Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a396330303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a396330303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          NcS9kyczNu1PZmfeDgFTOC5hRyodw30OfXr1zno34Gk=
Subject key identifier:   DA:41:71:BC:B9:06:B7:FA:16:69:B4:99:06:57:AB:A2:85:29:65:E1
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       4EF25E1F2817A19E2CBDB23D3E1DEED2EB955356
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a396330303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Thu 18 Apr 2024 18:04:15 +0000
ROA not before:           Thu 18 Apr 2024 17:59:15 +0000
ROA not after:            Thu 17 Apr 2025 18:04:15 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9c00::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f2:5e:1f:28:17:a1:9e:2c:bd:b2:3d:3e:1d:ee:d2:eb:95:53:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:59:15 2024 GMT
            Not After : Apr 17 18:04:15 2025 GMT
        Subject: CN=DA4171BCB906B7FA1669B4990657ABA2852965E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:97:5c:62:9d:f4:8d:d5:fb:10:ce:62:fd:
                    d0:41:47:3b:9d:88:34:d7:0c:8b:a9:18:a8:41:dd:
                    87:33:35:41:ff:00:17:47:a7:87:42:95:a1:f9:8f:
                    1a:ff:31:48:ee:18:d6:b8:5f:16:1e:05:7c:c5:2a:
                    f1:c2:6a:94:c2:c2:66:5b:b8:ff:cb:a4:c1:bd:0d:
                    0a:bf:cb:80:33:94:1b:0d:e0:6f:fb:05:73:7a:c1:
                    9b:04:ec:4b:8c:34:1c:fc:fb:e0:dd:d6:d5:7b:e1:
                    6e:44:38:2e:a8:b5:0e:70:5d:f7:05:79:4e:02:e4:
                    4f:ce:4d:56:6a:00:48:1a:12:3d:d1:84:39:50:3c:
                    ee:d9:1f:75:6a:c3:69:d7:63:7d:cf:3b:07:30:27:
                    63:c2:d5:f6:f0:fb:23:fe:d2:61:ac:b2:2d:da:b2:
                    8e:74:8b:74:3e:01:73:3b:68:9b:cc:b5:94:3c:f5:
                    31:cc:fb:ab:03:26:d4:1a:72:f7:af:d5:2c:d6:4c:
                    8b:f1:78:62:a5:58:bf:b8:d1:f2:7b:02:82:a0:8a:
                    bc:e3:d7:79:2d:01:d2:22:71:7a:d2:47:b0:a8:bc:
                    0a:2f:79:c9:86:fa:dd:82:a0:43:7a:a8:a4:ba:60:
                    7f:09:18:9b:2c:32:93:55:eb:44:83:9f:1f:ec:d8:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:71:BC:B9:06:B7:FA:16:69:B4:99:06:57:AB:A2:85:29:65:E1
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a396330303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         34:93:8f:3d:1f:fc:06:49:8f:fe:e6:3c:ab:85:6d:d2:c8:7f:
         33:8e:a4:b6:a6:ac:2e:f1:bb:74:86:fe:c7:23:ea:a4:57:50:
         eb:77:4c:27:8f:3c:3c:21:e7:1f:7c:5f:a6:7e:c1:97:b5:6d:
         02:3b:44:26:cc:c3:23:b5:ef:c5:40:51:89:06:d4:2e:64:ac:
         49:20:5e:a9:6f:4d:9f:49:ba:1a:8a:24:3d:d2:ab:48:5f:f5:
         8f:c0:54:5c:5a:9d:95:4d:6c:69:45:e0:38:91:cf:b5:0b:f3:
         38:14:52:49:54:68:7f:87:2a:1f:39:d9:75:56:80:cc:7a:49:
         f1:37:3c:84:be:da:4f:32:05:ba:b5:45:78:12:85:57:69:c5:
         41:01:7c:db:90:23:16:87:70:06:9e:af:c1:1e:d5:77:46:6f:
         13:fb:9d:8d:40:ad:19:95:ee:b7:64:05:f3:d6:d5:3d:ca:46:
         f8:7b:69:17:e9:ef:e8:9d:80:25:f8:22:ea:84:a4:eb:de:5e:
         e9:18:ab:ab:8b:23:dc:72:04:34:9a:6c:a7:a8:39:82:7d:3f:
         3c:f5:44:d7:d5:59:1a:a7:39:db:69:8d:86:78:30:19:d3:77:
         7a:89:e8:4b:ae:56:c9:0f:f3:e4:74:b0:77:f1:9a:a2:67:93:
         fd:ca:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org