Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/323830343a356363303a3a2f33322d3438203d3e20323638393238.roa
File:                     323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (raw, json)
Hash identifier:          W1kChvCgV2D9XeU0kZnRupRK3hOoz9AOZ2kR7URcCt8=
Subject key identifier:   97:FD:1A:59:04:C4:5D:64:76:EE:7D:45:75:41:49:59:C8:AF:C5:77
Certificate issuer:       /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08
Certificate serial:       3C645A4E76434F37A875FC4E4CE9D89B822243FE
Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/323830343a356363303a3a2f33322d3438203d3e20323638393238.roa
Signing time:             Thu 04 Apr 2024 03:01:10 +0000
ROA not before:           Thu 04 Apr 2024 02:56:10 +0000
ROA not after:            Thu 03 Apr 2025 03:01:10 +0000
asID:                     268928
IP address blocks:        2804:5cc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl
                          rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:64:5a:4e:76:43:4f:37:a8:75:fc:4e:4c:e9:d8:9b:82:22:43:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08
        Validity
            Not Before: Apr  4 02:56:10 2024 GMT
            Not After : Apr  3 03:01:10 2025 GMT
        Subject: CN=97FD1A5904C45D6476EE7D4575414959C8AFC577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:51:aa:49:16:8b:0a:0d:ad:8c:f9:93:86:
                    cc:6a:5b:dd:25:6a:64:62:6f:b6:70:12:6e:a0:31:
                    b7:4f:33:de:ee:ed:71:fc:04:b3:ea:be:0e:2b:0a:
                    3a:2f:29:a4:bc:6d:8c:38:3a:6b:60:b1:b2:d7:dd:
                    99:98:2c:27:55:0c:2f:ef:e0:30:08:5e:5f:1f:33:
                    97:ed:b6:a1:bb:29:11:ee:9e:42:cc:29:db:91:d9:
                    be:45:bd:aa:05:71:02:67:4e:97:11:46:99:ef:28:
                    cc:a2:ae:73:16:93:91:d0:34:29:5a:59:1f:c1:52:
                    f5:20:dc:fa:5e:8a:56:88:bc:52:52:80:d0:f3:64:
                    7c:ef:b1:6f:08:64:db:2e:b0:e9:8e:cd:47:ae:9b:
                    a9:9b:76:be:ad:a3:8d:f1:e0:7a:8b:0f:f5:ec:a1:
                    7c:f2:8a:ac:2b:d1:4e:0d:b3:5f:64:f5:1c:4d:9b:
                    22:c6:fe:09:d0:96:29:d5:30:1d:b7:c0:27:56:46:
                    0e:98:7f:1a:b6:87:88:4b:1c:92:6b:e1:71:42:70:
                    78:d9:b4:d3:aa:6a:5a:9f:30:8b:0f:b6:bd:69:d2:
                    e3:3b:9c:f9:8c:c4:65:e7:f6:a7:0f:a1:a8:d7:2b:
                    a6:78:2a:21:7d:fa:70:1f:40:a8:2b:59:c0:1e:9e:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:1A:59:04:C4:5D:64:76:EE:7D:45:75:41:49:59:C8:AF:C5:77
            X509v3 Authority Key Identifier:
                keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/323830343a356363303a3a2f33322d3438203d3e20323638393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:0b:2d:e9:57:93:fd:9d:0d:80:30:8a:5d:91:0c:f6:0d:9a:
         c4:7a:b0:90:48:72:37:e8:0c:f6:c4:64:99:74:5b:99:c5:72:
         fc:53:6a:61:56:b0:e8:b9:67:90:0d:ae:19:50:64:d4:67:bc:
         4a:ed:59:9d:cd:9d:6a:3b:f3:35:8a:a5:81:47:d9:ee:dc:7d:
         ac:cc:ee:af:00:19:c1:7f:a7:25:27:21:bd:03:05:aa:ce:b1:
         64:aa:45:5e:4a:c9:5a:25:e3:ef:25:c6:dc:f5:63:82:b7:c5:
         a0:13:04:3f:33:37:e5:c3:45:50:d4:5d:47:5d:04:6f:a8:fa:
         76:56:d9:1a:85:ef:5f:4d:fe:df:cc:c1:3d:69:4d:16:f7:22:
         b4:dd:a1:b7:53:78:c8:1c:25:0f:1a:95:ea:db:f3:20:5b:05:
         46:a9:5e:92:89:3e:b5:39:be:78:6a:4d:4a:03:ff:fe:5a:44:
         dc:e3:63:51:94:f3:af:20:12:28:c1:39:e6:c1:d8:de:96:00:
         84:6c:a3:cf:b7:9a:2c:5a:43:98:d5:83:7d:45:45:c4:6e:f1:
         46:65:43:21:ec:64:bc:96:93:7e:9b:ea:81:bc:2f:a7:e5:4b:
         8b:24:d9:7e:0e:ca:7e:d8:62:c9:bb:45:30:e3:41:fe:e0:6f:
         02:10:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:56 2024 by rpki-client on console-fra.rpki-client.org