Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33372d3337203d3e20323632373239.roa
File:                     323830343a313664383a363030303a3a2f33372d3337203d3e20323632373239.roa (raw, json)
Hash identifier:          oDrfpzxgBeHR8SyEvP9NQ9IrignbS0znrSUdPXQTTtQ=
Subject key identifier:   3E:8E:E1:90:10:96:23:46:06:41:7E:F8:69:41:C1:54:CC:A2:89:41
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       544FEDD78A0F6069CE74A0279AA5DDA2E9B56712
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33372d3337203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        2804:16d8:6000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4f:ed:d7:8a:0f:60:69:ce:74:a0:27:9a:a5:dd:a2:e9:b5:67:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=3E8EE1901096234606417EF86941C154CCA28941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d6:47:bb:e2:56:e6:3f:7e:32:f2:99:9b:b4:
                    cc:31:a2:d4:02:45:d5:d9:b0:a3:f5:29:0f:55:26:
                    0e:ce:54:34:ed:4a:bc:14:5d:fd:6c:c3:8d:76:ee:
                    e3:2c:93:bb:7f:c3:c9:63:1f:61:2a:d3:49:1a:3d:
                    92:68:cf:65:8a:7b:49:5e:8b:d2:14:83:bc:9a:4c:
                    16:93:35:b9:5d:dd:ba:7c:c4:92:2e:d8:70:dc:5a:
                    f8:2f:65:5e:cc:78:5e:39:29:19:6d:8d:5a:01:42:
                    cf:7b:79:06:23:bd:a1:03:17:82:da:24:26:11:13:
                    8f:ca:c6:7e:34:35:51:44:c2:d3:ae:53:b0:20:6e:
                    8c:41:e0:d2:2c:98:4e:db:60:bc:c5:ca:50:f2:a5:
                    0f:4b:8a:58:cb:68:30:ea:f3:66:ad:bd:26:c7:16:
                    7f:9d:1c:cd:1b:e4:ed:62:34:d1:44:6a:73:d3:ae:
                    c0:87:ac:7e:c0:ad:f6:ec:4d:ed:05:ba:32:c6:b1:
                    48:02:f3:03:1e:af:a3:8b:1f:24:e2:c8:8f:93:20:
                    9a:ff:4f:ce:a8:d4:9c:d3:3c:04:09:36:aa:3f:69:
                    78:5a:e4:22:d4:2c:67:23:b0:5e:48:1c:67:8b:5d:
                    36:2e:f4:53:31:5f:77:c8:22:ec:d2:32:2a:a4:10:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8E:E1:90:10:96:23:46:06:41:7E:F8:69:41:C1:54:CC:A2:89:41
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33372d3337203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:6000::/37

    Signature Algorithm: sha256WithRSAEncryption
         8c:d3:61:10:4a:b7:27:da:9e:4a:0c:4f:f2:7a:d0:73:e3:f8:
         3a:c3:b9:95:e2:e2:b8:ce:70:15:a8:c1:25:67:c7:17:c1:61:
         69:16:5d:d4:7e:68:86:6b:42:51:77:4b:c4:2d:0f:08:19:d1:
         5b:a8:3c:6f:13:3e:5a:d5:2f:db:1e:82:7a:cf:16:41:43:17:
         26:84:7a:7a:bd:7c:24:ad:93:26:14:b3:a9:11:56:d2:22:b9:
         df:13:0c:24:ab:9e:59:73:92:2f:2a:ee:b9:fa:ae:e2:c0:16:
         94:e9:b4:70:cf:8f:c3:89:dc:1d:ef:8f:e2:af:bc:28:c3:81:
         09:4a:cb:3d:9a:f2:24:bf:16:bf:5e:79:8c:ff:73:42:4b:cd:
         62:1c:e4:5a:c6:b3:41:8a:32:dc:76:6d:66:30:3f:ea:5f:a8:
         63:9b:39:79:80:d5:6c:4c:8f:20:c3:08:1c:55:e9:50:0c:c9:
         40:33:ad:f7:eb:41:9e:50:c6:90:01:12:ea:d7:f1:bd:07:30:
         94:d5:d5:f4:e2:a3:90:72:f8:ea:ff:18:1b:00:3b:17:73:2e:
         e3:c6:0f:23:b6:da:ca:d5:f6:54:c1:f4:f3:a9:b2:8f:ce:38:
         2e:48:de:65:f9:56:1b:e5:95:32:bb:1b:86:9c:4f:03:a8:dd:
         11:04:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org