Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33362d3336203d3e20323632373239.roa
File:                     323830343a313664383a363030303a3a2f33362d3336203d3e20323632373239.roa (raw, json)
Hash identifier:          C0TK+IiWCU2rfRbWPs0SOcBNDT4hwU1u6r0A27uqpec=
Subject key identifier:   0F:2E:1E:53:07:D8:D4:88:94:EC:52:19:A1:5C:CC:0C:A5:E3:DB:A8
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       333F118E1720357DBBD2BDB50F6A2FAADD908F77
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33362d3336203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        2804:16d8:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3f:11:8e:17:20:35:7d:bb:d2:bd:b5:0f:6a:2f:aa:dd:90:8f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=0F2E1E5307D8D48894EC5219A15CCC0CA5E3DBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:92:ff:dc:6e:84:34:98:86:54:bc:15:dd:
                    b8:e2:0d:00:c8:26:31:99:00:73:3c:16:68:2d:fc:
                    61:3d:23:e8:75:a5:50:9b:da:b7:20:07:ae:73:25:
                    65:44:f0:31:bb:4c:1e:9a:cb:72:f3:c0:2a:9a:93:
                    b2:9e:5e:b2:90:4d:a0:84:e8:a0:77:0c:a8:ed:c7:
                    73:dc:35:27:e8:cf:8f:5b:35:72:80:99:f4:ec:a2:
                    63:8e:a8:70:88:a6:6a:99:e1:bc:f7:e7:4e:e7:a6:
                    6e:94:3f:df:ed:52:14:a5:45:6e:bf:eb:b7:53:09:
                    ff:8c:99:40:96:16:05:17:e7:06:0d:a4:d1:d8:6c:
                    06:79:9d:a7:92:5a:5d:8f:7f:d8:5a:54:4c:4d:7c:
                    30:38:d9:e4:b2:9f:6d:95:54:fd:b3:68:2b:48:e5:
                    e8:5a:ef:59:5b:b9:5f:44:5e:ff:18:bd:cd:a8:34:
                    fa:6a:1e:d1:03:c7:18:13:fc:e7:2e:1e:67:c3:c5:
                    aa:84:e0:83:9a:0a:74:90:18:25:b9:a8:8e:7a:ee:
                    5c:13:5b:8a:97:57:0a:30:3e:2d:c0:51:67:b6:d9:
                    f1:15:55:60:bd:ee:6a:88:10:b6:fe:e0:02:86:42:
                    f2:5e:f8:00:f2:59:0a:99:d1:7e:1e:6e:94:6b:e3:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:1E:53:07:D8:D4:88:94:EC:52:19:A1:5C:CC:0C:A5:E3:DB:A8
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33362d3336203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:36:5d:f2:2a:24:ce:09:af:b3:68:e9:79:d7:3f:67:1f:
         e8:06:10:0b:75:f6:9b:d2:b3:48:ad:66:07:40:79:ca:6b:d0:
         51:70:73:72:ea:51:f6:42:9a:86:3a:26:e7:c8:16:7a:3a:4c:
         3c:86:64:5d:48:b7:79:a3:a9:71:6b:c6:b2:b4:55:22:3d:63:
         09:03:56:f6:a5:e9:94:ea:06:a5:2b:2f:ad:69:a6:f4:c8:46:
         99:ec:42:90:f6:a7:a8:a1:3d:7d:ad:3c:10:50:ac:2f:a8:a4:
         01:ef:2c:e4:db:ac:21:ec:a0:66:f7:60:05:d6:40:de:92:d9:
         c8:06:41:75:17:08:62:d7:da:3c:51:e0:27:b0:2a:83:20:83:
         11:b4:66:60:53:c3:ba:39:e7:8b:6b:71:80:e2:3a:c2:bb:45:
         b6:83:18:45:30:59:53:fa:7f:87:c5:ed:df:e6:35:25:66:97:
         cf:33:e9:1c:19:c6:f8:d8:be:c9:0c:9e:54:c3:c8:da:5c:e5:
         03:1d:cd:9a:71:66:94:ea:8c:1d:18:9d:45:ed:ee:d3:0d:ce:
         38:56:05:2e:fa:a3:48:8b:57:5e:16:c5:29:d5:4d:84:e8:cf:
         97:0d:19:2c:7d:aa:05:91:3f:15:8c:7d:cd:0b:36:98:b8:fd:
         a8:88:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:18 2024 by rpki-client on console-ams.rpki-client.org