Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33362d3336203d3e20323732363134.roa
File:                     323830343a383630343a3a2f33362d3336203d3e20323732363134.roa (raw, json)
Hash identifier:          2UWs9RzdGtLslZVRwGiwVMkoOXMMvw+mbH6zJP5s8Xk=
Subject key identifier:   0D:4B:9E:85:15:AB:50:10:94:DE:15:C6:61:8B:FA:50:DF:C8:AE:EF
Certificate issuer:       /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial:       5DF536F008A5410DFBEA27ABCC9BB1B33FF78980
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33362d3336203d3e20323732363134.roa
Signing time:             Thu 04 Apr 2024 05:44:55 +0000
ROA not before:           Thu 04 Apr 2024 05:39:55 +0000
ROA not after:            Thu 03 Apr 2025 05:44:55 +0000
asID:                     272614
IP address blocks:        2804:8604::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
                          rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f5:36:f0:08:a5:41:0d:fb:ea:27:ab:cc:9b:b1:b3:3f:f7:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
        Validity
            Not Before: Apr  4 05:39:55 2024 GMT
            Not After : Apr  3 05:44:55 2025 GMT
        Subject: CN=0D4B9E8515AB501094DE15C6618BFA50DFC8AEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:20:66:b4:8a:88:9e:c0:4a:86:d8:b9:a3:
                    da:50:e4:69:87:f0:83:41:24:71:78:fd:84:bb:e8:
                    fb:dd:31:8b:d7:b0:c1:01:b8:db:22:fb:73:9d:51:
                    1e:17:c0:9e:95:dd:3a:0d:58:b0:9d:e1:7a:1a:e2:
                    27:f2:5f:5f:39:5d:e5:9c:92:b8:61:3b:1f:e5:d6:
                    14:22:a6:34:69:b8:e4:b3:ad:8e:62:5c:b4:58:b5:
                    53:65:4e:f6:81:e9:ae:39:e0:d0:9e:65:99:ba:4d:
                    58:35:8a:e5:67:13:21:82:9c:69:b7:72:f5:39:62:
                    6b:dc:64:46:70:c8:d7:41:02:af:cd:84:a0:65:49:
                    93:a1:bc:c8:5a:93:2d:38:b5:94:cc:b6:1f:70:9f:
                    0d:33:29:ca:2a:69:b2:1a:7f:f6:27:5b:59:7e:a9:
                    47:eb:6b:40:62:c7:5c:b5:f5:4d:89:9b:81:1c:73:
                    8e:bb:ca:34:f2:73:12:83:3a:f3:32:05:38:18:04:
                    b2:a9:1c:ab:e3:a8:7e:f3:c6:2d:65:ad:97:65:e4:
                    e1:83:df:fa:82:e7:94:dd:b0:ab:4b:da:07:99:a4:
                    ca:7d:ac:25:df:e9:ed:d1:35:a6:cf:51:d9:d0:b3:
                    36:4e:5c:6a:be:89:ad:df:58:d2:59:eb:cb:b2:44:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4B:9E:85:15:AB:50:10:94:DE:15:C6:61:8B:FA:50:DF:C8:AE:EF
            X509v3 Authority Key Identifier:
                keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33362d3336203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:42:34:23:8d:38:dc:1e:d6:bc:89:6c:39:8f:ee:8e:57:e9:
         91:54:de:48:16:7a:bb:3b:f6:b1:30:07:dd:64:fc:ea:f5:51:
         a0:ac:7b:72:fd:83:d2:99:3f:2c:74:00:33:7b:a1:5f:e4:f1:
         db:78:9f:ef:d2:b2:97:59:a7:14:14:ff:00:66:94:8b:21:ee:
         8e:b7:2f:2f:d1:84:88:3a:8f:14:13:bf:eb:da:1c:18:4e:51:
         fa:c1:92:69:9c:ea:9d:a7:4c:5f:22:55:d6:1b:0b:1c:1c:78:
         29:6f:05:3a:de:c6:af:4d:76:fa:22:1c:54:09:7b:cd:74:34:
         7e:de:91:d6:8c:7b:d9:ff:54:f2:8d:79:08:25:08:bf:c8:97:
         e1:1c:af:8f:51:3e:28:81:c7:fe:93:8e:8a:22:f3:36:00:90:
         52:99:f9:14:dd:d7:e8:16:5a:1b:76:1a:64:8d:f9:ca:7b:72:
         9f:80:90:ec:fb:fb:10:ad:a7:46:e8:04:c9:b8:ff:5a:c1:f3:
         5f:43:e0:16:ea:59:dc:6a:51:99:12:08:e5:37:f0:cf:0a:61:
         5f:8b:43:a8:0a:1b:06:a3:b4:3c:0c:29:7b:75:0f:38:67:07:
         73:7d:f4:01:93:90:42:86:f1:16:b6:3d:94:b7:25:a6:70:fb:
         ba:36:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org