Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa
File:                     323830343a343366343a3a2f33322d3438203d3e20323637363031.roa (raw, json)
Hash identifier:          HYRZanp7tFctRzI3XD8SxtyuP6DDXbrVZM37x2FOTFA=
Subject key identifier:   9A:C3:27:0B:7D:29:33:71:03:97:67:D8:C0:7C:CF:1A:73:87:66:22
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       64E7363664321739593D72BB0AB56FE62D63A3B4
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa
Signing time:             Fri 16 Aug 2024 00:37:48 +0000
ROA not before:           Fri 16 Aug 2024 00:32:48 +0000
ROA not after:            Fri 15 Aug 2025 00:37:48 +0000
asID:                     267601
IP address blocks:        2804:43f4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e7:36:36:64:32:17:39:59:3d:72:bb:0a:b5:6f:e6:2d:63:a3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Aug 16 00:32:48 2024 GMT
            Not After : Aug 15 00:37:48 2025 GMT
        Subject: CN=9AC3270B7D293371039767D8C07CCF1A73876622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:28:a8:5d:42:88:31:31:32:0d:b9:cd:68:
                    6b:8c:68:ac:2c:10:1f:67:41:0d:09:77:3d:85:ea:
                    86:77:47:62:82:65:6b:e7:ed:19:71:80:40:c6:ed:
                    10:1b:6b:57:41:bb:33:88:af:69:b7:7f:47:a1:bb:
                    61:0e:1a:2f:48:5e:29:74:57:f8:22:ca:ad:55:37:
                    7a:d3:61:44:c3:77:78:e1:bc:5e:a9:88:33:e3:0c:
                    41:2b:21:2d:09:c8:f9:a9:8e:d4:7a:8d:55:81:a7:
                    5e:ee:b4:b4:2d:7a:23:3c:86:83:79:b5:ca:08:28:
                    34:2f:db:a3:d3:ce:b2:46:cd:63:af:03:af:15:96:
                    4c:74:fc:d6:48:e1:ed:28:8e:2b:65:9f:32:e5:06:
                    a9:80:f9:3b:80:b6:3d:cb:fb:5d:b3:50:25:89:a2:
                    51:f5:a6:95:e6:81:4d:87:e6:96:5a:6d:ed:88:77:
                    7e:a7:1a:e8:ad:bd:7a:e0:5a:0b:cc:65:ce:86:ce:
                    16:15:63:31:57:79:6a:48:6c:ed:9a:cc:c5:b7:c5:
                    c2:7d:83:0e:74:87:78:7a:b3:d0:72:e4:ad:00:bc:
                    eb:7e:0b:a2:ce:4c:05:34:46:c6:73:3b:b4:cd:86:
                    2a:4d:e6:56:1f:f5:cb:94:90:2a:1c:df:3f:f0:b1:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:27:0B:7D:29:33:71:03:97:67:D8:C0:7C:CF:1A:73:87:66:22
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:ff:d1:e8:ae:15:8a:75:f5:ad:aa:f1:38:2d:76:36:43:f2:
         4c:4a:2d:23:95:b2:01:f7:20:eb:8d:62:4b:9c:3b:4d:c9:05:
         58:04:0a:7e:fb:55:48:63:50:e3:f3:ab:4c:5b:a9:03:a1:52:
         12:c7:63:c0:a1:12:3d:c8:b0:d7:de:a5:8f:0a:6f:b0:81:f8:
         52:7b:7b:cf:5f:00:cd:9a:0f:1a:81:e1:16:3e:32:76:5d:6c:
         ad:74:5e:ed:43:92:b0:3e:03:d9:71:8d:6b:6d:1a:9c:4c:5c:
         d2:c1:05:06:31:64:03:5a:b4:6d:84:73:19:98:a5:ed:ad:4c:
         6c:85:67:96:ea:33:10:a4:48:34:f9:95:8a:39:a9:f0:b2:00:
         32:42:16:25:47:45:0a:6f:6f:48:58:05:40:e8:4b:88:5e:89:
         63:43:12:b3:b1:8c:2d:b4:9d:e9:60:ab:29:a6:75:d4:55:33:
         b9:23:94:a4:c6:f1:64:25:e4:d5:4a:6e:27:13:50:58:bb:f4:
         15:5e:89:ab:73:a0:72:84:39:e1:ec:96:f1:4a:2f:15:d7:0b:
         f6:9d:6b:91:b4:9e:1e:70:4e:ec:dc:ba:a6:14:f6:ed:70:aa:
         03:86:3b:eb:e9:17:b7:e1:1b:39:5c:9e:39:35:5d:4e:c9:a2:
         3d:37:9c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org