Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a383430303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          rWWIKLueXrBdeENVzT5mx1zPJPKAcCQoVH6HAdnQs58=
Subject key identifier:   C4:EF:94:A1:E9:76:2D:EF:35:79:08:95:DE:85:07:C8:85:85:15:22
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       2B175A64FE5899E37BC19413FAB8E102CECA3817
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 15:09:02 +0000
ROA not before:           Wed 08 May 2024 15:04:02 +0000
ROA not after:            Wed 07 May 2025 15:09:02 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:17:5a:64:fe:58:99:e3:7b:c1:94:13:fa:b8:e1:02:ce:ca:38:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 15:04:02 2024 GMT
            Not After : May  7 15:09:02 2025 GMT
        Subject: CN=C4EF94A1E9762DEF35790895DE8507C885851522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:a9:14:d3:63:fa:8a:1b:8a:89:24:b9:f9:
                    94:2b:9c:ac:95:d0:04:98:50:fd:31:64:49:29:92:
                    c4:62:bc:fe:d0:e0:07:f5:f1:d0:5b:09:fd:90:87:
                    d4:d9:71:1d:df:4a:e1:11:75:c0:e5:a7:d4:4e:55:
                    d8:c1:42:eb:cb:51:fd:64:9a:ed:71:a0:78:28:11:
                    2c:36:1a:5e:6e:78:5a:4c:81:80:e4:c7:02:69:e2:
                    51:14:6f:3d:fc:09:43:94:2c:a2:de:f7:83:80:3a:
                    c4:92:b4:71:14:f9:3f:f3:be:25:d5:5b:ba:d7:60:
                    e1:3d:45:5c:19:61:18:21:f7:0d:b5:4b:4c:e8:36:
                    81:47:08:15:b4:64:bf:fa:01:df:48:be:a1:75:ca:
                    88:9a:3f:34:0e:d5:c1:6f:24:68:1e:bf:18:dd:1e:
                    06:cf:1a:e2:c3:3e:af:d8:68:9c:39:0b:60:c3:1d:
                    9c:3a:bb:e2:dc:4b:e2:b4:47:2e:f2:cf:6c:4f:10:
                    ee:f4:04:6d:b1:16:d1:78:6d:4b:65:2e:bd:fd:26:
                    b5:5d:a7:b8:5c:07:76:7d:62:da:b3:53:76:a5:83:
                    2c:2a:c2:96:93:9c:23:ad:16:be:a6:4c:58:60:fa:
                    9a:2a:72:14:90:b8:18:af:ef:da:22:b6:e8:2e:79:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EF:94:A1:E9:76:2D:EF:35:79:08:95:DE:85:07:C8:85:85:15:22
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         ad:ad:0d:d2:96:6a:9f:93:83:e4:23:41:a4:e9:0e:c9:4d:90:
         6c:99:31:9c:12:70:87:99:de:0a:e4:63:8f:6b:d3:87:fa:93:
         6a:48:6b:26:b2:40:b8:63:ed:8e:4a:ac:dd:66:3d:29:9a:3b:
         a0:6f:eb:7f:c9:ae:3f:14:09:09:dd:8b:24:b4:1e:a8:02:29:
         ed:db:9d:c3:9f:65:bb:bb:a9:64:6c:fc:b6:eb:b6:64:55:86:
         79:58:a2:b8:f0:b3:e1:1e:d7:7c:d6:f7:d2:24:b8:22:69:2c:
         c8:97:63:7e:80:f4:46:35:90:2d:9f:dd:f6:10:29:c1:71:de:
         4b:14:b9:5f:04:b3:82:0c:23:07:00:80:bf:9f:4d:ac:d6:d1:
         22:70:90:af:e0:97:d3:7a:c2:02:f4:fe:fd:bd:7d:60:4d:29:
         55:6a:49:d8:98:23:9e:6c:1e:ed:f9:be:87:5e:30:8f:e6:f7:
         de:6a:51:63:ed:ca:9d:34:fd:8a:97:4a:e9:00:75:c9:fb:3b:
         ec:23:c0:56:94:1f:8d:09:29:88:2d:52:af:99:c2:3b:cb:35:
         d4:e0:63:b8:3c:bb:21:77:87:ae:72:76:39:12:85:82:d5:4d:
         1f:11:01:3b:d3:5d:9d:c8:39:85:62:b8:20:38:26:ef:85:0c:
         79:02:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org