Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a323030303a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a323030303a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          S0E1CCBGO6aNE31ILdTP2kNwPp2wMoJVKEIpUCghjGc=
Subject key identifier:   94:4C:1E:AD:05:F5:64:19:08:CC:63:AB:58:F3:93:9B:84:ED:51:D7
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       3BBB7859DD6E0696F716EF78A86A3DDB59C3745D
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a323030303a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:27 +0000
ROA not before:           Wed 03 Apr 2024 19:43:27 +0000
ROA not after:            Wed 02 Apr 2025 19:48:27 +0000
asID:                     262617
IP address blocks:        2804:90c:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bb:78:59:dd:6e:06:96:f7:16:ef:78:a8:6a:3d:db:59:c3:74:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:27 2024 GMT
            Not After : Apr  2 19:48:27 2025 GMT
        Subject: CN=944C1EAD05F5641908CC63AB58F3939B84ED51D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:15:c7:24:cb:66:0d:4f:53:89:bd:2d:38:bf:
                    70:53:b1:d3:a4:c5:b6:50:59:fe:bf:56:ff:7b:ea:
                    d0:9b:88:61:6a:8a:8e:e6:ad:81:2a:88:0a:df:1c:
                    1e:0b:7a:09:88:2d:58:09:e1:ce:f7:cf:61:59:21:
                    ce:14:a9:59:46:92:0e:a5:e6:99:8a:0c:7e:b5:bd:
                    69:fa:b6:48:47:f7:a9:a9:74:b4:bc:a2:e1:92:77:
                    e3:07:04:f9:e6:81:b7:89:ac:74:b8:d2:c0:d7:b7:
                    ac:c9:52:d3:a9:05:61:63:ee:7c:42:45:4e:09:16:
                    41:90:ba:e6:f6:7c:0a:82:cf:f1:08:bd:6b:2c:d4:
                    3d:63:4b:59:d2:4f:ae:f8:a7:90:10:c1:38:d2:6e:
                    18:bd:12:69:85:6e:41:09:07:6a:d7:4f:f0:b0:39:
                    7f:ba:05:aa:ff:6f:b1:32:da:79:40:e8:a9:7e:4d:
                    52:68:86:9b:1d:e7:4a:8a:c2:d8:b1:43:07:b2:e5:
                    35:67:41:63:92:5c:f6:24:03:09:59:d4:96:0a:4c:
                    29:19:2f:cd:bd:2e:db:16:34:73:24:73:a0:85:a0:
                    f5:f8:d3:1a:99:1f:6e:77:da:ca:78:b8:85:be:05:
                    9a:47:cc:3e:8f:b5:22:c0:94:9a:dd:74:f5:dc:5a:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4C:1E:AD:05:F5:64:19:08:CC:63:AB:58:F3:93:9B:84:ED:51:D7
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a323030303a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:fb:3f:a3:4d:e2:5c:17:ab:8f:a8:f2:f3:40:3a:06:2a:6a:
         1d:a0:c6:29:dc:c1:eb:65:60:94:46:76:f3:6b:c8:f7:89:c4:
         0d:8c:f3:b3:0e:5e:57:97:e9:06:f8:01:9c:5e:ef:b9:8d:a7:
         c7:62:6c:64:92:28:d5:c7:f9:a3:01:ac:33:03:35:d3:f6:ce:
         8a:d2:9a:11:d3:e6:d8:ee:de:d9:65:62:a8:32:64:7f:5f:c5:
         28:a9:f2:c4:53:3a:b0:a5:b0:c4:31:44:63:0d:c0:e2:bb:08:
         58:54:e3:d6:de:3e:12:6a:b0:91:a1:f6:81:7c:53:0c:09:6a:
         ac:95:e2:35:5a:01:ac:09:db:1c:1d:9c:a2:d8:e0:1d:f5:df:
         b4:be:f6:d9:2c:76:93:4b:33:ae:5e:94:0a:79:d4:33:e0:34:
         3d:11:ef:e5:ac:b3:de:1c:79:88:42:94:64:dc:fe:35:c5:8e:
         ea:39:1a:90:63:70:0b:c7:1c:32:fe:e3:33:10:9f:f6:2a:d0:
         07:c0:27:3a:c6:c1:5a:d1:bb:34:a0:a5:b3:bd:c2:35:82:b4:
         d1:0a:27:53:cf:28:1f:de:6a:a0:b5:b3:03:e3:3a:5b:94:9b:
         ab:08:b6:33:1d:10:4c:4b:3c:60:f3:05:87:11:32:95:b8:e4:
         9c:2c:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:26 2024 by rpki-client on console-ams.rpki-client.org