Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa
File:                     323830343a323330343a3a2f33332d3333203d3e20323634313337.roa (raw, json)
Hash identifier:          3bo6Snmip3B5/YPC783JdiKp0z/z9C2EJHJ3EW3IFW0=
Subject key identifier:   6B:F0:DC:2D:9B:15:8E:03:9E:D1:F6:7D:32:FA:6C:F0:6E:49:42:69
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       616A36761ED6E071CF65A026C9FABB5B60955D2C
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa
Signing time:             Thu 04 Apr 2024 08:08:35 +0000
ROA not before:           Thu 04 Apr 2024 08:03:35 +0000
ROA not after:            Thu 03 Apr 2025 08:08:35 +0000
asID:                     264137
IP address blocks:        2804:2304::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6a:36:76:1e:d6:e0:71:cf:65:a0:26:c9:fa:bb:5b:60:95:5d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Apr  4 08:03:35 2024 GMT
            Not After : Apr  3 08:08:35 2025 GMT
        Subject: CN=6BF0DC2D9B158E039ED1F67D32FA6CF06E494269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:3c:92:76:8d:a6:e0:27:7b:32:c2:6b:4f:
                    1f:0a:d4:ac:ed:76:b1:ea:c2:55:b7:b8:fa:0c:b9:
                    a6:1d:1f:d6:e3:57:1c:b0:92:d3:56:11:7a:8b:bf:
                    3e:9b:0c:c9:dd:2f:aa:19:78:e5:f3:dd:f0:2e:2b:
                    48:59:7a:9c:28:b7:f3:19:fb:e7:45:a9:61:b7:ec:
                    95:78:46:c1:9d:c9:c7:83:15:fc:5c:0b:20:89:98:
                    f7:8f:0f:f8:a3:e6:2f:dc:35:d0:7c:75:db:75:50:
                    a0:92:68:e1:2c:43:35:09:2a:54:b1:b0:e5:2d:0e:
                    ce:5c:b7:4b:44:fb:6e:61:4b:96:72:0b:ec:4c:3c:
                    4f:d3:62:38:d1:eb:7d:5d:5e:d0:ab:0d:b2:60:82:
                    b0:8f:d5:55:81:cc:5d:0f:b6:2a:f7:43:4f:80:cc:
                    eb:d7:82:ca:03:ff:dd:78:1e:05:9d:cb:03:f6:62:
                    c3:46:31:8f:d3:96:94:13:65:c4:54:08:7e:ad:0a:
                    80:7f:7e:07:65:bd:b5:57:f3:2f:f7:90:27:fb:8b:
                    12:65:56:bf:67:6b:3d:20:1b:85:54:b3:8d:b1:8a:
                    e7:03:76:69:f3:01:0f:57:36:66:89:ee:cc:a1:5b:
                    71:51:aa:4d:ae:f5:07:ae:e6:cf:65:29:9e:f6:17:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F0:DC:2D:9B:15:8E:03:9E:D1:F6:7D:32:FA:6C:F0:6E:49:42:69
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:4c:e6:e6:68:0c:78:87:9c:c2:f5:16:03:19:c5:d3:ca:b4:
         41:7e:7d:82:b5:f6:24:79:5e:d8:d4:53:fc:ae:65:32:5c:80:
         98:db:63:95:13:7c:66:8d:27:43:31:a5:b9:13:cc:95:e3:80:
         98:d6:b7:76:e0:91:79:3c:08:0a:f2:98:4b:06:af:12:a5:43:
         c5:d4:79:55:80:d5:44:ae:c3:b0:4e:5b:db:ed:b4:c9:bc:c9:
         38:d8:b4:90:06:a2:21:db:5c:f7:77:04:72:04:2c:cd:3e:33:
         bb:36:9c:86:11:8f:f7:cd:5f:c9:49:3d:f2:b2:d7:ed:a6:b9:
         37:00:d7:0d:ed:2f:28:d1:ac:4d:7c:d8:4c:d4:2f:04:93:30:
         aa:9a:83:f6:0c:ac:93:66:ad:dc:94:87:7b:33:53:2d:51:b7:
         1d:57:be:33:b6:2e:0f:4a:c1:fa:40:03:41:ab:8d:6c:18:a1:
         28:6c:e2:62:a6:0a:47:6d:6e:06:4c:0b:7d:08:b3:5b:14:90:
         ba:1e:47:1f:d9:1c:7e:ed:c9:d9:3b:30:b5:41:e0:e2:86:36:
         3d:a2:35:23:4c:ef:8d:4d:96:c6:92:48:fd:47:4a:f6:6a:53:
         ec:01:58:a1:98:7e:ed:66:8f:2c:1a:d7:7d:b3:94:5f:ed:fe:
         c7:79:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:15 2024 by rpki-client on console-ams.rpki-client.org