Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33332d3333203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33332d3333203d3e20323733363036.roa (raw, json)
Hash identifier:          9S8EHyyoLR9zltBrtc6D7khMi3/Bm8ZB0yy+qjusCYg=
Subject key identifier:   7E:97:B8:19:B7:51:E8:C7:0E:C1:E4:45:07:26:CD:BC:52:1B:BB:CB
Certificate issuer:       /CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
Certificate serial:       3ABBFD16CE6E3D83026C2B4609D97FEC924E84F7
Authority key identifier: 39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33332d3333203d3e20323733363036.roa
Signing time:             Mon 08 Apr 2024 20:38:50 +0000
ROA not before:           Mon 08 Apr 2024 20:33:50 +0000
ROA not after:            Mon 07 Apr 2025 20:38:50 +0000
asID:                     273606
IP address blocks:        2804:8978::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bb:fd:16:ce:6e:3d:83:02:6c:2b:46:09:d9:7f:ec:92:4e:84:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391294F0484586F9131E6D65BFFAE01A3E7BDCC4
        Validity
            Not Before: Apr  8 20:33:50 2024 GMT
            Not After : Apr  7 20:38:50 2025 GMT
        Subject: CN=7E97B819B751E8C70EC1E4450726CDBC521BBBCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:b9:93:1c:f2:0b:df:f1:55:f3:60:62:11:
                    44:54:dd:ad:9f:df:fb:1e:69:74:16:19:23:46:aa:
                    82:4e:63:c7:fe:c4:96:1f:87:1f:5e:7c:c2:7e:57:
                    de:78:c0:89:3f:5d:50:27:48:5e:dc:6e:9b:3c:cf:
                    3a:6a:84:f7:fd:83:a1:84:57:06:1b:bf:67:1e:a9:
                    05:fd:aa:26:b9:f8:d9:2f:49:d9:01:f7:de:07:31:
                    59:db:f6:67:f9:f5:cf:24:82:1e:50:6c:1a:20:cd:
                    3e:97:03:1e:46:45:e8:2d:f3:10:49:e6:b1:46:d9:
                    5e:20:fe:49:e4:49:f2:fd:b5:6a:7a:a8:b9:11:63:
                    cb:4b:fe:9b:d9:14:25:86:3c:c2:96:b9:aa:11:09:
                    32:d5:09:ce:8a:00:96:84:7c:ba:6d:2f:28:00:32:
                    c6:25:44:8e:79:2c:3a:47:fe:3e:c5:40:8e:57:12:
                    70:7e:29:65:dd:5b:05:ac:4a:9d:60:5c:c7:07:0b:
                    90:f6:5f:68:c8:e2:49:77:2a:96:e9:5e:c4:16:a0:
                    f2:3f:7b:b8:9c:4a:a2:1f:9a:7f:3a:eb:f2:c3:aa:
                    3a:94:4c:41:72:b6:c7:d3:10:cf:03:87:4a:99:34:
                    c5:dd:51:09:35:ee:4b:77:aa:11:96:40:d0:50:ff:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:B8:19:B7:51:E8:C7:0E:C1:E4:45:07:26:CD:BC:52:1B:BB:CB
            X509v3 Authority Key Identifier:
                keyid:39:12:94:F0:48:45:86:F9:13:1E:6D:65:BF:FA:E0:1A:3E:7B:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391294F0484586F9131E6D65BFFAE01A3E7BDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/1/323830343a383937383a3a2f33332d3333203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:fe:da:5d:2d:af:ce:85:82:6e:70:3b:2f:81:ed:7a:ec:
         b1:82:c3:9b:59:06:4c:2d:ca:88:6f:d7:c1:6e:c2:2f:bd:82:
         04:9b:83:a0:ce:52:85:9e:9b:95:96:c1:1e:5a:1d:ca:53:49:
         9b:93:00:08:5f:57:6b:a1:07:22:e8:d6:49:a3:38:78:51:ee:
         f8:d4:23:c7:65:11:cf:17:26:2b:c9:3d:8e:a9:03:77:89:65:
         3a:8e:14:b3:3e:ee:b3:ed:2f:1b:89:52:61:e2:a7:a8:ec:ec:
         2d:da:fa:29:c7:d8:0d:d4:67:b2:5b:99:47:1c:da:be:1b:23:
         df:75:fb:0c:d6:2b:1a:c1:63:ea:a3:fb:e8:94:96:f6:d5:c0:
         1d:94:96:71:6d:25:5a:4c:f0:f4:ac:1a:cf:6d:5e:4d:7a:2c:
         76:0e:6b:f4:c8:ec:32:1f:29:81:cb:8c:ca:79:9c:bf:4e:b5:
         63:33:64:4b:3c:3c:b1:2c:7c:f6:18:b2:59:e5:02:5c:bf:02:
         08:31:62:5a:d3:0d:87:d1:63:97:4e:00:60:bf:92:df:8c:c3:
         c4:77:9e:a8:bd:e5:aa:6f:7b:de:f8:58:84:25:0b:5a:1b:bd:
         70:2e:27:fa:2e:a6:f6:82:ca:64:fb:29:82:97:92:4d:3a:29:
         e6:e2:4b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:08 2024 by rpki-client on console-fra.rpki-client.org