Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393430303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a393430303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          5O7H2OyFw/0i1YcPcZ5UyNwgj5Ys4e6WpVPMPy6gAsQ=
Subject key identifier:   83:72:6B:C3:73:B9:64:45:74:A6:4E:21:6D:61:E0:4D:1A:C6:CA:80
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       1C86B2C504328C7B1CCFB39BFBAE4C2D652328F2
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393430303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Thu 18 Apr 2024 18:04:00 +0000
ROA not before:           Thu 18 Apr 2024 17:59:00 +0000
ROA not after:            Thu 17 Apr 2025 18:04:00 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:86:b2:c5:04:32:8c:7b:1c:cf:b3:9b:fb:ae:4c:2d:65:23:28:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:59:00 2024 GMT
            Not After : Apr 17 18:04:00 2025 GMT
        Subject: CN=83726BC373B9644574A64E216D61E04D1AC6CA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:88:c2:f1:41:c5:c2:84:f6:c6:03:46:f6:
                    9d:12:a8:fe:80:7b:2a:f3:54:84:1e:a3:0c:78:dd:
                    81:9f:ad:dc:87:9f:e0:e5:32:34:6e:33:50:06:02:
                    01:16:d3:89:4c:20:7d:79:9c:49:36:dc:22:3b:ad:
                    ed:6d:84:5b:2e:c7:e9:e3:f8:6b:29:ac:7e:a1:2b:
                    ad:4c:d2:8b:f0:a1:be:cd:ea:50:e0:bd:27:67:36:
                    8f:91:3e:1c:e9:6c:b6:2b:bc:ed:d9:b9:e9:26:80:
                    48:79:71:08:05:fb:e1:80:cf:93:d3:95:85:3f:cb:
                    59:47:a5:fd:14:99:14:d0:f6:64:60:c5:d9:f0:49:
                    66:8e:1f:19:71:8d:da:62:49:06:fa:31:22:b2:c7:
                    86:e4:2d:30:8f:0a:b3:d7:42:75:69:35:d8:65:26:
                    76:24:ac:f8:56:c4:a6:61:8c:bb:c3:f7:bf:54:95:
                    bc:e4:94:d4:b8:9e:fb:1a:86:be:ef:10:ec:a8:cc:
                    ae:96:61:60:f2:74:3d:8f:b6:09:32:90:2d:33:28:
                    d0:3f:3c:2f:ad:ce:47:ea:c7:ba:6e:dd:88:5e:79:
                    48:59:a0:ec:81:45:e4:aa:a0:ff:50:1b:34:9c:64:
                    01:41:08:53:3b:5d:2f:50:04:c1:52:72:b1:c4:a2:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:72:6B:C3:73:B9:64:45:74:A6:4E:21:6D:61:E0:4D:1A:C6:CA:80
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393430303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9400::/38

    Signature Algorithm: sha256WithRSAEncryption
         97:de:1b:e1:4e:1d:13:44:00:f0:37:9f:e8:56:4b:e5:15:cc:
         f1:72:5b:8d:66:5d:3f:75:d3:00:06:5d:29:f9:8b:49:e9:0c:
         cc:99:42:fc:ac:24:8a:7c:95:72:94:b7:ed:df:b2:84:25:0c:
         5d:2c:84:aa:8d:9c:14:53:a1:06:4b:f2:a7:01:ef:d0:17:11:
         95:bd:c0:8a:58:d0:b0:2d:d2:e4:0c:4f:da:3d:ca:e2:c3:d1:
         60:28:55:95:6f:dc:14:10:2b:fa:05:eb:a5:40:ea:5e:55:45:
         4c:d8:e9:e1:9e:96:9f:61:1d:b1:be:67:14:78:fb:64:e6:ab:
         cc:42:82:83:24:0a:1d:30:33:ef:ac:bd:61:02:63:14:88:2a:
         7c:3f:e7:f8:fd:c8:a5:e6:2a:c8:89:03:73:61:87:49:4e:b7:
         b5:1a:18:4f:af:42:fc:6e:b1:3f:bd:95:62:f3:5f:62:62:17:
         e5:56:c3:0a:c0:78:f7:5d:54:02:fe:89:cb:d8:59:ca:63:a6:
         95:cf:0a:68:e5:12:45:dc:06:fc:5b:27:a1:69:54:fc:04:c9:
         ae:40:c7:98:e7:19:ad:b4:44:4d:d9:fe:e7:bb:93:11:f0:5f:
         54:cd:04:26:38:c3:e1:42:22:dd:d3:52:00:0f:91:e6:11:bf:
         86:62:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org