Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/323830343a3764303a3a2f33322d3438203d3e20323632333234.roa
File:                     323830343a3764303a3a2f33322d3438203d3e20323632333234.roa (raw, json)
Hash identifier:          UsIb2muJb+XdoVyXqNMhw2h9+lcKglGfRERoauYtUGQ=
Subject key identifier:   80:8E:12:6E:17:C0:FA:9F:E1:4D:72:E4:DC:8E:1E:41:8C:20:86:FD
Certificate issuer:       /CN=D3B41FA186B792CCCB5555A7A82DB2B7359D3038
Certificate serial:       0AAF6D21C3FA934069F1320E69CF55F0F8B37EDF
Authority key identifier: D3:B4:1F:A1:86:B7:92:CC:CB:55:55:A7:A8:2D:B2:B7:35:9D:30:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/323830343a3764303a3a2f33322d3438203d3e20323632333234.roa
Signing time:             Wed 10 Apr 2024 13:00:03 +0000
ROA not before:           Wed 10 Apr 2024 12:55:03 +0000
ROA not after:            Wed 09 Apr 2025 13:00:03 +0000
asID:                     262324
IP address blocks:        2804:7d0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.crl
                          rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 21:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:af:6d:21:c3:fa:93:40:69:f1:32:0e:69:cf:55:f0:f8:b3:7e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B41FA186B792CCCB5555A7A82DB2B7359D3038
        Validity
            Not Before: Apr 10 12:55:03 2024 GMT
            Not After : Apr  9 13:00:03 2025 GMT
        Subject: CN=808E126E17C0FA9FE14D72E4DC8E1E418C2086FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:99:74:ee:24:d6:89:55:39:7a:d4:c7:7e:
                    64:bd:a0:62:cb:3d:17:cd:03:74:8e:fa:df:ce:21:
                    0c:33:88:30:ca:f2:ad:9f:7b:b0:ec:d6:4f:73:4f:
                    cc:65:32:ba:88:21:68:70:ef:bb:52:58:2b:0f:a5:
                    30:19:75:80:81:1d:31:22:c4:20:2b:02:15:5f:11:
                    a2:4c:e9:13:19:c5:c6:9c:fc:ca:95:26:8b:ec:6b:
                    8d:f3:b3:5b:34:d1:d8:3b:58:44:92:da:75:3c:a8:
                    d6:25:c3:4a:3b:15:9d:f6:75:fc:2b:c8:88:b1:61:
                    1c:a9:a3:b2:06:ea:05:ab:bc:0c:38:04:8c:ae:07:
                    28:5d:02:63:80:42:2a:31:96:81:5f:2f:db:ab:5a:
                    45:45:16:21:fc:1c:3c:17:ca:36:7b:8a:36:23:fb:
                    9b:99:31:69:36:e9:e9:9d:ef:e5:a8:4c:a9:65:55:
                    1b:65:3b:4c:c4:b3:94:44:be:b4:3b:53:ee:cd:71:
                    19:6a:68:82:c2:33:5e:85:82:13:97:8a:a6:54:ac:
                    ec:73:92:40:9b:86:5c:1c:38:82:69:b9:b3:37:73:
                    83:88:e6:0c:f3:95:97:4b:f2:2c:58:35:1e:44:7a:
                    a4:69:53:30:1b:cc:4d:18:a0:9e:64:a4:6f:01:bd:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:12:6E:17:C0:FA:9F:E1:4D:72:E4:DC:8E:1E:41:8C:20:86:FD
            X509v3 Authority Key Identifier:
                keyid:D3:B4:1F:A1:86:B7:92:CC:CB:55:55:A7:A8:2D:B2:B7:35:9D:30:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/323830343a3764303a3a2f33322d3438203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:27:85:96:d8:94:a4:40:10:fc:f2:76:6a:2a:28:ae:92:
         b5:52:30:33:55:48:2d:05:35:eb:11:6a:b5:50:42:dc:98:e0:
         15:e5:dc:25:c4:c4:c2:b0:73:79:5c:83:52:2f:4a:2d:ef:50:
         42:72:07:66:84:8f:24:74:4a:7d:21:3d:97:43:99:b0:bb:0b:
         54:07:f9:04:04:30:e5:c0:70:53:ee:38:e3:e5:ed:e4:63:b5:
         f2:3e:ae:a3:b1:ba:9f:2e:b3:58:c6:44:19:fa:0b:d7:19:04:
         fb:9d:8d:c7:cc:63:08:06:ac:a5:d4:e7:1b:b2:35:b9:67:8d:
         68:68:e7:e0:18:a6:4d:a5:13:5f:32:8f:4d:a9:a7:ee:74:ab:
         ba:31:8b:c9:17:30:b7:e7:b9:7b:84:ee:ac:59:aa:66:92:d5:
         6a:a4:7e:6a:ba:f2:f5:48:ba:b7:86:8d:40:07:9d:79:c0:a6:
         82:98:54:8e:15:54:70:8e:31:44:9a:ad:cb:80:3f:0c:c7:8c:
         52:09:5d:dd:9f:4d:4a:81:ee:c5:6e:4d:41:01:cd:8a:e8:40:
         f5:8e:b4:2a:74:e5:bd:82:16:78:b6:8c:f9:a3:2a:04:60:77:
         d0:49:36:fa:af:10:fc:3e:8c:2d:23:c3:4f:e3:04:81:4b:de:
         af:76:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 21:25:40 2024 by rpki-client on console-ams.rpki-client.org