Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa
File:                     323830343a313664633a3a2f33322d313238203d3e20323633313034.roa (raw, json)
Hash identifier:          b5gMdKLicTqzVMnYCYiOoHwaj4z39gasHn1brnydh9c=
Subject key identifier:   A4:32:B3:C3:81:F6:D6:1C:8C:BD:A5:E4:3A:D7:45:38:E4:4E:A3:89
Certificate issuer:       /CN=87B1C7EAED276157BEE841B04303FA76647D005D
Certificate serial:       60A66A20B8F552AF8179C2D39FB1635435C952F2
Authority key identifier: 87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa
Signing time:             Thu 04 Apr 2024 20:35:14 +0000
ROA not before:           Thu 04 Apr 2024 20:30:14 +0000
ROA not after:            Thu 03 Apr 2025 20:35:14 +0000
asID:                     263104
IP address blocks:        2804:16dc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl
                          rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a6:6a:20:b8:f5:52:af:81:79:c2:d3:9f:b1:63:54:35:c9:52:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87B1C7EAED276157BEE841B04303FA76647D005D
        Validity
            Not Before: Apr  4 20:30:14 2024 GMT
            Not After : Apr  3 20:35:14 2025 GMT
        Subject: CN=A432B3C381F6D61C8CBDA5E43AD74538E44EA389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:7e:15:c2:cc:36:cd:86:60:f9:0f:97:02:
                    98:c3:7d:1a:ef:79:cb:66:ad:9f:5c:53:d0:b1:30:
                    e3:4d:1b:99:7d:8f:34:c4:78:c5:98:ca:23:57:bb:
                    d8:58:a4:21:2b:82:e1:7e:98:28:f9:18:e9:6d:93:
                    23:e5:18:c9:d8:d6:9a:b5:02:7b:97:02:f3:8c:c6:
                    e1:88:90:9e:fb:df:67:28:15:04:0e:78:ee:8a:3b:
                    b7:3b:7a:69:33:ba:f2:0a:8b:63:d7:7f:08:90:cd:
                    62:be:08:f8:7c:73:4f:3d:6b:59:41:06:a2:a2:5c:
                    c3:66:3b:02:79:ef:8b:a5:14:6c:37:04:a3:13:f3:
                    29:ae:83:0b:de:c7:f8:37:53:46:93:a7:fb:b7:10:
                    3e:fc:57:db:43:3e:d7:7f:76:c8:27:3d:18:2f:94:
                    ad:35:ac:2a:4e:8d:a9:82:eb:5a:f8:d4:8a:49:de:
                    b5:21:ae:4a:7b:2a:98:cc:b1:c6:78:bc:a9:a5:6d:
                    fd:79:94:d4:20:70:a0:b2:35:f9:5f:99:ab:2d:36:
                    6d:a9:36:7a:99:80:5d:24:01:b1:3e:2c:75:ad:07:
                    1e:a8:64:a2:0e:a5:1c:4d:4c:9b:92:b5:a5:47:c6:
                    4c:7c:49:67:e8:40:7c:7a:6b:26:84:34:23:65:5c:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:32:B3:C3:81:F6:D6:1C:8C:BD:A5:E4:3A:D7:45:38:E4:4E:A3:89
            X509v3 Authority Key Identifier:
                keyid:87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:79:a0:de:72:c3:eb:c2:f2:ab:0b:dd:5b:0f:f5:fa:73:86:
         b1:6e:46:cb:dc:cc:de:0b:23:6b:90:65:ee:05:cb:b8:e7:a6:
         0b:00:bc:2c:1f:16:21:aa:59:c6:a6:3c:93:8f:98:48:cd:6c:
         ed:50:6f:74:59:31:40:bd:16:2b:60:71:2a:77:6e:9f:17:15:
         98:6f:56:13:02:01:32:b6:7b:94:2b:c5:5b:a7:75:f1:c2:8a:
         38:32:49:b5:46:a4:25:ff:c2:15:09:89:18:7f:38:04:66:0f:
         53:0c:f0:bd:7e:0b:53:e1:ce:d3:ef:83:d8:a2:40:22:8d:41:
         92:77:9e:d2:d1:34:18:e5:50:13:d3:2c:22:75:74:24:59:b2:
         53:69:06:d2:a3:9c:19:4e:41:5a:c0:4e:3e:e9:29:97:ed:5e:
         62:0a:5e:26:76:07:30:86:17:ed:87:92:fb:5e:91:33:13:6c:
         f6:c2:57:7e:6d:62:ea:02:88:9c:b9:16:74:bc:d1:2c:49:5b:
         86:0f:7d:75:c7:66:72:ef:ba:3c:88:96:9d:c5:26:b2:54:5a:
         15:2c:9d:c4:45:b5:e5:4d:89:f3:a7:d6:0e:85:c5:cc:03:c0:
         21:27:f1:c7:24:92:c9:39:f8:fc:f6:46:da:36:e7:2e:ad:87:
         6c:34:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:14:01 2024 by rpki-client on console-ams.rpki-client.org