Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa
File:                     323830343a333164343a3a2f33322d3438203d3e203533313339.roa (raw, json)
Hash identifier:          nKgOGKvOIHWyMaY4C0mcmXmXEF68bswFvWya06cuf+g=
Subject key identifier:   A6:2E:52:61:9A:3D:D6:EE:91:06:00:B5:59:4A:12:F2:97:12:F6:8E
Certificate issuer:       /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
Certificate serial:       75AE9C8FB4CE9927BBA61084407959303E9B5D4B
Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa
Signing time:             Thu 04 Apr 2024 04:40:47 +0000
ROA not before:           Thu 04 Apr 2024 04:35:47 +0000
ROA not after:            Thu 03 Apr 2025 04:40:47 +0000
asID:                     53139
IP address blocks:        2804:31d4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl
                          rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ae:9c:8f:b4:ce:99:27:bb:a6:10:84:40:79:59:30:3e:9b:5d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
        Validity
            Not Before: Apr  4 04:35:47 2024 GMT
            Not After : Apr  3 04:40:47 2025 GMT
        Subject: CN=A62E52619A3DD6EE910600B5594A12F29712F68E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:80:2f:0a:5b:e3:e5:6c:89:e8:68:1b:c2:
                    ee:c4:00:e1:97:69:e3:d2:15:a0:1a:0d:90:4d:88:
                    61:47:7e:80:be:f6:06:df:57:2f:62:7f:7a:0e:ef:
                    8f:c7:ff:23:9f:50:28:85:ab:b1:3a:f8:3a:24:08:
                    32:b5:82:35:f6:81:31:46:1c:6f:82:2b:4d:62:19:
                    29:45:20:ec:d5:f2:09:cb:b2:8a:9c:37:45:20:11:
                    13:a9:3a:2e:1a:1d:7d:f6:f0:8c:f5:30:db:ce:00:
                    5b:dd:96:90:f1:31:da:2e:99:dd:e2:71:7a:10:6b:
                    f5:cb:5d:dc:77:f9:d8:60:4b:ec:4d:7f:9c:1d:53:
                    a8:d8:5f:b0:5c:35:f8:34:d7:03:d8:f0:29:1f:5f:
                    f5:f0:d9:f5:94:dd:cc:87:61:ca:79:5f:84:ab:2d:
                    60:64:df:8e:a5:b7:ab:32:39:3c:a2:6c:13:67:7e:
                    56:b6:78:28:8a:df:81:23:d1:40:fa:fc:67:15:53:
                    b9:77:2d:02:97:e8:0b:c0:cc:a8:7e:11:94:8c:f1:
                    23:7e:3a:3a:de:d6:b8:8f:86:20:51:a7:c0:2d:05:
                    3b:03:a7:ff:51:52:81:c9:80:4c:93:75:67:1e:78:
                    d9:0e:87:58:66:34:19:69:db:79:49:1b:49:40:b6:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2E:52:61:9A:3D:D6:EE:91:06:00:B5:59:4A:12:F2:97:12:F6:8E
            X509v3 Authority Key Identifier:
                keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:67:1e:e2:56:c8:00:1d:84:46:b1:31:47:19:e2:90:8c:46:
         6d:38:b1:f7:9f:14:7b:66:b6:0f:c6:20:f1:95:b0:16:10:80:
         32:ea:6e:8c:c2:d4:3c:96:f4:6e:59:09:8a:49:93:0e:86:c8:
         f9:35:d9:16:4d:07:be:13:62:b5:3e:76:ab:5b:95:d0:36:88:
         53:16:38:89:44:8e:90:ba:8f:cb:1f:b6:04:e1:ef:09:fd:63:
         d2:dc:8f:ba:05:85:bc:88:15:8d:94:c7:34:e7:ea:5f:63:b6:
         22:b8:24:31:ed:4f:6a:16:f3:2c:ed:40:57:f2:82:b6:f0:ba:
         1b:75:12:83:34:19:27:68:9e:63:0a:c1:cc:e2:71:2e:c2:a5:
         f3:4f:e5:94:86:1e:3b:5b:cd:23:43:d5:93:a4:e5:d3:15:52:
         66:41:44:d4:f4:a0:93:94:ff:06:6d:45:09:9d:a3:e2:02:c2:
         65:24:1e:e1:b7:16:71:c6:94:2d:9b:d8:b8:a5:f4:73:e3:6e:
         cc:ea:2e:33:49:10:08:33:bf:53:51:1a:7f:c4:40:dc:74:a0:
         5f:2d:dd:11:b1:fd:30:8a:d9:42:5a:06:d9:dc:ee:5a:f4:32:
         b4:a4:fb:0a:8b:6e:a8:1b:ba:62:59:fe:fb:ae:12:9d:3f:3e:
         32:11:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:03 2024 by rpki-client on console-fra.rpki-client.org