Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa
File:                     323830343a313731303a3a2f33322d3335203d3e20323633313230.roa (raw, json)
Hash identifier:          HE2cLsak/wJuMk3sU5CwlJHVu+K6ITZv2qYDGI8uY/M=
Subject key identifier:   FB:CE:34:88:50:2E:62:25:56:2C:BF:69:45:42:DF:C2:CD:05:97:C8
Certificate issuer:       /CN=934537D2006918539D4E641680E85DFE7A92F54E
Certificate serial:       4CB2484A3F6428FD64B5F7AD03C3452EDEFBB045
Authority key identifier: 93:45:37:D2:00:69:18:53:9D:4E:64:16:80:E8:5D:FE:7A:92:F5:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa
Signing time:             Wed 03 Apr 2024 18:32:42 +0000
ROA not before:           Wed 03 Apr 2024 18:27:42 +0000
ROA not after:            Wed 02 Apr 2025 18:32:42 +0000
asID:                     263120
IP address blocks:        2804:1710::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.crl
                          rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b2:48:4a:3f:64:28:fd:64:b5:f7:ad:03:c3:45:2e:de:fb:b0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934537D2006918539D4E641680E85DFE7A92F54E
        Validity
            Not Before: Apr  3 18:27:42 2024 GMT
            Not After : Apr  2 18:32:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:92:9e:82:fe:e1:3f:1a:07:65:62:2b:65:
                    0b:84:0f:26:01:cd:6a:8b:86:a4:0e:9e:24:19:68:
                    c7:2f:d1:fd:de:c2:b5:40:ae:d1:a8:ff:c0:2c:3b:
                    5d:89:3d:a5:c0:55:d1:62:6e:d5:8e:f1:d2:e6:41:
                    9b:24:8c:d2:cc:36:65:a3:2c:d0:45:f1:d4:56:d3:
                    48:3c:f1:3d:bc:2f:69:e5:3a:20:14:81:f8:3e:b4:
                    f2:1e:b4:0c:12:b2:d5:1c:a0:ea:1d:b7:d4:a7:b9:
                    6f:6b:cd:a9:ed:9c:2c:b5:a5:75:75:d8:3f:19:b6:
                    ca:86:99:fc:34:70:5d:b7:2c:4b:da:6c:4f:88:5d:
                    17:81:a1:ca:3a:54:0c:fa:c4:bd:cc:a2:ae:be:d4:
                    80:22:23:ee:3e:9f:39:88:fd:2e:fc:15:90:c3:a5:
                    90:07:2e:66:79:48:f0:92:a6:d2:13:ad:23:39:a2:
                    b0:70:dd:25:1e:50:8a:45:da:ab:69:78:e8:97:f8:
                    45:37:08:e0:c7:56:24:7c:f2:fa:c4:5f:c9:37:f9:
                    96:d9:f9:41:23:3d:1a:01:17:7c:a9:63:2b:f0:fd:
                    98:b4:21:84:b5:36:c4:0b:8a:ca:aa:a1:90:55:cb:
                    a9:d8:a2:3d:0e:c0:8b:7b:0f:20:e7:96:b6:82:80:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CE:34:88:50:2E:62:25:56:2C:BF:69:45:42:DF:C2:CD:05:97:C8
            X509v3 Authority Key Identifier:
                keyid:93:45:37:D2:00:69:18:53:9D:4E:64:16:80:E8:5D:FE:7A:92:F5:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1710::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:59:0c:e0:d8:4e:82:46:5f:93:bd:60:10:96:ed:29:ef:b2:
         ef:12:45:40:b2:d9:3d:59:b3:95:60:11:1b:5e:77:bd:a6:82:
         f7:e3:89:d8:c8:91:81:58:bb:55:86:58:b5:00:ef:f2:33:23:
         83:7e:c3:bf:5c:53:7d:69:d1:9f:a1:29:0a:b3:3b:17:35:4e:
         f3:75:f8:60:f7:04:fe:d2:07:ae:f2:7a:bd:65:ff:b5:b4:6e:
         86:4b:cd:04:2f:9c:67:6d:b9:cd:22:e7:89:e1:5c:3f:cf:c6:
         53:c8:b7:4c:75:0a:15:90:36:2d:90:fc:ed:05:34:32:06:ed:
         bf:83:06:26:c6:60:91:1b:2c:fd:c0:0e:5c:b5:c4:6e:5a:dd:
         c2:c3:a3:61:5f:0f:46:34:8a:82:5e:8e:d4:d7:fe:74:1c:69:
         65:72:be:67:be:c7:f4:fc:76:16:8e:5e:5f:a3:00:3e:62:fb:
         f1:57:4f:42:4d:43:bb:a8:a6:c8:15:39:a3:c9:88:56:95:f3:
         10:8b:ec:9f:b2:58:16:55:21:a9:14:8d:bf:6c:f7:48:a2:e5:
         48:68:b2:af:f7:d8:14:3c:2c:e6:62:f1:f8:7f:bf:6d:cd:f1:
         c8:73:61:5a:e5:6e:31:0a:04:b8:f5:89:a8:54:b1:7a:9d:0e:
         ef:74:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:17:02 2024 by rpki-client on console-ams.rpki-client.org