Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d313238203d3e20323731323933.roa
File:                     323830343a373933633a3a2f33322d313238203d3e20323731323933.roa (raw, json)
Hash identifier:          WavApz8rUcoJKToJ/1C8iXjWrTKeJtv3S69R4yE7sPU=
Subject key identifier:   FC:50:AF:FD:7B:76:BD:1C:2E:9E:D4:89:AF:06:8E:35:C4:B3:C0:08
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       10161AE5F84CB88D63213C90DFC1D5053EA3600A
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d313238203d3e20323731323933.roa
Signing time:             Tue 21 May 2024 16:55:08 +0000
ROA not before:           Tue 21 May 2024 16:50:08 +0000
ROA not after:            Tue 20 May 2025 16:55:08 +0000
asID:                     271293
IP address blocks:        2804:793c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:16:1a:e5:f8:4c:b8:8d:63:21:3c:90:df:c1:d5:05:3e:a3:60:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: May 21 16:50:08 2024 GMT
            Not After : May 20 16:55:08 2025 GMT
        Subject: CN=3082010A0282010100BEBB04D999B711A4F67F92BCC0CA59826817306DFC309F60AD539237D72F16D462163BC0C2C1576BECF56C2C6B6B57D02FCE94E092A4E876B2454BAC82EDB19837A9BB5560991B1C5457DD34BE823C3FDFAA1A409BD5B5D789D04EE5E1C016BE50014F5245ABEC00A2B5CC9A0F8FD8AF02B98681E33FFE4A29587D9A9866C08B5CA270C7FF327F7110C8E05EED81A725F4265104766D79D05B595349B1F27933CFD876E57DF244886C6414FA503881C5E19D20FDF1D6976EB8762693A330A373DE6F4B9D6AB1924ECCE051AC1A0EBA124AB05847AF21F99C6241FB05DFF5C99B0CA6AA1848F04D4C7A4C76528EC1A332D173CEFA469E2747B8FEEF8A33EB74390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:04:d9:99:b7:11:a4:f6:7f:92:bc:c0:ca:
                    59:82:68:17:30:6d:fc:30:9f:60:ad:53:92:37:d7:
                    2f:16:d4:62:16:3b:c0:c2:c1:57:6b:ec:f5:6c:2c:
                    6b:6b:57:d0:2f:ce:94:e0:92:a4:e8:76:b2:45:4b:
                    ac:82:ed:b1:98:37:a9:bb:55:60:99:1b:1c:54:57:
                    dd:34:be:82:3c:3f:df:aa:1a:40:9b:d5:b5:d7:89:
                    d0:4e:e5:e1:c0:16:be:50:01:4f:52:45:ab:ec:00:
                    a2:b5:cc:9a:0f:8f:d8:af:02:b9:86:81:e3:3f:fe:
                    4a:29:58:7d:9a:98:66:c0:8b:5c:a2:70:c7:ff:32:
                    7f:71:10:c8:e0:5e:ed:81:a7:25:f4:26:51:04:76:
                    6d:79:d0:5b:59:53:49:b1:f2:79:33:cf:d8:76:e5:
                    7d:f2:44:88:6c:64:14:fa:50:38:81:c5:e1:9d:20:
                    fd:f1:d6:97:6e:b8:76:26:93:a3:30:a3:73:de:6f:
                    4b:9d:6a:b1:92:4e:cc:e0:51:ac:1a:0e:ba:12:4a:
                    b0:58:47:af:21:f9:9c:62:41:fb:05:df:f5:c9:9b:
                    0c:a6:aa:18:48:f0:4d:4c:7a:4c:76:52:8e:c1:a3:
                    32:d1:73:ce:fa:46:9e:27:47:b8:fe:ef:8a:33:eb:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:50:AF:FD:7B:76:BD:1C:2E:9E:D4:89:AF:06:8E:35:C4:B3:C0:08
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d313238203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:793c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:91:59:4c:57:08:48:dc:67:79:dd:28:5a:29:1c:ac:50:
         c4:0b:71:63:ac:17:8c:ea:03:19:5b:15:45:af:c1:7e:f2:7e:
         98:fb:73:a8:6a:0c:a6:ef:44:b4:2e:00:f3:22:e0:8e:e1:f9:
         ba:17:2e:da:18:5d:e7:28:5d:a7:b2:9c:97:3f:59:5f:84:81:
         a3:3c:c1:42:1b:4f:7e:dd:0f:03:65:9d:ea:d2:b6:cd:9e:a8:
         5d:4a:26:62:13:19:98:19:5c:eb:5c:11:21:1f:a3:a9:60:73:
         fe:00:fb:f0:70:e1:2a:a0:8a:ba:eb:d8:76:41:c7:56:52:eb:
         a8:30:9a:8d:ee:d1:01:c6:bf:70:f9:2c:d0:f1:67:33:57:12:
         00:3d:97:be:10:fe:ed:63:13:fa:13:60:cf:ea:55:dd:a7:37:
         c3:3a:67:58:88:c7:d6:dc:3f:09:2f:e3:e5:59:d3:91:34:44:
         2e:31:6a:78:fb:66:eb:78:60:7e:c5:97:f7:81:d2:36:d0:1b:
         77:59:77:a1:8a:27:60:2b:d2:83:52:d4:31:b8:bb:35:e8:42:
         d9:71:49:83:f9:1f:65:a6:d3:95:b7:76:f1:df:d4:98:0c:64:
         b5:0d:42:8a:e0:06:47:34:fc:a2:5a:98:d1:86:3f:43:cc:02:
         c0:42:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:44:31 2024 by rpki-client on console-fra.rpki-client.org