Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa
File:                     323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa (raw, json)
Hash identifier:          LUBQFE1KBZWBDzbnsj8DMee7ogU4xDb2FUHOZ8N4bUQ=
Subject key identifier:   90:F3:23:F3:40:A7:C1:60:BC:1E:F8:95:35:C5:7C:02:B8:3D:A7:BE
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       15C49E4179A7B940A47DE8AEE1164C0B30862728
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 16:21:12 +0000
ROA not before:           Wed 08 May 2024 16:16:12 +0000
ROA not after:            Wed 07 May 2025 16:21:12 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c4:9e:41:79:a7:b9:40:a4:7d:e8:ae:e1:16:4c:0b:30:86:27:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 16:16:12 2024 GMT
            Not After : May  7 16:21:12 2025 GMT
        Subject: CN=90F323F340A7C160BC1EF89535C57C02B83DA7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:74:68:e3:98:d0:e3:30:a6:1d:1f:f6:b3:
                    4b:6d:f2:73:6b:2f:b5:2c:b6:ab:50:39:b5:e8:c2:
                    d9:e0:38:91:b2:8e:34:ed:ce:70:9b:d0:f7:3c:3f:
                    4f:28:ac:f0:32:ba:bb:e4:a1:07:90:e1:27:84:3f:
                    c9:85:54:ce:00:c2:81:6b:7a:1c:ac:6f:3f:35:04:
                    63:97:f7:f5:e9:b0:6e:0e:cc:5a:5e:06:81:23:58:
                    3a:d8:af:f9:36:1f:85:86:92:67:84:7f:8f:75:47:
                    6e:d9:7d:e7:a8:03:e9:59:08:f6:d5:39:3c:7c:d6:
                    26:c6:af:bf:87:1a:49:43:91:92:7c:73:a8:23:7f:
                    d8:4c:27:98:e3:92:07:d9:dd:f3:b0:76:54:0a:a7:
                    43:a7:6d:0b:3b:d8:07:80:47:dc:c8:a9:46:54:85:
                    e2:8b:85:67:dd:b4:c1:0c:cd:10:6b:ca:eb:58:6d:
                    4e:69:c1:33:41:81:2b:1f:84:03:a5:45:14:bb:7d:
                    04:ab:c8:41:ab:59:af:93:2e:0c:e0:10:4c:d0:97:
                    05:a3:bb:c6:a5:e5:c8:41:47:3e:40:2a:70:38:f7:
                    8e:aa:12:be:b5:7b:71:c3:14:bd:60:7e:de:d9:7e:
                    cf:82:80:e2:0f:fe:e8:84:18:44:79:d0:f1:93:1b:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F3:23:F3:40:A7:C1:60:BC:1E:F8:95:35:C5:7C:02:B8:3D:A7:BE
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9600::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:82:8d:76:e2:ea:05:5c:82:b7:b0:a5:c7:2c:6e:98:22:
         20:e9:a9:4c:1b:27:1f:70:37:df:3a:6d:3b:25:6e:a8:01:66:
         78:a0:5c:3a:c9:2b:63:71:9a:df:a3:db:2e:02:ce:0a:63:22:
         3a:96:d5:7b:63:52:9f:1a:d7:1e:d1:0e:1d:86:cc:89:aa:52:
         22:66:4c:a8:10:fe:c7:c3:d6:03:d4:1e:d8:1b:2f:28:5a:e6:
         a0:70:05:2f:e3:75:a7:82:29:d5:b7:c7:4a:e4:fc:41:95:f4:
         68:4d:c1:5f:ed:2c:5a:4d:96:4e:cb:ae:72:32:62:c3:54:da:
         b7:91:25:51:6c:64:93:92:15:a3:3c:bd:42:5c:64:82:54:cd:
         6b:83:2e:98:07:9e:a2:4b:8f:4f:ca:84:7c:95:20:1b:07:d2:
         44:9d:c6:48:1b:22:ca:04:6d:65:7e:43:53:01:c5:30:d7:b0:
         43:d3:cd:ac:47:ef:6d:de:7b:f6:1b:dd:de:fa:d3:eb:65:74:
         29:ad:ed:03:4b:0f:9c:2c:6b:4d:87:05:26:cf:15:d0:9b:be:
         f7:d9:92:a7:c3:e9:b6:8d:02:4b:6e:e2:74:61:3a:b2:94:fc:
         c0:f8:8a:a9:e7:7e:a6:c0:23:95:7c:36:f7:87:12:bc:d5:ed:
         cb:d9:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org