Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa
File:                     323830343a333434383a3a2f33322d313238203d3e20323635343437.roa (raw, json)
Hash identifier:          koTldvhV2gpT8VZIRZn/a4JLiPFmel30qHQV92O4cIY=
Subject key identifier:   D1:DF:71:7E:FA:8D:68:AE:6F:73:44:F3:45:90:19:86:F4:A8:B8:85
Certificate issuer:       /CN=E25F3D52DD8C272CC64492A7621AE551E084A019
Certificate serial:       1A660004A1658EFCD11C438AC7997A413AB202EF
Authority key identifier: E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa
Signing time:             Wed 31 Jul 2024 13:44:39 +0000
ROA not before:           Wed 31 Jul 2024 13:39:39 +0000
ROA not after:            Wed 30 Jul 2025 13:44:39 +0000
asID:                     265447
IP address blocks:        2804:3448::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:66:00:04:a1:65:8e:fc:d1:1c:43:8a:c7:99:7a:41:3a:b2:02:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25F3D52DD8C272CC64492A7621AE551E084A019
        Validity
            Not Before: Jul 31 13:39:39 2024 GMT
            Not After : Jul 30 13:44:39 2025 GMT
        Subject: CN=D1DF717EFA8D68AE6F7344F345901986F4A8B885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:1c:39:1e:96:95:5b:a7:55:9b:07:85:aa:
                    0e:66:5d:aa:e0:96:4c:e4:7e:35:4c:44:14:6b:25:
                    a4:76:e9:23:36:c0:48:7b:3a:03:ff:e4:65:00:14:
                    07:b8:f4:37:92:84:f5:7e:58:4e:b4:d5:93:ec:37:
                    8c:29:f6:26:08:45:b4:59:b9:4a:0a:74:50:37:40:
                    79:84:64:63:dc:f4:31:36:e0:5a:1b:c3:28:ff:78:
                    88:42:08:d9:f2:84:02:16:a4:aa:e7:ec:c9:ca:b4:
                    68:98:d0:56:e1:98:bb:73:94:7e:32:a2:d5:6f:3f:
                    46:2e:2f:fb:3b:a5:5c:a6:d4:4f:2d:b6:65:9f:e0:
                    7f:88:f1:c8:d0:3d:c3:f0:90:9b:66:00:ad:a2:46:
                    23:fc:ff:94:7b:76:65:c5:d0:07:da:09:37:78:db:
                    97:69:8e:c9:ae:22:97:8d:84:92:4e:ee:0f:14:5d:
                    25:a4:a1:bf:36:6d:10:69:67:67:25:8d:f2:14:01:
                    35:87:16:06:1e:00:43:3a:54:90:2f:40:fc:f2:a9:
                    aa:3d:f3:96:2a:4a:d0:a0:13:17:69:fa:0f:b4:45:
                    d5:15:44:ad:2f:f1:3c:10:32:33:84:e5:c2:99:c2:
                    1e:8d:0b:fb:19:64:d1:82:ab:1a:f4:e4:45:5c:ab:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DF:71:7E:FA:8D:68:AE:6F:73:44:F3:45:90:19:86:F4:A8:B8:85
            X509v3 Authority Key Identifier:
                keyid:E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3448::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:6b:80:36:39:af:ab:96:cd:65:98:aa:87:81:1f:57:b6:7b:
         38:d1:53:a6:70:98:ba:6c:3a:5e:69:15:ca:fa:25:9a:1c:67:
         63:dc:73:34:5a:12:2b:f3:55:09:83:eb:b9:36:24:1d:e9:78:
         ee:17:a3:68:21:d4:03:64:e1:57:da:be:fb:a5:ad:16:f9:54:
         fc:0d:d3:ed:50:7c:20:00:89:47:b5:bf:ce:f7:cd:13:3a:ec:
         c8:80:32:df:d2:2d:e8:04:f9:ed:43:93:7e:db:61:1d:bf:81:
         b5:e9:fe:79:b6:53:0c:49:07:95:8c:08:ce:b3:2a:6f:19:eb:
         49:59:e7:5f:61:ac:08:b1:19:36:22:b3:56:05:2d:fa:03:0e:
         d1:c0:5c:65:f6:06:7b:8a:d5:40:05:f0:33:10:9c:29:63:79:
         10:7a:a4:85:01:a5:30:ca:3a:38:dc:3f:17:fd:05:e0:88:7a:
         e1:ae:67:69:56:3a:1e:aa:fd:4f:82:dc:a8:c7:63:59:7b:9e:
         36:55:8a:04:0a:2a:c1:bf:f7:23:36:66:2c:b9:fe:bc:ee:b6:
         2e:d7:06:6c:9c:cb:0d:43:88:09:0a:fb:4c:cf:30:96:49:90:
         03:8b:52:8d:52:c3:56:d7:79:e2:95:a7:8b:52:15:49:b9:58:
         30:d4:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:21 2024 by rpki-client on console-ams.rpki-client.org