Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          Icv8Y3NEKmPuYZbG525IVwffHqgpyrgjUl30vSDRckA=
Subject key identifier:   FA:79:1C:C4:1B:C4:FB:C1:78:A4:7D:B0:1E:73:0E:CC:98:14:B6:82
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       0C40C19091C414F187B7B234B47E2AE4D1F95522
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:22 +0000
ROA not before:           Wed 03 Apr 2024 19:43:22 +0000
ROA not after:            Wed 02 Apr 2025 19:48:22 +0000
asID:                     262617
IP address blocks:        2804:90c:103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:40:c1:90:91:c4:14:f1:87:b7:b2:34:b4:7e:2a:e4:d1:f9:55:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:22 2024 GMT
            Not After : Apr  2 19:48:22 2025 GMT
        Subject: CN=FA791CC41BC4FBC178A47DB01E730ECC9814B682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:f1:0a:ab:3f:0b:d5:f7:40:a7:5d:3b:90:
                    8e:44:70:95:89:3a:a1:60:10:3a:5d:49:57:cb:ae:
                    72:5b:0a:a6:28:ea:ea:21:be:85:94:a1:17:fa:85:
                    5e:ea:cd:d6:9f:77:25:43:1c:78:27:44:e2:3d:75:
                    1f:41:f9:c6:63:6b:08:12:bd:87:9f:14:82:29:a2:
                    86:67:a0:2e:53:05:59:30:d6:f9:19:fa:1b:a1:0d:
                    79:36:8f:4f:da:0c:e8:ff:8b:9e:85:b0:be:68:a2:
                    a6:b8:f9:ed:de:f3:4e:d8:ab:bd:40:f4:79:e2:a4:
                    a3:95:47:65:02:1c:e4:23:f2:bc:f9:c8:56:19:d7:
                    c2:c4:94:c3:51:59:9b:bd:17:3e:b9:f3:84:f2:92:
                    b5:1a:a7:28:f8:ff:b7:f4:91:11:33:06:6e:b1:0a:
                    a2:7d:0b:01:b3:95:bf:fe:70:65:25:83:f8:b4:f7:
                    a3:17:5f:8e:6a:26:47:7a:94:12:9a:ca:57:ce:0d:
                    19:84:95:38:c9:5b:21:7f:d9:cb:ed:f6:ff:4d:a7:
                    1f:12:9e:8d:b7:56:48:83:01:1e:af:29:6c:ad:90:
                    03:d5:ba:42:2f:44:f4:fd:b0:6f:36:97:0b:0e:77:
                    8e:22:e6:c3:8d:68:43:e7:f7:f8:34:0b:13:3c:86:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:79:1C:C4:1B:C4:FB:C1:78:A4:7D:B0:1E:73:0E:CC:98:14:B6:82
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130333a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:1e:56:e3:e1:db:dc:67:1b:3f:fe:ae:31:c2:81:83:1d:3b:
         b9:2c:d2:68:b3:70:d7:47:7c:4b:40:1e:f6:c6:e4:ab:f7:3c:
         98:87:ee:02:f1:ac:a4:a6:80:be:04:9c:65:88:7b:16:47:55:
         c8:15:22:82:fd:a9:36:a2:bb:5a:e2:44:4e:01:aa:8e:a9:33:
         0a:a4:a2:be:dc:27:b1:be:b8:53:f0:d1:29:8b:d0:c5:50:b6:
         26:a6:9c:58:65:cf:32:9f:57:3b:67:e5:ee:7e:8a:09:8f:69:
         14:3e:ef:eb:66:3f:75:5b:55:9a:32:2a:e9:c2:bc:78:f3:05:
         2b:16:c7:b5:3f:93:38:a4:2d:72:91:5a:80:a6:37:21:71:ee:
         83:ff:a6:09:8a:c4:f3:87:84:54:f6:41:ec:c4:53:c1:6b:d4:
         f0:27:92:73:7f:f2:61:e9:03:ad:c2:59:4d:bd:85:ee:65:6c:
         35:9c:31:a5:72:9f:41:81:10:f7:30:b8:e1:01:57:5a:bc:c6:
         51:51:43:6b:49:dd:f8:ca:ed:5c:c1:15:4c:24:d2:1e:bc:38:
         78:d5:8b:12:8e:ab:77:3f:b6:63:75:0e:97:3a:48:45:c3:14:
         fa:46:01:28:09:93:6b:f9:84:de:54:39:b9:1d:a2:5c:7f:ab:
         b3:7e:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org