Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          onUsTsQJhXGZEDs4jFuJY8gPhmLaYcP9Mv8EaQqVNRY=
Subject key identifier:   81:21:79:B1:41:63:D4:A0:93:BD:D4:5D:30:23:4D:6C:00:F4:48:75
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       1BBD04B11EBD5493E88FE90E47F0935F90578268
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:19 +0000
ROA not before:           Wed 03 Apr 2024 19:43:19 +0000
ROA not after:            Wed 02 Apr 2025 19:48:19 +0000
asID:                     262617
IP address blocks:        2804:90c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bd:04:b1:1e:bd:54:93:e8:8f:e9:0e:47:f0:93:5f:90:57:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:19 2024 GMT
            Not After : Apr  2 19:48:19 2025 GMT
        Subject: CN=812179B14163D4A093BDD45D30234D6C00F44875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:96:59:30:6b:47:dc:96:1f:95:16:ea:ef:
                    7b:d1:e3:ff:8a:8c:42:60:23:01:4f:0d:77:72:d8:
                    11:85:0c:51:ce:3a:24:29:3d:ae:01:8c:97:22:33:
                    17:3e:73:ef:98:ab:86:c6:bf:d3:86:e6:67:2b:94:
                    a7:5c:0b:df:cb:e8:2c:92:89:9d:76:e4:f5:be:5e:
                    e6:f8:58:f5:e6:e5:e5:c2:ec:c5:89:6b:0e:79:b7:
                    8f:2d:a7:30:9a:f4:b0:f2:b1:c3:55:96:a8:54:49:
                    c1:da:d5:36:eb:5e:53:85:7d:c5:3f:5d:b0:76:d0:
                    97:ea:89:b1:1e:c1:5c:56:a0:d6:65:d2:10:f6:82:
                    10:56:23:a6:38:0e:f2:d0:0c:8c:d6:4c:b2:93:49:
                    f2:6b:4d:ab:14:dd:5e:75:03:bd:30:d6:90:0c:03:
                    c9:c0:10:a0:85:c7:82:33:60:c2:ab:e2:1f:a4:99:
                    d2:44:9b:b5:d8:fb:1e:d9:c0:51:99:33:5f:09:72:
                    e7:85:d8:5e:6a:7b:d8:82:d5:1a:62:9e:5d:aa:49:
                    31:ea:6f:35:5c:73:f2:d7:c0:b0:2e:7d:ff:0a:2f:
                    e9:a5:59:81:b0:f8:60:b8:09:7c:1f:6b:4e:32:f2:
                    00:ba:3a:97:4d:c9:5f:c0:91:9a:b7:12:93:5d:56:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:21:79:B1:41:63:D4:A0:93:BD:D4:5D:30:23:4D:6C:00:F4:48:75
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:11:9a:84:2f:72:90:ef:15:e6:9f:fa:65:58:c4:c3:84:84:
         87:47:f5:03:ce:e2:73:54:c7:1d:02:d0:2a:dd:6e:09:a9:f1:
         87:e2:f1:e8:f0:86:3e:02:3e:cd:4e:87:17:8b:a0:43:ff:c4:
         8e:8c:20:c1:3d:d9:a9:12:dc:9b:93:43:b6:04:b1:aa:8b:80:
         69:66:fe:b3:bd:38:68:98:35:88:64:8a:4f:5d:1b:81:3d:3f:
         2c:ee:28:8a:59:64:9e:24:36:b1:3a:35:ee:7d:4a:30:80:6e:
         3a:57:3c:5d:0b:38:ba:14:3e:45:5d:44:2a:b6:9e:24:86:9a:
         50:0d:c2:49:ef:0e:c7:05:b5:ab:7a:bc:b7:b2:34:5b:0e:57:
         e5:6f:57:f7:91:6e:ab:5f:18:00:fd:bb:38:81:98:07:a0:e4:
         3d:16:a9:95:d8:1e:32:20:6a:a4:bc:3f:06:73:37:1f:c5:b2:
         f1:94:8f:e7:3e:36:ca:02:f4:91:29:f5:35:5d:94:20:bd:e3:
         a7:d1:fe:08:f7:67:de:f0:dd:69:90:fd:40:25:dc:cd:c6:1c:
         f5:15:73:2d:75:ac:cd:ab:8a:51:05:07:7e:52:1b:e1:09:9d:
         1d:d4:c0:ee:77:92:9a:8e:70:60:16:08:75:8d:3b:5c:fd:66:
         48:1e:0f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org