Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a383030303a3a2f33332d3333203d3e20323635303137.roa
File:                     323830343a333137383a383030303a3a2f33332d3333203d3e20323635303137.roa (raw, json)
Hash identifier:          5kt6pBP34ZAzc4RQJrGAfOYFIKHtPi+kxmABjCdKxNI=
Subject key identifier:   4E:A4:E9:83:55:B5:3D:CC:80:2C:9A:61:4F:55:67:2C:1A:49:1A:B0
Certificate issuer:       /CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
Certificate serial:       60636DE435E9990EF1A02EDCFF7E0CB28136D148
Authority key identifier: DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a383030303a3a2f33332d3333203d3e20323635303137.roa
Signing time:             Fri 26 Apr 2024 19:34:23 +0000
ROA not before:           Fri 26 Apr 2024 19:29:23 +0000
ROA not after:            Fri 25 Apr 2025 19:34:23 +0000
asID:                     265017
IP address blocks:        2804:3178:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.crl
                          rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:63:6d:e4:35:e9:99:0e:f1:a0:2e:dc:ff:7e:0c:b2:81:36:d1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
        Validity
            Not Before: Apr 26 19:29:23 2024 GMT
            Not After : Apr 25 19:34:23 2025 GMT
        Subject: CN=4EA4E98355B53DCC802C9A614F55672C1A491AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:e9:61:43:1c:67:16:24:bd:83:e6:b9:39:
                    f5:12:f1:a6:78:83:a2:58:db:88:f5:d3:2f:d7:f3:
                    ea:90:23:58:9c:1d:8f:95:04:94:44:89:22:51:a6:
                    bc:c3:03:89:71:96:67:0a:76:8f:a9:c1:cc:c1:5f:
                    c7:ba:a1:4c:fb:88:ce:44:4b:bb:c7:a5:da:4e:ce:
                    b9:a9:af:6d:6b:30:cd:58:50:76:df:27:86:20:c8:
                    a7:a3:a1:60:b2:5a:e9:a0:06:db:ce:b1:4c:93:b5:
                    bd:88:b2:ee:74:4f:75:09:ba:07:d0:f0:f0:a1:c7:
                    c0:18:1d:38:b5:6c:9b:65:0f:1f:bf:2f:c7:69:df:
                    75:d1:3a:49:8f:a2:71:e0:40:d7:08:5b:f1:2e:02:
                    79:b0:23:c7:01:11:d1:ef:cd:e3:ef:e6:1d:8d:99:
                    1c:c5:75:73:3f:71:0f:22:35:ae:ac:1d:38:f9:75:
                    74:ec:b5:92:7e:c6:0e:dc:e1:a4:cd:6c:dc:d2:d2:
                    b7:e4:83:92:53:2a:c3:d6:d9:14:76:86:a1:55:f5:
                    c0:b5:b3:76:d8:30:de:dd:e3:66:a8:df:40:19:47:
                    2b:87:39:20:8e:f0:16:13:e1:ca:19:a5:89:37:29:
                    97:29:54:e8:5b:d4:19:95:15:92:fb:8f:a4:b6:9d:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A4:E9:83:55:B5:3D:CC:80:2C:9A:61:4F:55:67:2C:1A:49:1A:B0
            X509v3 Authority Key Identifier:
                keyid:DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a383030303a3a2f33332d3333203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3178:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:63:15:18:89:08:cc:1a:d8:49:2d:f9:ff:bc:a4:7b:ea:
         91:f4:67:fe:13:ac:1c:3c:92:e3:da:32:93:fa:a5:ec:1b:82:
         5b:6c:e1:50:75:62:ee:cf:fa:77:f8:8e:68:cc:1a:11:13:db:
         fa:84:70:47:d4:51:9d:29:e3:34:a4:b7:c5:ea:10:b8:c9:12:
         66:75:68:c4:4d:52:01:bb:3d:56:a4:89:ce:fa:e5:40:e4:01:
         e9:b1:1d:7f:e8:71:66:3a:d3:e1:18:2d:73:32:48:aa:2d:c3:
         d4:88:b3:f5:bc:ae:a6:58:ff:0f:ed:99:6f:06:07:7c:f7:9e:
         96:64:76:55:09:2f:d2:4d:24:86:a0:9b:fd:ee:af:b0:67:fc:
         ac:94:5c:0d:f4:10:0e:e4:38:3c:67:2f:26:4b:b8:6d:7b:81:
         57:14:34:7f:71:69:97:85:34:d2:5e:32:92:b3:2e:36:6b:5a:
         71:25:c9:98:d5:5e:15:4f:d6:51:f3:69:53:f5:28:8a:e8:8c:
         f2:c7:e4:55:52:39:8d:f7:e6:b1:7b:12:3f:48:5e:44:c4:38:
         d3:09:4b:70:cc:04:f6:87:dc:41:fe:f7:e9:5f:6a:ca:63:80:
         51:f7:27:e4:7f:9d:90:43:62:18:93:33:47:20:3f:5c:ad:60:
         90:ea:d5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:30 2024 by rpki-client on console-ams.rpki-client.org