Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230333a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3230333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          mjzwO3yd7hTXFQFCdyLhWYzJCoh6B9CYsjDV4G30XsU=
Subject key identifier:   39:0C:F0:1B:57:3E:15:2C:5F:5A:DB:A1:BD:D9:4B:99:BE:37:9F:7D
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       509B0FA8921C8C14BAB70ABBAE4B98471FE80705
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230333a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:15 +0000
ROA not before:           Wed 03 Apr 2024 19:43:15 +0000
ROA not after:            Wed 02 Apr 2025 19:48:15 +0000
asID:                     262617
IP address blocks:        2804:90c:203::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9b:0f:a8:92:1c:8c:14:ba:b7:0a:bb:ae:4b:98:47:1f:e8:07:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:15 2024 GMT
            Not After : Apr  2 19:48:15 2025 GMT
        Subject: CN=390CF01B573E152C5F5ADBA1BDD94B99BE379F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:0b:d3:e7:05:f3:80:38:f7:04:45:6d:35:
                    9d:4d:79:fa:69:cb:28:b9:53:3b:0f:0f:b0:e9:3e:
                    a8:f1:4b:20:23:c8:38:c6:c7:a8:52:d2:2c:7e:50:
                    91:54:e8:ec:9d:e2:2b:a1:18:96:e4:37:d8:b0:d4:
                    cc:8d:b3:d3:63:a6:85:3e:fb:a7:29:0e:6d:32:1e:
                    43:06:a0:cc:0a:21:bd:7f:94:39:02:2a:17:53:82:
                    56:d1:c0:4c:75:01:c7:d0:eb:79:7e:02:ec:94:90:
                    22:ae:92:24:bf:28:bc:73:ce:be:c9:5b:1e:bd:89:
                    c0:d2:91:51:9c:70:9e:ea:35:53:88:91:3e:08:32:
                    64:a9:23:9f:e9:56:d4:dc:97:60:cb:a7:72:73:e6:
                    2d:b1:75:ed:b2:d0:95:d1:d5:0b:b2:2f:24:79:6d:
                    ee:f9:3f:ad:72:8e:9a:bf:b3:d6:ef:83:db:a9:36:
                    25:ee:b9:a1:3c:26:46:fb:af:42:96:b4:ab:0d:c1:
                    c1:bc:5b:e9:49:59:f4:cb:be:24:d0:63:6c:59:59:
                    b5:23:9d:04:bd:d3:4f:d6:1a:9f:07:1a:b4:58:3e:
                    fb:8f:c1:fc:6f:fa:d8:51:b5:30:e6:1b:a6:08:6a:
                    cc:da:16:56:d8:f4:fc:3a:3f:f1:e0:ce:24:1c:a4:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0C:F0:1B:57:3E:15:2C:5F:5A:DB:A1:BD:D9:4B:99:BE:37:9F:7D
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230333a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:203::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:9f:06:d2:08:15:3a:e1:2f:b2:a7:85:e7:22:38:f0:fe:
         8f:93:d7:92:7a:de:1b:ac:d5:39:d6:5b:32:df:09:ba:c7:d0:
         58:7d:da:9d:71:b1:b8:31:98:37:b9:00:83:95:f4:a0:b6:14:
         14:54:b3:61:41:98:33:ce:1c:20:f7:ba:34:32:92:64:d9:60:
         a6:df:f4:7f:70:5b:4c:f2:3d:61:1b:0a:88:d2:33:55:be:b4:
         64:b8:76:52:06:61:55:f7:55:ee:c7:1b:2e:7f:c1:09:b0:90:
         95:a7:b0:b1:21:dd:2e:12:1e:e5:65:c2:1e:c4:b7:a2:cf:f0:
         bb:88:c2:61:28:3e:bb:fd:1f:9b:02:79:7f:47:1b:ab:fd:5f:
         16:76:1d:1a:38:82:30:18:1a:2f:42:b8:fb:a5:16:8c:ed:ab:
         82:af:c8:de:85:52:64:2a:88:23:f5:64:63:6e:8f:44:6e:ae:
         ba:39:bf:98:f2:89:53:71:90:48:44:fb:5e:45:2c:5e:82:e1:
         2d:6a:4c:5a:71:4f:6c:b4:26:cd:9b:36:1d:5a:14:63:8f:94:
         d3:56:fc:84:f0:24:83:f2:15:b0:b7:ff:83:1d:63:02:f2:8d:
         f8:ec:16:19:70:8d:ff:1b:12:0b:a4:b6:26:9c:ab:46:40:12:
         51:24:b4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org