Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/323830343a393032633a3a2f33322d3438203d3e20323734353932.roa
File:                     323830343a393032633a3a2f33322d3438203d3e20323734353932.roa (raw, json)
Hash identifier:          o5sNVeZrussEN9NZ6V+R/1mj05dconDeZILWExlIT1Y=
Subject key identifier:   B0:BE:2E:7F:A7:40:E2:AF:48:07:DE:F8:ED:43:FB:F1:4B:3A:E3:E5
Certificate issuer:       /CN=E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B
Certificate serial:       33EF5B0BECB8865DE461E358C2520EA60354369B
Authority key identifier: E6:DE:35:A8:79:ED:E5:C8:C5:F3:56:38:2A:AC:3C:CA:0D:61:D7:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/323830343a393032633a3a2f33322d3438203d3e20323734353932.roa
Signing time:             Wed 17 Jul 2024 19:15:23 +0000
ROA not before:           Wed 17 Jul 2024 19:10:23 +0000
ROA not after:            Wed 16 Jul 2025 19:15:23 +0000
asID:                     274592
IP address blocks:        2804:902c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.crl
                          rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ef:5b:0b:ec:b8:86:5d:e4:61:e3:58:c2:52:0e:a6:03:54:36:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B
        Validity
            Not Before: Jul 17 19:10:23 2024 GMT
            Not After : Jul 16 19:15:23 2025 GMT
        Subject: CN=B0BE2E7FA740E2AF4807DEF8ED43FBF14B3AE3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:4b:b5:ce:cf:8a:07:ea:fb:bc:b0:27:f2:
                    42:58:f0:11:09:60:aa:8c:02:2a:61:9a:a8:8f:74:
                    a5:db:dc:46:48:c1:5e:48:de:b5:7e:b4:de:98:2e:
                    01:3c:ff:8c:94:c1:8d:28:0a:ad:af:b3:04:b7:72:
                    4e:6d:0e:61:ad:00:40:77:46:f4:86:c2:dc:59:d2:
                    68:98:d5:f2:41:c1:63:2e:9f:ef:37:71:86:3d:a3:
                    89:fb:33:94:e2:12:49:57:77:3a:31:1f:3f:99:9a:
                    e7:ce:82:be:90:62:e8:99:ae:58:8e:e8:7d:60:99:
                    a8:f6:4f:e2:01:77:20:4a:02:a7:4e:d3:e6:3b:e1:
                    b2:b1:cf:02:3a:88:6b:44:73:b4:3d:fa:d7:3a:e1:
                    21:29:e0:5e:d8:4b:49:06:c7:7b:9d:65:d3:6e:6a:
                    61:81:65:43:01:fe:42:d8:58:9d:47:0b:6f:83:8e:
                    55:a7:d4:dd:07:55:77:f2:4d:16:40:02:e6:c9:89:
                    57:db:46:18:92:c3:85:c8:90:e6:63:3b:1e:86:22:
                    8f:59:36:69:93:1f:92:c7:ee:19:f3:e3:67:ee:44:
                    bb:c4:1a:63:88:23:33:06:2d:77:05:4b:5c:92:76:
                    c7:77:0c:13:b5:73:38:e6:31:49:15:1f:05:0d:5d:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:2E:7F:A7:40:E2:AF:48:07:DE:F8:ED:43:FB:F1:4B:3A:E3:E5
            X509v3 Authority Key Identifier:
                keyid:E6:DE:35:A8:79:ED:E5:C8:C5:F3:56:38:2A:AC:3C:CA:0D:61:D7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/323830343a393032633a3a2f33322d3438203d3e20323734353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:902c::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:22:5c:64:2f:42:ec:c9:f7:ec:9e:f4:1c:5d:5e:8c:59:dd:
         6b:4a:13:db:ea:f7:5f:2c:00:b6:70:14:da:4f:72:e6:20:e4:
         f2:fd:3a:45:24:07:d4:a4:fb:9f:d6:75:4f:54:68:56:5e:c3:
         52:c3:fd:f0:f5:7f:5c:6e:45:a1:8c:4b:e6:ca:5e:e8:21:18:
         f2:a2:2e:bc:02:55:d7:88:2b:1c:23:a3:4b:c5:46:61:4e:18:
         22:9d:cf:6b:75:fd:fd:f6:61:7c:32:84:3a:1b:f1:c0:6f:a0:
         d0:d8:55:73:44:4e:c8:68:29:de:73:51:de:ed:3a:5d:c3:17:
         9a:f2:4b:92:88:83:cf:f4:b6:d4:be:6b:d8:57:a8:55:6f:f2:
         37:1e:5a:19:02:81:04:fa:2d:83:a8:7d:f4:0a:9a:27:a5:57:
         12:d4:dd:f2:64:99:12:00:df:e8:e0:06:d8:b4:fb:cd:72:79:
         75:3a:14:63:74:b5:67:a7:ce:37:70:25:8b:94:d3:54:08:60:
         0b:2f:75:b3:15:f6:bc:64:f1:06:51:0d:2f:50:78:02:ce:6b:
         7a:c0:ac:f3:b0:4c:ed:86:17:ad:c2:a1:03:04:35:15:ec:dc:
         84:08:ac:5f:24:a7:36:c9:83:23:b6:75:9f:57:06:d8:f7:3c:
         56:6c:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:50 2024 by rpki-client on console-fra.rpki-client.org