Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
File:                     323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (raw, json)
Hash identifier:          k+m7NJ/LiD6tVxNKkdmv0eOfPgDkeNW4j/UWesy0Xj8=
Subject key identifier:   40:15:5A:7A:A0:20:14:E0:AC:5B:23:95:BE:A4:AA:BB:C7:DE:85:40
Certificate issuer:       /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial:       12C55A5A29C49A7A037144261063A8A4B8684CE6
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
Signing time:             Thu 04 Apr 2024 03:00:46 +0000
ROA not before:           Thu 04 Apr 2024 02:55:46 +0000
ROA not after:            Thu 03 Apr 2025 03:00:46 +0000
asID:                     267102
IP address blocks:        2804:482c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
                          rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c5:5a:5a:29:c4:9a:7a:03:71:44:26:10:63:a8:a4:b8:68:4c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Validity
            Not Before: Apr  4 02:55:46 2024 GMT
            Not After : Apr  3 03:00:46 2025 GMT
        Subject: CN=40155A7AA02014E0AC5B2395BEA4AABBC7DE8540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:58:6e:10:16:f2:b1:19:02:26:cf:c3:79:
                    9c:a8:37:eb:93:8e:0d:ad:e5:4e:23:29:6e:9b:87:
                    70:3f:7c:3b:29:62:8f:90:00:3b:f2:dc:2c:ab:53:
                    69:0a:7a:35:c7:57:ba:b9:9a:5d:94:e1:91:9b:a3:
                    42:09:db:3f:75:d8:28:f3:2e:b0:33:c8:22:10:57:
                    21:4a:49:6d:ff:05:a8:c0:18:a2:95:42:2f:20:9d:
                    a1:da:25:9e:b2:c0:68:5a:eb:9e:5a:1e:bc:7c:f5:
                    a4:0e:72:29:5c:7d:a7:c7:af:a0:9d:54:49:2f:13:
                    b5:3a:6e:eb:28:f0:07:0f:44:6c:51:78:ab:1d:3a:
                    f3:8b:a8:d9:dc:d9:cd:52:56:4c:b4:ca:ca:6d:9e:
                    1c:b0:96:da:4b:09:44:39:e4:eb:e9:b0:92:d0:d3:
                    75:db:68:54:a9:53:d5:2f:44:ae:0b:b3:8b:68:67:
                    72:a2:18:ae:4f:68:ba:d0:5f:b7:6a:11:d9:b8:9a:
                    34:43:d4:1d:a8:0a:93:51:04:d9:36:70:46:c8:a5:
                    55:c5:7d:2a:96:55:a3:0d:5d:71:e9:df:0f:33:07:
                    fa:a6:1c:82:13:7f:cc:f7:1b:99:4c:51:c7:30:7a:
                    a3:a2:40:64:21:20:64:86:87:5c:e7:f1:17:03:98:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:15:5A:7A:A0:20:14:E0:AC:5B:23:95:BE:A4:AA:BB:C7:DE:85:40
            X509v3 Authority Key Identifier:
                keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:482c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:b7:58:7f:6d:12:0d:82:20:aa:50:1b:96:b9:21:09:14:24:
         08:34:48:bb:12:f9:ed:1f:3d:7a:67:31:c2:04:93:23:59:08:
         b9:04:b4:e7:0e:6e:67:73:52:80:79:f1:99:22:2d:fd:73:45:
         4f:ce:1c:1b:b9:b6:83:74:b0:90:74:5f:4e:06:19:85:f4:81:
         7f:fe:13:5f:ef:90:09:04:97:6b:6a:cf:44:e6:90:76:9c:ca:
         c5:ae:3f:0f:69:12:58:63:da:15:dd:5d:9a:fb:f1:f6:2d:1a:
         4d:4b:a8:be:e4:ce:2c:d5:99:be:f2:62:25:7e:79:7f:f6:71:
         b4:02:b0:fe:b3:21:4f:c2:78:78:9a:34:df:f3:23:e8:f7:fa:
         fb:70:f8:62:bd:ec:25:11:f7:bc:3e:ca:cf:2b:99:6f:0a:6e:
         d9:dc:90:46:d7:6e:d2:57:99:9b:34:75:99:02:61:4d:40:7b:
         ce:de:92:5b:fb:7a:35:e0:ac:7f:be:6a:8b:a1:43:34:b9:3e:
         2c:e6:d8:1e:17:fb:74:14:dc:be:2c:20:a7:3c:7d:91:a3:5d:
         cd:74:b8:b3:bd:c8:a0:f7:b3:6c:9a:57:90:d0:d2:76:d9:82:
         9e:13:47:34:33:70:03:98:f9:fa:df:ec:79:c5:44:3b:83:23:
         7b:11:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:08 2024 by rpki-client on console-fra.rpki-client.org