Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383630303a3a2f34302d3430203d3e20323733333039.roa
File:                     323830343a386337633a383630303a3a2f34302d3430203d3e20323733333039.roa (raw, json)
Hash identifier:          IrHbYh96gfadTFKbs2NENYqTwKQaCWHkOe228ZDucpo=
Subject key identifier:   13:32:26:05:5C:B8:BA:2B:3B:97:07:1E:E4:31:20:63:E4:F8:C6:E6
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       4D44F92F7C7447E48E8EDDE75FA726756A0FD3C9
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383630303a3a2f34302d3430203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 15:09:30 +0000
ROA not before:           Wed 08 May 2024 15:04:30 +0000
ROA not after:            Wed 07 May 2025 15:09:30 +0000
asID:                     273309
IP address blocks:        2804:8c7c:8600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:44:f9:2f:7c:74:47:e4:8e:8e:dd:e7:5f:a7:26:75:6a:0f:d3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 15:04:30 2024 GMT
            Not After : May  7 15:09:30 2025 GMT
        Subject: CN=133226055CB8BA2B3B97071EE4312063E4F8C6E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:71:28:00:e5:69:0c:c3:94:12:72:cb:3a:
                    a2:14:4c:e2:af:dc:b6:32:4d:10:7d:8d:43:58:19:
                    8a:4e:2f:f5:dc:a8:49:89:85:6a:a8:be:ae:3e:e7:
                    fd:6c:6b:e7:b8:d9:a7:1c:41:bc:0e:d8:e3:69:ef:
                    9b:ea:b3:3c:23:dd:e0:a6:f0:e6:77:96:d7:fe:6a:
                    f1:09:d9:f9:d6:70:13:4a:9b:d6:36:2f:15:3a:0d:
                    2c:1b:75:c6:e7:6c:c9:46:d4:08:9f:1c:d2:95:2a:
                    82:7b:09:6f:e8:de:fa:83:72:25:4f:51:48:55:69:
                    95:59:9b:e3:b2:dc:cd:e0:c0:44:01:5b:40:1d:99:
                    0f:cd:18:fc:5f:50:a5:ee:e8:38:cc:95:a1:e2:b7:
                    7c:f9:4a:65:b8:f9:60:b2:17:61:01:55:1f:7b:61:
                    4a:e4:56:61:c9:3d:48:4c:59:d5:3f:5c:c5:13:f3:
                    b6:a2:ab:7d:71:bb:80:6c:34:1b:d7:e1:a6:e6:00:
                    a9:6d:5b:7c:d6:7f:1b:59:77:1b:47:2d:47:cc:93:
                    11:4b:ec:a9:c9:c1:cf:f1:c8:c1:68:3c:97:f6:d5:
                    79:23:c8:f3:86:93:05:67:a9:1e:28:8a:e5:67:6e:
                    19:9d:79:d1:93:91:b8:c2:95:47:c4:5f:d9:46:53:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:32:26:05:5C:B8:BA:2B:3B:97:07:1E:E4:31:20:63:E4:F8:C6:E6
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383630303a3a2f34302d3430203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:ef:f5:83:0f:34:ce:66:e7:b0:0b:cc:8e:75:3c:2b:21:31:
         55:cc:94:a0:ff:fb:c1:b6:95:26:4b:7d:b2:61:3d:5b:1d:50:
         ed:fd:29:6d:53:a3:19:36:20:72:94:ef:07:e9:8b:1d:27:96:
         53:2e:fb:60:9e:4a:4f:0c:3a:71:f0:89:67:fd:95:22:bd:a9:
         0a:d4:be:23:9a:5e:5c:6a:dc:c0:67:3c:63:0e:ca:89:f6:ca:
         e6:b3:72:89:96:69:ac:3e:6c:ff:14:63:34:c0:49:bc:5e:82:
         9c:12:c0:c1:f3:3a:fc:e2:cd:0e:a0:17:4b:b9:b7:37:a4:00:
         60:e4:0c:02:c6:a9:0b:82:73:bf:21:ac:38:80:21:a5:26:fd:
         87:d4:b0:74:63:04:1d:66:7b:46:48:00:9d:1a:3e:30:15:29:
         22:6d:09:d9:fe:d3:13:d5:ea:eb:49:8e:ce:38:32:4b:33:2e:
         cb:44:0c:50:d6:09:91:47:60:ae:fc:cd:df:eb:90:18:a9:b4:
         6d:66:fc:3e:df:ff:ae:12:b8:b7:72:99:69:12:8c:a3:bf:75:
         65:ca:d7:5f:c3:fc:66:fb:28:9d:78:c6:2e:c7:13:29:a7:0f:
         b5:0c:5e:9c:df:91:5d:61:30:8e:92:64:2d:68:6e:1c:6c:bf:
         83:b0:c5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org