Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/323830343a3136633a3a2f33322d3332203d3e203238333039.roa
File:                     323830343a3136633a3a2f33322d3332203d3e203238333039.roa (raw, json)
Hash identifier:          QfOz178s8DeTprTV/ctYJm7szOZnGGfq1OGC1apfwmE=
Subject key identifier:   D3:A8:0E:D8:F7:4E:25:22:65:AC:0F:BC:E0:82:B5:A1:89:8C:0A:81
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       60D627B114F94CA3D37EF748BD3C348E1E432101
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/323830343a3136633a3a2f33322d3332203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:26 +0000
ROA not before:           Wed 03 Apr 2024 20:57:26 +0000
ROA not after:            Wed 02 Apr 2025 21:02:26 +0000
asID:                     28309
IP address blocks:        2804:16c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d6:27:b1:14:f9:4c:a3:d3:7e:f7:48:bd:3c:34:8e:1e:43:21:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:26 2024 GMT
            Not After : Apr  2 21:02:26 2025 GMT
        Subject: CN=D3A80ED8F74E252265AC0FBCE082B5A1898C0A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:76:24:7c:5b:0d:d0:df:91:65:16:fb:2c:
                    e5:ce:90:90:a5:08:f4:86:22:30:3b:65:21:14:1c:
                    f0:82:72:c6:05:50:f0:24:dd:04:9d:be:a1:8e:5a:
                    37:d0:64:a2:c7:2b:98:19:11:aa:5c:fa:38:77:5b:
                    95:14:53:21:64:26:87:bb:8f:12:c2:51:7d:39:be:
                    eb:19:f0:26:b6:69:3d:79:b2:97:12:d4:a6:a3:22:
                    98:90:f0:54:ac:23:b3:71:4b:2c:1f:40:55:35:a8:
                    d6:56:b0:1c:d3:9f:a6:8c:ef:e3:a6:5f:60:98:d5:
                    0f:cf:d7:c3:22:a2:8a:ec:0e:dd:e7:3a:90:94:ac:
                    35:b2:19:e5:6e:f1:51:ee:08:02:df:6e:25:39:a9:
                    5e:ff:36:35:68:ac:ae:cb:00:f6:b9:db:dd:1d:e9:
                    74:7e:2f:82:a4:65:19:de:b5:33:e0:ff:99:16:86:
                    10:de:79:2f:2b:5b:72:f5:78:90:f6:c9:02:2d:d2:
                    9e:92:11:33:d9:f2:34:58:76:8c:a3:a7:44:db:ab:
                    1a:36:1c:33:ff:38:c8:33:7b:f5:61:fe:5b:c9:27:
                    79:83:d6:9d:d1:f3:d3:25:76:00:60:77:d3:64:50:
                    1e:96:a3:83:43:0e:d5:ea:20:28:77:03:a3:4f:1b:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:0E:D8:F7:4E:25:22:65:AC:0F:BC:E0:82:B5:A1:89:8C:0A:81
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/323830343a3136633a3a2f33322d3332203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16c::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:63:91:a3:01:e1:b6:6a:4f:72:9b:4b:db:67:9a:0f:13:
         fb:de:53:8f:7b:cd:21:56:19:89:71:45:05:93:a8:63:91:fe:
         d5:d5:aa:21:55:54:04:25:5f:cb:04:07:72:70:30:78:c3:e9:
         cb:1b:c4:47:ba:5c:07:ca:1b:4d:f2:59:d8:86:cb:38:c8:c1:
         e1:48:3b:04:54:6b:34:24:0a:32:13:de:25:ee:c0:6a:36:63:
         1a:cc:88:10:cb:37:c6:d9:97:08:84:30:77:24:df:1a:b6:bf:
         48:9e:89:6a:1b:f5:64:1e:a8:b0:7d:d7:10:f8:f1:7b:50:24:
         ca:79:a9:dd:c9:ed:f7:5f:1d:11:76:59:92:06:1a:9a:7c:84:
         da:e7:25:d0:fe:07:f4:0a:dd:c7:e3:e7:89:53:d9:ac:27:c5:
         7c:3d:58:11:4a:54:76:f9:f1:a8:a9:f6:c9:52:d2:b2:85:2e:
         86:e4:4b:32:cb:fc:1d:d4:fa:64:37:51:9a:e3:dc:62:6f:fa:
         0e:3f:f6:00:60:40:9b:a9:0f:53:7c:45:ec:c8:52:b4:32:ef:
         69:63:58:a5:bd:b7:aa:c9:59:a7:ed:2e:9f:08:7d:2b:d1:db:
         63:f6:6c:17:78:45:ec:72:d5:5f:4b:db:64:f1:72:82:bf:4b:
         bd:d3:88:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org