Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/323830343a373735343a3a2f33322d3335203d3e203631363034.roa
File:                     323830343a373735343a3a2f33322d3335203d3e203631363034.roa (raw, json)
Hash identifier:          +ClaekE0Q7BUsbmaob2a8Qb0tY+2cHGYQvLk10+I52I=
Subject key identifier:   43:EB:46:8A:0C:C2:01:5C:45:B0:82:8F:F3:9F:AD:86:A1:3C:12:80
Certificate issuer:       /CN=37102E7E58DDCF3C0E6378A94CADA481B1887D8E
Certificate serial:       5A9BB1B79FFC00EF2205DB85D785B6892A33C7A7
Authority key identifier: 37:10:2E:7E:58:DD:CF:3C:0E:63:78:A9:4C:AD:A4:81:B1:88:7D:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/323830343a373735343a3a2f33322d3335203d3e203631363034.roa
Signing time:             Thu 04 Apr 2024 05:52:18 +0000
ROA not before:           Thu 04 Apr 2024 05:47:18 +0000
ROA not after:            Thu 03 Apr 2025 05:52:18 +0000
asID:                     61604
IP address blocks:        2804:7754::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.crl
                          rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 16:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9b:b1:b7:9f:fc:00:ef:22:05:db:85:d7:85:b6:89:2a:33:c7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37102E7E58DDCF3C0E6378A94CADA481B1887D8E
        Validity
            Not Before: Apr  4 05:47:18 2024 GMT
            Not After : Apr  3 05:52:18 2025 GMT
        Subject: CN=43EB468A0CC2015C45B0828FF39FAD86A13C1280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:73:24:4c:4a:24:19:e9:b6:c5:75:b8:19:
                    b1:71:78:74:b1:38:e5:de:bc:2a:a4:7f:0d:b6:32:
                    dc:ed:a6:89:f4:ff:82:f3:ca:62:0c:8e:06:85:d5:
                    99:ec:c3:fe:82:2d:b7:8a:37:db:46:9a:bc:7c:67:
                    4f:f5:75:8d:fe:e5:85:2c:5f:d4:30:84:22:8b:d4:
                    05:ed:39:98:ea:39:f7:12:6e:af:68:f7:bd:78:dc:
                    27:af:03:62:b3:3a:31:69:cd:d7:2e:a0:6b:92:c0:
                    85:25:0b:67:a5:4f:b0:b5:b2:4b:0c:8a:d3:28:7d:
                    f1:bd:9c:62:d1:31:92:67:4a:b1:f6:a2:bc:c7:08:
                    66:cd:92:20:f8:09:b4:d5:61:f8:37:c0:cb:50:80:
                    1a:12:f4:46:14:60:6a:8a:1d:58:25:dc:0d:61:4f:
                    4c:09:be:d8:11:61:6b:bf:d7:e7:dd:88:6a:bd:f5:
                    d6:8f:c7:dc:d6:4e:91:3e:21:55:97:02:72:d7:7f:
                    97:47:dd:f0:49:28:90:88:91:01:9b:12:72:63:be:
                    c9:39:87:43:29:41:b8:25:5a:7e:d9:83:4b:e7:ff:
                    03:25:c3:bd:b6:b7:ed:dc:f2:96:77:bd:13:46:16:
                    3b:a8:87:2d:4e:eb:fe:7e:49:ce:36:1a:12:ee:e5:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EB:46:8A:0C:C2:01:5C:45:B0:82:8F:F3:9F:AD:86:A1:3C:12:80
            X509v3 Authority Key Identifier:
                keyid:37:10:2E:7E:58:DD:CF:3C:0E:63:78:A9:4C:AD:A4:81:B1:88:7D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/323830343a373735343a3a2f33322d3335203d3e203631363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7754::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:b6:9a:39:9a:25:42:a4:bf:4e:04:92:be:7c:b8:29:97:
         2a:da:f0:97:6f:d7:05:72:d1:e4:bf:c1:8e:c6:0c:53:ad:82:
         fb:38:5c:4f:b9:6a:e3:eb:1a:fc:ac:cd:d0:76:5d:92:63:40:
         8e:b0:6f:3f:c1:3f:4c:04:27:71:10:65:68:c5:d7:cf:25:87:
         81:49:5a:4c:0d:de:77:b3:ee:c2:88:d1:e4:63:54:bc:dc:b0:
         29:fa:4f:52:7d:2f:b2:a2:f8:9a:61:8a:5e:09:78:cd:f8:0d:
         f0:b2:38:47:29:14:49:7c:db:68:dc:20:ae:a3:34:c3:33:2a:
         58:05:83:dc:53:d9:2c:82:e7:f5:19:3d:75:2e:e3:db:ef:82:
         8f:41:a7:2c:ed:71:1f:6c:05:01:50:af:e7:e1:58:e0:28:f0:
         89:8d:5e:ff:9e:3d:cf:76:4e:29:99:3f:2a:87:18:ff:df:88:
         89:bc:62:49:6b:5e:c6:cf:39:30:c4:b0:a4:00:e0:2c:1d:d2:
         f8:fe:8e:c1:f0:95:aa:82:da:04:74:44:23:28:84:d5:25:af:
         32:f7:ab:6f:62:a1:60:99:8c:92:52:60:4c:b3:d7:6e:64:c1:
         2f:2d:06:04:6b:2b:b9:8f:55:00:c9:a2:0d:6c:72:1e:f1:41:
         03:01:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:43:44 2024 by rpki-client on console-fra.rpki-client.org