Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
File:                     323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (raw, json)
Hash identifier:          5z/9B2lDD9Y2z6ddTWA/M1t9+scwLoPNHb2Cu/S9FHo=
Subject key identifier:   E4:DB:66:0A:15:20:C5:A8:43:C8:40:C4:CD:FC:13:46:38:A6:F7:D8
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       76CDDB1EBD0FD48E26E4B2A2D248DBC07774C758
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
Signing time:             Wed 06 Nov 2024 14:56:06 +0000
ROA not before:           Wed 06 Nov 2024 14:51:06 +0000
ROA not after:            Wed 05 Nov 2025 14:56:06 +0000
asID:                     274640
IP address blocks:        2804:916c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
                          rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cd:db:1e:bd:0f:d4:8e:26:e4:b2:a2:d2:48:db:c0:77:74:c7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Nov  6 14:51:06 2024 GMT
            Not After : Nov  5 14:56:06 2025 GMT
        Subject: CN=E4DB660A1520C5A843C840C4CDFC134638A6F7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:b3:17:f9:f7:0c:4c:61:b4:b3:d2:40:dc:
                    bc:32:66:4f:99:dc:7f:66:a0:50:18:5d:94:17:73:
                    89:56:bc:c0:83:cc:08:95:2d:ec:12:3d:fe:06:9a:
                    d8:c8:62:d1:69:fd:41:a9:7d:72:c7:9e:b7:71:68:
                    c9:f6:e0:d5:83:8d:92:a9:43:53:11:d9:67:7c:4f:
                    99:2d:0d:e9:7a:b6:09:1a:0d:d2:1c:4e:7f:f8:45:
                    a7:94:40:d3:6a:a0:1c:f9:78:31:f5:76:25:4a:01:
                    61:25:7b:de:63:b8:d7:d4:1c:ea:4d:49:99:ca:dc:
                    16:5b:84:e0:11:42:4c:e7:0c:cb:54:24:5a:93:4d:
                    57:bd:f1:30:69:95:bc:cd:00:fd:8b:c3:69:a5:71:
                    13:b1:ba:b5:5f:3d:ca:af:9d:d7:ab:de:38:ae:30:
                    de:09:ae:f2:ee:72:e0:43:12:69:ab:2d:20:d2:7d:
                    7a:65:4c:73:bc:6f:62:5c:66:49:3d:e5:5b:85:e8:
                    21:24:e6:1d:37:fe:9d:63:28:97:70:e2:09:08:1e:
                    09:d9:62:75:0f:93:f9:71:09:af:0b:0a:58:5a:9a:
                    ba:26:07:f5:49:a2:41:aa:3e:d1:37:24:91:e9:c5:
                    e4:98:33:b9:6c:5a:a2:89:3c:13:ff:4d:19:3d:4d:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DB:66:0A:15:20:C5:A8:43:C8:40:C4:CD:FC:13:46:38:A6:F7:D8
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:916c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:c0:de:2b:f7:a0:68:9e:44:69:72:c5:c3:dd:b2:dd:d0:47:
         c2:24:2b:73:11:a4:6b:aa:73:ee:2f:db:6f:1b:75:3b:b9:2b:
         45:e1:f2:6c:9a:6a:df:0b:1e:82:36:4a:3f:f3:e3:5d:ef:11:
         fa:e2:1a:be:0a:92:98:e8:8b:16:a2:c8:e4:28:9e:8d:51:ec:
         47:ac:c2:76:76:a2:21:09:87:76:6f:73:d1:2d:1d:cf:6e:fd:
         1d:f5:d3:19:15:43:aa:58:7c:22:45:99:8e:0f:1e:da:1c:89:
         1f:51:58:70:46:61:68:1c:b2:46:da:b0:4c:81:c6:37:c8:ff:
         85:95:3e:ed:62:26:d5:53:a1:d9:51:2b:a9:bf:c0:10:24:89:
         15:c6:40:45:29:8a:61:3d:43:79:93:6b:b8:f3:b4:d6:5f:b3:
         f0:b1:51:89:23:de:a8:d2:fe:f1:a1:78:dd:c0:0d:68:b9:d2:
         65:76:65:19:f9:4c:18:81:1e:2b:d9:e1:9d:ab:de:f1:00:7f:
         0a:3b:0a:3f:d7:45:46:04:3e:b1:1d:80:ff:cb:61:15:6e:ac:
         3a:ae:6d:83:db:9f:e1:fc:86:d7:0d:18:a1:c7:3d:b5:99:41:
         3d:3d:a1:73:e7:d4:cb:34:8c:72:42:ab:c7:3f:34:19:1c:2b:
         50:18:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:02 2024 by rpki-client on console-fra.rpki-client.org