Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          oFMiRwFxFSPgkqRg9sGWfWopRNWiElC+XgZ2A+bsM0E=
Subject key identifier:   11:16:37:A2:4F:D1:79:3B:80:ED:84:18:C4:CF:C6:D2:50:78:DA:8E
Certificate issuer:       /CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
Certificate serial:       2C02EA8688347E3BAF1FE803978CBAC9020F8673
Authority key identifier: 1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 29 Oct 2024 21:13:16 +0000
ROA not before:           Tue 29 Oct 2024 21:08:16 +0000
ROA not after:            Tue 28 Oct 2025 21:13:16 +0000
asID:                     267991
IP address blocks:        2804:5654:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:02:ea:86:88:34:7e:3b:af:1f:e8:03:97:8c:ba:c9:02:0f:86:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
        Validity
            Not Before: Oct 29 21:08:16 2024 GMT
            Not After : Oct 28 21:13:16 2025 GMT
        Subject: CN=111637A24FD1793B80ED8418C4CFC6D25078DA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:27:58:ce:89:80:d9:69:0f:0b:73:76:e6:
                    b0:a6:5a:4c:88:8b:f4:53:f1:0c:f5:ca:0b:68:c9:
                    32:c7:8e:3a:78:8d:43:0c:9d:52:4c:b0:9c:95:6f:
                    cd:13:95:9a:92:1d:d6:69:d5:cf:3e:81:30:39:e4:
                    4b:a1:66:07:8d:07:7b:28:74:d6:8f:42:d8:bf:c7:
                    c5:c4:13:b5:17:c4:9b:16:75:5f:c1:b5:3c:ca:00:
                    96:28:2d:d1:36:b3:9e:0b:92:cb:58:d1:ea:02:08:
                    a3:7c:46:ab:da:1c:9b:3c:b0:1f:9c:78:75:bc:91:
                    ac:bb:e3:26:c7:00:1b:1f:25:10:f2:84:a8:19:68:
                    0a:3a:a0:cd:6b:f1:a6:33:40:04:34:6a:f9:d3:6b:
                    74:38:0e:bf:87:56:a4:4d:0e:3f:8c:db:44:97:46:
                    e2:ef:76:ee:b1:e8:4c:95:8b:0e:41:c2:f1:d3:10:
                    91:1a:f8:72:be:a8:34:0d:93:39:34:89:43:af:68:
                    72:f8:4d:f8:65:34:45:c4:08:5b:f9:fa:ed:22:a0:
                    bc:00:6d:a1:b1:56:f4:d0:87:ab:a4:a8:52:8b:42:
                    25:2a:bc:03:0a:25:8e:23:08:0e:aa:d2:68:e3:29:
                    46:e9:78:10:e6:e8:66:44:00:19:a1:28:d7:d0:27:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:37:A2:4F:D1:79:3B:80:ED:84:18:C4:CF:C6:D2:50:78:DA:8E
            X509v3 Authority Key Identifier:
                keyid:1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:5a:b5:f2:f4:59:51:72:ba:0a:93:d7:1b:89:f0:d9:e0:2e:
         46:e7:ae:a3:87:10:f3:82:7b:ee:0d:ad:8e:59:02:22:d9:34:
         00:ef:0a:85:34:b6:c5:65:bc:64:a4:df:23:31:2c:e1:88:39:
         85:c2:7c:97:2d:9b:43:0c:0d:c6:96:2e:84:ab:5b:c9:b6:9c:
         16:0d:e9:34:42:bd:4b:9f:20:52:01:59:1b:73:d9:bb:d4:21:
         13:ef:e7:6a:37:00:d1:f5:0c:7a:36:ae:45:44:5e:63:21:be:
         99:19:8d:c9:c7:83:9a:b9:38:0b:4c:ab:15:de:8e:27:43:53:
         a6:16:2b:07:9a:da:38:f9:13:c5:90:b5:e7:c9:c5:46:ec:b8:
         9d:4d:3e:7c:ce:0a:43:2d:cf:db:ec:1e:85:1b:b4:17:d8:17:
         6e:d3:45:01:30:7c:a7:f3:c9:9f:c2:92:f6:89:b3:04:02:3d:
         da:23:fc:a0:28:39:5f:7f:89:1d:4a:64:00:23:64:68:c9:d1:
         f4:20:06:99:c4:24:3b:9a:4b:2d:a5:c0:ef:a8:82:a6:45:b7:
         b8:45:e3:d1:78:86:78:aa:5d:2b:be:eb:9a:6b:19:4f:d5:15:
         e4:7e:e3:dd:1d:57:9c:1e:d4:50:c4:ce:9b:a3:b7:6b:ba:b9:
         e0:3e:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org