Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/323830343a3738383a3a2f33322d3334203d3e20323632333030.roa
File:                     323830343a3738383a3a2f33322d3334203d3e20323632333030.roa (raw, json)
Hash identifier:          eJe0+vhWkbZwpfqlTxk5+B1HZyPTxJ3kaHTOJCq02BU=
Subject key identifier:   F5:04:08:63:A2:18:E9:A3:2A:5E:A2:77:1F:4E:DA:E9:E1:FD:6D:FB
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       1ABF9A5291D811AF2243E568C020A90FD0D0B095
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/323830343a3738383a3a2f33322d3334203d3e20323632333030.roa
Signing time:             Wed 03 Apr 2024 21:08:51 +0000
ROA not before:           Wed 03 Apr 2024 21:03:51 +0000
ROA not after:            Wed 02 Apr 2025 21:08:51 +0000
asID:                     262300
IP address blocks:        2804:788::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl
                          rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bf:9a:52:91:d8:11:af:22:43:e5:68:c0:20:a9:0f:d0:d0:b0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Apr  3 21:03:51 2024 GMT
            Not After : Apr  2 21:08:51 2025 GMT
        Subject: CN=F5040863A218E9A32A5EA2771F4EDAE9E1FD6DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:20:1d:7e:6f:60:71:d5:27:1b:6d:7e:f8:
                    0b:ba:ca:6a:e9:33:c0:6e:a4:48:d4:64:31:cf:93:
                    ab:5c:98:aa:43:a3:ef:b8:b1:57:8d:01:6f:63:6d:
                    41:ea:8e:44:93:56:c4:0b:5e:e7:e3:20:1a:a6:29:
                    43:8b:9f:fd:54:a3:23:ce:bd:d6:5b:c5:6a:3c:87:
                    a0:dd:5d:0d:69:09:36:18:7d:5b:4a:f9:66:c2:2c:
                    cb:eb:7e:be:4e:10:3d:68:b6:e9:b3:6b:39:bf:8a:
                    a9:a0:af:b7:dc:6b:42:ca:29:44:b5:57:ae:55:37:
                    62:8c:e6:a7:df:c8:72:cb:32:86:0d:06:fb:78:a8:
                    b0:63:e8:a5:23:d5:8a:30:27:ac:2b:6a:43:a6:0a:
                    86:0f:ed:c8:55:05:ae:a5:37:2a:d8:88:06:ce:5d:
                    89:ee:4a:75:ca:bf:2f:8b:32:0a:54:e1:eb:f2:5e:
                    ca:0a:ae:a9:bb:fa:c9:37:77:2d:f0:b9:4e:0c:e4:
                    6e:fd:01:81:3e:d0:31:a2:73:ed:cf:43:70:5e:ec:
                    d9:d3:03:7c:ac:12:db:17:33:31:8b:a9:b0:e4:d2:
                    fc:23:72:37:3e:33:ab:53:3c:44:fa:aa:c5:6b:dd:
                    03:05:d1:80:76:b1:d2:ff:48:69:0e:ac:c5:6a:31:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:04:08:63:A2:18:E9:A3:2A:5E:A2:77:1F:4E:DA:E9:E1:FD:6D:FB
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/323830343a3738383a3a2f33322d3334203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:788::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:f1:58:a8:5a:a8:24:4a:f6:4a:7d:14:14:2e:95:e8:15:be:
         61:f9:c9:20:5e:85:43:ba:b7:01:fa:99:28:dd:1a:96:61:a7:
         aa:af:73:11:d8:ad:fd:c3:1d:cb:fd:96:9b:4a:c3:f1:f1:6c:
         50:6a:fb:69:9b:3e:2c:2d:2a:37:c8:e3:bc:10:d6:72:f1:62:
         ba:15:16:81:a0:f7:e2:04:a2:25:86:a5:07:97:f9:b3:1a:cf:
         a1:22:50:9f:9f:f9:03:57:fd:57:fc:9c:c1:19:0f:d3:c5:3f:
         74:15:e7:ad:3b:0d:f8:fe:7d:1e:b3:cd:d7:6b:39:0b:69:8d:
         48:e9:49:f7:b3:c3:58:64:29:01:3f:52:20:dc:22:9d:c9:02:
         6d:dc:00:b9:27:65:ae:30:02:0b:ce:58:a1:33:58:0a:1b:2a:
         ab:7f:51:f2:13:3e:8b:68:61:01:59:03:9d:b9:ba:16:70:00:
         2f:af:ec:24:3b:aa:70:c7:71:84:8d:2d:62:34:f4:b1:6f:31:
         cd:a9:7e:fb:72:e9:23:ff:d9:e4:5b:a7:3f:b5:8f:ce:72:69:
         c1:fc:10:d6:db:91:a8:5a:9f:af:86:e9:2d:e3:1f:3e:cd:b9:
         87:a4:98:63:ac:b4:03:9c:5b:b4:c7:19:5f:6b:39:f1:52:4a:
         42:8e:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:09 2024 by rpki-client on console-fra.rpki-client.org