Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33332d3333203d3e20323638383739.roa
File:                     323830343a356266343a3a2f33332d3333203d3e20323638383739.roa (raw, json)
Hash identifier:          71Yq68FQzbkNN1jU2qjkOOgvmZ/h4rFxpOjg5pian9w=
Subject key identifier:   F0:94:4A:FE:B9:C2:C3:60:64:4A:3F:83:96:D5:2E:29:25:9B:AD:91
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       119F58AE6E05F2CF8F0D0499BC140C1087B4BFB1
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33332d3333203d3e20323638383739.roa
Signing time:             Thu 04 Apr 2024 06:10:42 +0000
ROA not before:           Thu 04 Apr 2024 06:05:42 +0000
ROA not after:            Thu 03 Apr 2025 06:10:42 +0000
asID:                     268879
IP address blocks:        2804:5bf4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9f:58:ae:6e:05:f2:cf:8f:0d:04:99:bc:14:0c:10:87:b4:bf:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Apr  4 06:05:42 2024 GMT
            Not After : Apr  3 06:10:42 2025 GMT
        Subject: CN=F0944AFEB9C2C360644A3F8396D52E29259BAD91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:20:1b:ef:b5:ed:ae:6c:64:63:98:d1:de:
                    32:bc:cc:2f:4f:04:0e:e4:bc:70:4e:0f:33:6d:48:
                    2b:dc:ec:c1:52:04:b7:9e:ad:1f:6f:73:5a:53:d6:
                    9a:65:79:bd:fb:d9:ef:3d:56:4c:62:8a:ce:e5:3c:
                    5e:7b:07:dc:7d:eb:b3:60:b8:d7:76:39:93:92:0f:
                    b3:ee:f6:7f:02:f7:73:ad:02:6a:ce:29:20:00:8d:
                    7a:af:b3:42:ae:5b:d9:9b:93:c6:e6:2d:de:45:36:
                    7d:14:06:6d:11:bc:bd:b0:be:61:d1:b3:38:20:ab:
                    eb:7d:9f:76:82:ca:08:25:65:07:ba:5e:35:24:9c:
                    4f:77:17:fb:42:d1:db:8c:7b:1a:cc:9f:7c:e0:f2:
                    ae:ab:a9:6a:ab:92:bd:ab:7d:9f:8d:94:e2:b6:fa:
                    38:f2:48:e3:73:d6:fe:0d:00:df:2e:14:7f:b9:8c:
                    28:d5:0d:af:95:b1:d5:6f:62:52:87:b9:5b:f3:4b:
                    c2:b4:e2:db:3e:f7:2a:a1:0d:b8:5b:18:e2:1a:fd:
                    d2:0e:82:eb:b3:ae:9a:8c:86:e9:4b:a3:9a:a9:30:
                    a9:e9:9d:3a:f0:5b:ea:3c:18:d0:5c:cb:1d:1d:8b:
                    d2:02:09:05:4c:99:82:29:f5:50:ec:1d:9c:be:93:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:94:4A:FE:B9:C2:C3:60:64:4A:3F:83:96:D5:2E:29:25:9B:AD:91
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33332d3333203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:65:c6:85:88:e9:d7:f5:8e:a3:47:fd:1f:7e:b7:c4:ae:b5:
         58:18:8c:b6:2a:91:b8:18:f7:6e:be:7a:95:b5:77:75:57:7e:
         9a:87:a3:e7:83:f5:0a:66:2d:f9:0b:09:b4:c0:09:3a:03:08:
         c8:c2:55:5c:cd:8b:0a:a0:28:fb:f1:ab:be:46:7c:02:b0:19:
         80:56:54:ac:07:65:b4:fa:2b:1f:fb:4a:0d:89:2c:69:f2:d5:
         e2:9e:cd:22:64:b8:c8:c5:4e:40:34:2d:fe:90:b7:f6:cc:d2:
         99:1e:e2:f5:12:19:14:d3:3f:c1:25:78:87:f1:1f:05:b3:22:
         00:8a:03:94:af:24:bc:4f:40:62:88:f2:af:80:2e:96:28:f6:
         37:10:ff:22:1d:66:1e:ca:65:5c:8c:61:b4:ca:0d:c5:21:75:
         48:3b:a9:c5:aa:97:02:82:46:58:58:65:f7:f9:b5:f6:15:44:
         f3:6d:1c:4a:f6:27:5e:a7:c7:23:45:c2:0f:b6:95:28:63:2d:
         16:07:46:0a:1f:10:c0:03:65:e3:9c:22:62:f3:92:d2:e5:05:
         18:0c:77:27:6d:87:7b:04:77:d2:ac:f0:d1:71:eb:e5:39:4b:
         1e:a3:45:6a:ab:c7:1c:e8:ca:a5:07:f8:1e:6e:15:81:eb:af:
         9f:84:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org