e:5f:7f:5d:a7:99:c8:66:90:6e:1a:5c:19:66:
                    03:ae:51:b1:e0:ed:00:89:a0:52:4d:23:e2:b4:7e:
                    05:b3:e6:19:92:43:cb:ac:74:71:c8:66:a6:1b:a5:
                    f7:ab:0e:e8:9a:69:3c:9e:9f:fd:04:7c:5d:3f:60:
                    a7:85:70:2f:10:3d:f0:80:d9:8e:7d:65:3d:8b:f6:
                    85:c1:8b:37:e7:2c:e1:45:eb:f5:c7:a2:68:29:24:
                    92:3a:78:ef:10:81:2f:4c:76:ea:cf:c6:f4:17:30:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3F:73:29:D3:F6:75:0E:00:A2:13:A7:39:E1:25:0A:E0:D5:2B:56
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33352d3335203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         15:07:6c:6c:cf:2f:25:7f:81:af:63:4d:a8:65:48:a7:3b:ee:
         29:3f:86:1d:80:54:b5:e0:da:84:11:8b:fb:65:fb:8f:8b:7c:
         d7:3a:8d:48:ff:c2:aa:3d:e4:10:69:55:1a:38:ff:71:34:ca:
         12:ca:7f:f7:d7:b4:f0:ff:e4:ea:96:d0:a2:fd:73:3e:3d:03:
         27:2b:3d:7e:6d:46:ad:4a:b2:e2:54:9d:a3:11:57:b8:68:18:
         3e:bc:0a:8b:39:5b:6e:da:a3:14:5a:9f:7d:33:e6:35:e2:f2:
         ce:f4:dc:cc:cf:e7:9e:8e:4b:14:b8:de:57:32:65:40:cf:89:
         25:56:52:95:52:64:ef:26:9e:d6:ac:fc:23:5d:95:d1:a8:ac:
         c1:8a:cd:dc:d0:78:4c:ff:0a:8a:0b:5a:3b:90:27:60:06:1d:
         24:89:f1:45:3b:e4:28:b5:1d:66:79:b9:eb:4b:78:7a:a8:68:
         81:a9:58:24:14:e0:c9:0d:d5:3a:c8:46:0b:1b:a2:27:a3:6d:
         7f:18:24:b9:ab:c7:ce:b7:ac:a1:85:29:e2:75:37:9b:4a:59:
         65:24:1d:f4:94:1d:9b:8d:85:86:b9:a3:c4:4f:f3:46:c6:ef:
         93:48:c9:3c:b7:02:51:61:28:76:f3:08:0a:b3:da:88:67:92:
         69:60:a9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org