Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/323830343a323936383a3a2f33322d3438203d3e20323634303133.roa
File:                     323830343a323936383a3a2f33322d3438203d3e20323634303133.roa (raw, json)
Hash identifier:          uO9NNA+7VspjsVnDLwwSbIVOIwsF3BU98AlEbcu4+tc=
Subject key identifier:   2A:A0:EE:1A:D0:A0:ED:4A:C6:B9:B1:E4:EF:1E:2C:B9:BF:42:E0:70
Certificate issuer:       /CN=B4427441B48FB34853A49345A310681C00837092
Certificate serial:       3A095B2AF197E192FE5EEE8AA4F45A5E0D7150AC
Authority key identifier: B4:42:74:41:B4:8F:B3:48:53:A4:93:45:A3:10:68:1C:00:83:70:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/323830343a323936383a3a2f33322d3438203d3e20323634303133.roa
Signing time:             Tue 28 May 2024 20:34:58 +0000
ROA not before:           Tue 28 May 2024 20:29:58 +0000
ROA not after:            Tue 27 May 2025 20:34:58 +0000
asID:                     264013
IP address blocks:        2804:2968::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:09:5b:2a:f1:97:e1:92:fe:5e:ee:8a:a4:f4:5a:5e:0d:71:50:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4427441B48FB34853A49345A310681C00837092
        Validity
            Not Before: May 28 20:29:58 2024 GMT
            Not After : May 27 20:34:58 2025 GMT
        Subject: CN=2AA0EE1AD0A0ED4AC6B9B1E4EF1E2CB9BF42E070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:af:7e:ed:18:e0:19:0b:36:26:f6:fc:d9:
                    64:97:ab:98:31:8b:a7:65:4c:2b:78:ba:7f:02:e2:
                    0c:e2:77:cd:a3:cb:d4:40:44:f5:80:55:90:c9:3b:
                    20:44:6e:a0:0f:19:a1:78:0d:86:8a:8d:34:6d:2b:
                    bc:af:af:d5:0e:46:d1:23:8a:98:9e:94:53:f4:d2:
                    8f:80:ef:91:e9:1d:3e:3e:f7:3c:6c:f9:a5:6b:f5:
                    f0:c4:79:e2:f1:93:55:e8:7d:8e:b3:86:81:d3:83:
                    7c:50:87:5c:6e:11:61:26:bc:55:c5:b8:2e:ab:87:
                    0e:9b:49:f2:78:73:06:75:7d:79:f2:b2:d8:8f:dc:
                    5c:4e:33:2a:b6:2f:49:8d:c3:6e:af:70:28:64:fc:
                    65:5f:13:15:cb:63:a9:e9:82:f2:56:a2:9d:d0:9e:
                    7f:fc:ed:d6:eb:b4:67:f3:77:da:c1:bb:b3:32:58:
                    ee:47:59:38:b4:98:ad:e3:5f:b5:4e:6c:1d:1d:93:
                    8b:14:d7:54:3a:5b:4b:a4:b5:ff:13:5a:20:d3:32:
                    2c:a3:0c:dc:2d:3b:73:a3:0c:e8:10:e7:c7:bb:7f:
                    17:aa:93:b3:0c:dc:35:e1:af:5e:66:88:49:28:58:
                    2d:21:74:0f:0b:1e:6f:61:88:7e:ec:46:f6:b6:28:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A0:EE:1A:D0:A0:ED:4A:C6:B9:B1:E4:EF:1E:2C:B9:BF:42:E0:70
            X509v3 Authority Key Identifier:
                keyid:B4:42:74:41:B4:8F:B3:48:53:A4:93:45:A3:10:68:1C:00:83:70:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/323830343a323936383a3a2f33322d3438203d3e20323634303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2968::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:41:0a:c7:2b:bc:e9:a8:4f:92:50:e6:0f:45:86:56:29:c8:
         d4:1a:14:5e:5e:00:f1:d3:f0:3a:3a:db:c9:1c:62:ac:19:27:
         6b:f8:ab:70:f4:86:1e:f7:7d:3f:35:72:43:51:f5:cd:86:25:
         bc:2e:b8:1b:4f:62:b0:d1:53:e8:ae:82:a1:6c:a6:14:dd:22:
         02:d8:22:d6:8b:92:5e:30:81:e6:21:18:ad:1d:ad:1b:d0:e4:
         c2:7d:dd:19:94:73:9c:b9:80:bd:94:87:c8:58:aa:23:fd:46:
         c2:7b:79:59:2c:08:ca:6f:fd:d8:9e:5a:0d:e9:93:97:21:a9:
         f8:ed:74:f3:96:66:49:32:17:2e:8e:5e:27:14:d5:aa:d3:08:
         a8:42:ff:5b:7c:b1:ef:fe:83:f0:6b:3b:82:3a:cd:ac:14:57:
         5c:e2:77:75:9f:1c:cb:c8:10:ae:63:22:f7:ea:fa:ef:1e:6b:
         4f:26:81:23:c3:e1:e1:29:6a:16:af:25:0a:d3:f6:66:be:9c:
         2a:68:69:59:80:e0:0e:62:44:1b:eb:ac:af:fa:e3:bb:5a:29:
         df:ba:6d:45:76:19:70:59:81:78:d8:36:dd:7a:0c:e0:35:cc:
         94:91:59:5c:9d:34:ff:4f:e1:b7:95:ad:f9:16:c3:7b:e2:56:
         14:87:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:08 2024 by rpki-client on console-fra.rpki-client.org