Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/323830343a353262343a3a2f33322d3438203d3e20323638353335.roa
File:                     323830343a353262343a3a2f33322d3438203d3e20323638353335.roa (raw, json)
Hash identifier:          86VKsvykrBWvxEVczfRvxBM3aICZHp43KUooQH5E3JU=
Subject key identifier:   3B:80:00:80:34:E7:2F:4B:A8:66:8C:37:5E:EF:A9:DA:C3:5D:3E:0D
Certificate issuer:       /CN=5279BD28B8A9B31948C48EBF854A92DF4766E490
Certificate serial:       3C681C84F5328ED35D4E31FC0DAA1810CB4A198E
Authority key identifier: 52:79:BD:28:B8:A9:B3:19:48:C4:8E:BF:85:4A:92:DF:47:66:E4:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/323830343a353262343a3a2f33322d3438203d3e20323638353335.roa
Signing time:             Thu 04 Apr 2024 04:59:55 +0000
ROA not before:           Thu 04 Apr 2024 04:54:55 +0000
ROA not after:            Thu 03 Apr 2025 04:59:55 +0000
asID:                     268535
IP address blocks:        2804:52b4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.crl
                          rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:68:1c:84:f5:32:8e:d3:5d:4e:31:fc:0d:aa:18:10:cb:4a:19:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5279BD28B8A9B31948C48EBF854A92DF4766E490
        Validity
            Not Before: Apr  4 04:54:55 2024 GMT
            Not After : Apr  3 04:59:55 2025 GMT
        Subject: CN=3B80008034E72F4BA8668C375EEFA9DAC35D3E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f7:7e:19:bb:d8:32:22:15:6f:35:ca:6d:3c:
                    0e:84:ab:d8:f8:66:02:7e:99:7c:ca:1a:31:55:90:
                    bd:36:23:ce:ba:59:70:c6:9d:c5:14:9f:ba:a6:b5:
                    ea:d3:7b:8b:20:5a:f6:85:b7:d2:89:af:6b:17:a1:
                    3e:c7:3d:36:77:60:05:5a:9f:04:7c:80:66:60:0e:
                    1d:83:bb:13:b3:43:21:ca:b5:d7:40:23:e9:35:67:
                    04:b2:61:0e:3f:bd:8e:f5:43:3a:94:96:ab:81:93:
                    f0:55:35:95:5d:de:97:b8:dc:85:be:ed:f6:32:11:
                    98:12:24:8c:fc:27:7c:14:e4:96:e0:80:40:0c:5d:
                    c9:f8:b3:85:8e:60:a5:01:fe:5d:56:b0:50:c5:a9:
                    4f:f8:b6:0e:ac:c7:6a:7f:af:bf:9d:c4:e7:86:db:
                    8e:c2:11:08:1c:fd:4b:65:37:d8:e5:5d:b2:67:db:
                    93:e4:a3:54:f2:44:aa:f6:a3:d6:66:a7:bf:1f:a1:
                    7d:79:ff:6d:60:dc:6f:08:82:f6:eb:4d:81:19:05:
                    a1:bc:ee:c1:b7:88:7d:a2:38:62:4f:44:92:40:a2:
                    40:3d:0f:45:7c:db:7a:b9:27:aa:5e:81:9d:42:be:
                    1f:ba:b1:74:19:96:ee:54:a7:b2:5e:c5:4f:7c:0e:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:00:80:34:E7:2F:4B:A8:66:8C:37:5E:EF:A9:DA:C3:5D:3E:0D
            X509v3 Authority Key Identifier:
                keyid:52:79:BD:28:B8:A9:B3:19:48:C4:8E:BF:85:4A:92:DF:47:66:E4:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/323830343a353262343a3a2f33322d3438203d3e20323638353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:ea:37:d1:67:55:40:2c:2e:aa:49:bc:50:41:f8:d9:34:8b:
         b4:97:e3:0d:68:20:db:50:b2:12:20:c4:a7:ed:c5:03:8a:7b:
         1e:42:56:91:59:51:05:c1:1d:93:3a:7e:f4:5a:dc:63:ec:2a:
         cb:5c:1e:1d:27:bc:6c:1c:e7:0f:68:7d:c4:3e:4a:d4:ce:8d:
         03:a5:12:2e:bd:99:41:9d:66:68:37:18:9b:98:c8:d9:44:72:
         cb:95:de:80:2a:49:4c:d4:e5:8e:3c:60:41:b6:03:d8:eb:04:
         24:43:ab:ca:29:17:ab:33:99:2d:ba:5b:b3:de:d8:ba:33:b9:
         1c:4c:b0:01:e1:59:10:33:cf:a2:c0:ee:42:56:e1:24:36:23:
         67:38:73:de:10:ac:92:83:d2:28:c6:60:c0:3d:22:e5:9f:12:
         c1:96:d0:f7:a0:5d:e4:9c:eb:66:65:e9:0d:05:d1:79:df:bd:
         28:18:52:ff:0d:84:bb:6b:ee:fd:b7:f1:d4:cc:66:7a:00:20:
         3e:69:b6:92:e9:05:fd:4f:7b:36:c1:b3:ce:cd:5c:d2:39:fc:
         2a:b3:39:be:d1:92:78:a1:c1:d8:96:9f:02:de:67:d6:e8:89:
         91:46:0b:9b:4f:c4:26:15:c1:5d:77:cc:34:23:3f:04:20:f6:
         e7:a9:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org