Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a3a2f33322d313238203d3e20323638393931.roa
File:                     323830343a356463343a3a2f33322d313238203d3e20323638393931.roa (raw, json)
Hash identifier:          tE9sT2wed/OtpP9wBCfZueMINp7v1LLiHVnvxxRb2zo=
Subject key identifier:   57:C8:36:29:37:19:0E:0A:AF:A4:88:80:39:BA:04:73:37:1F:CC:59
Certificate issuer:       /CN=813D65FBA309A9EA091B5CF0F748FC498935778B
Certificate serial:       017056F5B1D1C7F2FE9E222D9273E5C032CC9137
Authority key identifier: 81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a3a2f33322d313238203d3e20323638393931.roa
Signing time:             Tue 07 May 2024 12:53:45 +0000
ROA not before:           Tue 07 May 2024 12:48:45 +0000
ROA not after:            Tue 06 May 2025 12:53:45 +0000
asID:                     268991
IP address blocks:        2804:5dc4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl
                          rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:70:56:f5:b1:d1:c7:f2:fe:9e:22:2d:92:73:e5:c0:32:cc:91:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813D65FBA309A9EA091B5CF0F748FC498935778B
        Validity
            Not Before: May  7 12:48:45 2024 GMT
            Not After : May  6 12:53:45 2025 GMT
        Subject: CN=57C8362937190E0AAFA4888039BA0473371FCC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:09:3b:4c:a7:a8:8e:c6:05:de:36:3e:52:
                    78:09:28:37:a4:4d:9c:d1:f5:57:5b:6c:03:f5:4a:
                    6d:09:6b:90:26:cb:1b:a3:6b:d2:2a:f6:d3:29:f8:
                    80:6c:18:9c:74:2a:2e:31:84:c1:7c:85:a6:20:e2:
                    ef:9b:87:14:dc:37:67:e1:4e:46:e9:67:2c:6e:33:
                    bd:56:6e:d8:db:a0:7d:21:2b:97:26:23:da:8b:2b:
                    f1:e1:48:1b:d8:80:3d:05:74:36:d5:87:3f:25:19:
                    69:f7:06:06:0e:b5:bd:df:ad:a6:83:90:a0:bf:73:
                    16:8e:a9:0e:d6:d2:58:b8:1e:81:33:55:af:3a:64:
                    3a:45:89:60:23:f9:09:f9:a5:db:e1:92:d6:44:bb:
                    6f:f1:c8:23:26:fd:14:ba:b9:14:86:1c:e1:dc:d4:
                    45:c6:62:fe:5a:2e:a3:56:b6:57:77:3d:0f:2d:1e:
                    a5:2e:92:49:97:19:ce:96:87:b0:86:cf:27:39:88:
                    31:ad:fb:51:b5:80:1f:94:f5:f8:39:81:f9:6f:5d:
                    17:bf:db:5d:44:44:83:8a:b2:e7:c9:cf:a4:5e:4a:
                    d7:72:90:77:80:d0:33:22:e4:9d:2e:45:02:98:9b:
                    1c:0a:2a:ab:50:7c:20:83:1c:7b:91:bd:d5:7a:5c:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C8:36:29:37:19:0E:0A:AF:A4:88:80:39:BA:04:73:37:1F:CC:59
            X509v3 Authority Key Identifier:
                keyid:81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a3a2f33322d313238203d3e20323638393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:51:7f:dd:73:ee:a4:70:cc:2f:eb:13:13:c1:2a:b6:d5:56:
         c6:e0:b6:c1:f7:36:04:c3:01:d3:57:97:93:77:03:8b:4e:42:
         1c:51:cf:25:c1:be:ef:ec:6a:2d:6e:4d:49:74:c1:bb:50:8a:
         a8:21:b1:15:91:dc:c5:e5:00:bc:67:f7:46:aa:25:d5:e0:93:
         31:73:93:d5:69:09:8a:13:94:e0:b7:4d:c1:c3:83:77:f8:71:
         1d:c7:73:91:77:dc:e0:79:10:38:ad:72:f3:bc:50:7e:b5:4c:
         6c:27:01:e0:62:09:7d:a0:bd:43:70:e8:56:b4:ab:42:97:ad:
         fd:55:00:c2:88:38:27:d0:d1:0a:d9:f5:60:21:20:5d:af:8e:
         e5:99:a5:e4:63:d8:7b:e5:6d:f4:97:a4:d3:db:0a:9c:12:2a:
         ee:6c:af:6f:fe:6a:05:67:00:9b:23:d8:95:09:3f:f5:31:0a:
         61:39:2b:e6:bb:22:e3:4c:75:73:93:b1:7b:6f:08:93:63:d7:
         01:ec:05:6b:a5:83:d8:c7:b9:ff:a6:9c:41:c6:a6:b7:43:72:
         5b:33:9a:46:75:a1:07:79:f8:16:de:2f:b7:35:a1:89:ac:c3:
         06:f9:6c:8d:c9:5b:ab:99:b7:0d:ea:cc:94:37:3a:58:a4:e5:
         a4:ce:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:27 2025 by rpki-client