Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/323830343a313133303a3a2f33322d3438203d3e20323633363634.roa
File:                     323830343a313133303a3a2f33322d3438203d3e20323633363634.roa (raw, json)
Hash identifier:          /cHQDfpgZFFl4xl/G+rmBddNXs93fu7v9IRcXnf/D+0=
Subject key identifier:   A4:21:21:C0:1D:AA:A3:BF:F5:26:4F:FF:96:F6:3E:74:99:77:8C:B6
Certificate issuer:       /CN=98795ED91D95FB396CC99C94860EA4CAD59F6435
Certificate serial:       41F8A79AACD055520044ACDE712C4C4B52121004
Authority key identifier: 98:79:5E:D9:1D:95:FB:39:6C:C9:9C:94:86:0E:A4:CA:D5:9F:64:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/323830343a313133303a3a2f33322d3438203d3e20323633363634.roa
Signing time:             Thu 04 Apr 2024 03:05:31 +0000
ROA not before:           Thu 04 Apr 2024 03:00:31 +0000
ROA not after:            Thu 03 Apr 2025 03:05:31 +0000
asID:                     263664
IP address blocks:        2804:1130::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.crl
                          rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f8:a7:9a:ac:d0:55:52:00:44:ac:de:71:2c:4c:4b:52:12:10:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98795ED91D95FB396CC99C94860EA4CAD59F6435
        Validity
            Not Before: Apr  4 03:00:31 2024 GMT
            Not After : Apr  3 03:05:31 2025 GMT
        Subject: CN=A42121C01DAAA3BFF5264FFF96F63E7499778CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:3b:b2:59:25:f0:f9:19:b0:e2:63:7c:5a:
                    c5:7b:cd:8e:43:63:f7:7d:6a:70:f7:c3:1a:24:84:
                    94:87:1e:38:72:df:c9:31:79:0e:73:1f:ba:6e:e3:
                    5a:50:71:70:6f:3f:cb:41:df:98:8b:c6:6c:9a:97:
                    55:60:85:14:80:eb:0c:8d:82:51:e9:72:f8:8a:8e:
                    0f:5d:1a:1b:69:bb:b2:d4:57:1a:fa:29:e5:36:68:
                    b5:ae:f8:5d:e0:74:99:fd:25:8c:78:4d:05:77:86:
                    91:2d:41:24:68:17:78:4e:c3:6a:ff:fe:c5:a6:73:
                    70:aa:6e:d8:46:f3:d8:27:ca:4c:5a:7a:9f:26:bd:
                    55:ea:e0:c2:d1:2a:be:98:54:c9:33:78:c1:59:8e:
                    96:2f:cb:aa:95:a5:13:e8:2b:e0:84:76:c2:75:80:
                    2b:d0:6d:ce:e3:90:3e:73:55:e3:0a:fe:4e:50:33:
                    41:77:12:5f:7e:0f:00:c1:a2:4e:9c:2a:f5:9d:a3:
                    f3:1d:72:19:a8:43:a6:63:24:58:14:cf:e8:e1:c2:
                    20:dd:79:be:e5:b0:6c:7e:f9:a9:7a:2e:f2:d1:32:
                    d5:b2:ec:3b:f2:21:79:a6:02:03:96:db:d7:74:55:
                    d2:ea:1a:02:20:bd:70:b5:ea:23:1f:c2:6e:c4:ba:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:21:21:C0:1D:AA:A3:BF:F5:26:4F:FF:96:F6:3E:74:99:77:8C:B6
            X509v3 Authority Key Identifier:
                keyid:98:79:5E:D9:1D:95:FB:39:6C:C9:9C:94:86:0E:A4:CA:D5:9F:64:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/323830343a313133303a3a2f33322d3438203d3e20323633363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1130::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:6d:39:33:ef:bd:d8:dc:10:5c:ef:07:69:28:6d:69:2f:35:
         98:e8:84:14:16:8b:5d:e3:37:0c:b2:0f:fc:fe:6e:84:0f:20:
         58:5e:28:85:e4:cf:a3:f3:e6:6f:5f:ca:5a:f3:2a:c7:e6:f0:
         28:d3:09:ac:7c:dd:66:c5:74:bf:0a:e6:be:19:d9:5a:ee:a5:
         ac:08:31:36:ea:07:bc:cb:38:26:25:ac:65:0d:c6:0b:80:91:
         89:1a:1b:a7:39:05:37:6d:cc:11:1d:e5:a1:88:13:f8:21:8f:
         c5:bc:4f:e7:1c:ab:97:bc:64:01:03:de:3f:f4:1e:b5:af:ce:
         aa:62:e6:20:03:79:76:e2:d7:da:7b:18:8b:40:e0:97:01:70:
         01:c6:16:45:be:6d:c2:79:c0:98:47:ff:06:da:a1:e7:c5:0a:
         7a:e8:79:18:5a:c2:c4:4f:b7:c6:27:88:a6:b3:87:97:03:0b:
         4b:47:9e:50:0f:8d:e3:0a:46:89:2a:5b:a7:e2:28:e8:00:cf:
         18:a2:9d:39:cb:03:07:99:19:dd:33:e1:9d:7a:72:d9:df:62:
         8d:d5:55:19:fe:0c:c2:90:1a:e9:f2:0c:52:42:46:81:58:0e:
         0a:1b:46:5f:06:af:87:94:79:38:5f:90:9f:4f:53:ca:c7:2e:
         8f:56:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org