Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/323830343a3161633a3a2f33322d3634203d3e203533313735.roa
File:                     323830343a3161633a3a2f33322d3634203d3e203533313735.roa (raw, json)
Hash identifier:          nmveaUFDAhUbaAUfxiXkx7kc2PuXIyzH5toO22QlkwY=
Subject key identifier:   26:09:70:A9:B8:8D:16:4F:37:E5:1C:E5:97:DE:A8:E5:5F:36:FB:FE
Certificate issuer:       /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial:       056512B89D78A2BCADB8F5BCB13CCB49E93E51FB
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/323830343a3161633a3a2f33322d3634203d3e203533313735.roa
Signing time:             Wed 03 Apr 2024 18:30:22 +0000
ROA not before:           Wed 03 Apr 2024 18:25:22 +0000
ROA not after:            Wed 02 Apr 2025 18:30:22 +0000
asID:                     53175
IP address blocks:        2804:1ac::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
                          rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:65:12:b8:9d:78:a2:bc:ad:b8:f5:bc:b1:3c:cb:49:e9:3e:51:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
        Validity
            Not Before: Apr  3 18:25:22 2024 GMT
            Not After : Apr  2 18:30:22 2025 GMT
        Subject: CN=260970A9B88D164F37E51CE597DEA8E55F36FBFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:86:e5:72:cf:65:8b:01:3d:74:b5:87:9f:
                    b7:7d:2a:63:89:6b:8a:e1:81:ff:79:91:03:58:5b:
                    b0:58:d3:f5:e8:aa:34:ed:3b:0f:e6:6f:62:1d:78:
                    06:f7:c0:ca:a5:35:aa:4a:8b:c4:ef:a8:d0:ae:fe:
                    5e:03:22:9f:58:8b:6d:a4:48:10:e9:54:a3:47:2d:
                    cf:73:ed:e5:bb:a5:6a:20:e1:62:43:b4:9e:a2:03:
                    b0:e2:76:a0:63:53:bf:64:a8:b3:22:91:7d:90:c4:
                    e1:e0:4d:36:ac:63:35:35:f1:2c:a1:87:94:65:fe:
                    cf:77:a9:e9:1d:aa:9c:94:8b:0e:3b:5a:8b:f6:e5:
                    22:9b:79:8c:48:1c:a3:94:1f:24:58:e1:42:ea:84:
                    f5:34:22:35:ab:a8:3c:27:55:c0:b2:a7:f0:57:b9:
                    e1:cb:35:5e:f8:43:a8:72:01:8a:a8:4f:0b:f5:26:
                    0d:63:61:15:25:21:ce:ac:6d:16:2e:0a:a4:76:ea:
                    8f:80:7b:f1:57:ec:eb:71:e4:50:5a:82:6f:94:f5:
                    c0:d2:8b:05:cc:88:21:b4:1f:a4:99:3c:58:7e:48:
                    71:b9:52:74:46:9f:a2:7c:7f:3f:0a:c5:c3:66:4f:
                    1b:d7:6b:77:b3:0d:7d:11:08:0a:ef:88:89:82:91:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:09:70:A9:B8:8D:16:4F:37:E5:1C:E5:97:DE:A8:E5:5F:36:FB:FE
            X509v3 Authority Key Identifier:
                keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/323830343a3161633a3a2f33322d3634203d3e203533313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:1a:69:86:a0:72:99:bf:13:05:80:8c:94:d7:74:75:ef:61:
         9c:d8:c3:70:ce:6d:a6:b8:1d:4a:69:4a:3d:2d:af:4a:e8:4c:
         04:cf:64:3a:d1:bc:ff:f4:ca:8c:b8:ee:7d:ce:e4:20:70:1c:
         ba:8b:72:71:a5:d2:be:fc:07:ec:a0:2e:3e:cf:17:06:03:ca:
         a8:6c:cc:39:9c:75:ba:e3:e9:35:c5:2b:45:88:de:78:7e:66:
         4a:70:2b:ad:2e:a1:f2:4c:83:3e:5d:50:93:f5:fc:63:cb:6d:
         b1:f6:18:4a:33:0f:e2:2a:41:41:46:61:35:dc:e0:51:e9:58:
         d5:c6:06:c5:74:82:c7:49:5e:8b:1a:85:d8:bd:08:0e:ea:b4:
         0c:2b:91:ba:7b:87:4e:24:49:e0:83:dc:1e:60:20:38:82:15:
         43:2a:69:c6:f2:c7:f1:ab:ce:f6:b3:31:93:1a:76:ad:ef:ac:
         28:fc:fd:73:90:fc:9e:00:3b:b6:42:d8:68:7b:0e:c4:a3:38:
         0a:a9:70:71:95:34:a0:b9:9d:82:a2:eb:14:ae:72:b4:9d:c4:
         c4:ae:4d:86:f3:91:72:72:3e:6c:af:19:1c:4d:43:d3:0d:cd:
         ab:43:2d:6a:fe:7c:f4:db:83:44:81:59:4f:18:64:8d:18:6e:
         48:f9:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org