Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3230303a3a2f33392d3339203d3e20323731333235.roa
File:                     323830343a373963303a3230303a3a2f33392d3339203d3e20323731333235.roa (raw, json)
Hash identifier:          rPWJBBW1/rZ717iQXD/2pW6WAKTCAi98/K/S5A3iInI=
Subject key identifier:   D4:AA:02:F3:6B:3C:6A:75:C1:79:77:A8:20:CD:8C:87:F1:81:1A:7E
Certificate issuer:       /CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
Certificate serial:       3CC6B23F81FAB3827128381F8A4437D103911601
Authority key identifier: 09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3230303a3a2f33392d3339203d3e20323731333235.roa
Signing time:             Fri 16 Aug 2024 01:57:00 +0000
ROA not before:           Fri 16 Aug 2024 01:52:00 +0000
ROA not after:            Fri 15 Aug 2025 01:57:00 +0000
asID:                     271325
IP address blocks:        2804:79c0:200::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c6:b2:3f:81:fa:b3:82:71:28:38:1f:8a:44:37:d1:03:91:16:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
        Validity
            Not Before: Aug 16 01:52:00 2024 GMT
            Not After : Aug 15 01:57:00 2025 GMT
        Subject: CN=D4AA02F36B3C6A75C17977A820CD8C87F1811A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:cc:98:80:2c:5e:a5:d3:b8:84:41:22:54:
                    ce:2e:cb:8f:d4:7f:f2:6d:a6:9c:d8:10:8a:e9:51:
                    2a:4b:75:e3:fe:23:dd:24:0a:cd:5e:d9:41:03:cf:
                    2c:d3:10:b6:42:d7:6c:10:5f:8d:14:3c:14:5d:43:
                    30:0d:9a:74:8d:fc:c6:a0:9b:63:b7:6d:80:82:f4:
                    c3:8b:1b:50:ce:ef:39:1c:22:85:a0:26:24:d5:e2:
                    2e:9a:5b:8b:14:d8:b5:78:f6:56:cb:65:72:53:52:
                    5b:71:05:8a:f8:e2:12:01:5f:91:06:e7:d2:3b:f3:
                    32:8b:0f:cc:58:54:85:39:3e:b5:13:a1:eb:cc:fc:
                    59:cb:b3:42:40:d0:e8:c2:23:9d:37:42:6b:04:e2:
                    3f:4a:ea:fe:3a:01:26:6f:25:37:d0:fe:7c:ab:f4:
                    1a:74:22:a8:68:ed:26:e1:20:b9:18:3d:87:0b:84:
                    23:15:01:2f:31:50:fe:36:ab:cb:a5:9e:24:7c:a6:
                    de:06:34:d9:23:74:5c:a4:68:9d:41:7c:d4:21:8e:
                    b5:3f:6e:40:2e:77:ad:7c:fd:5d:08:b5:e3:4a:af:
                    f7:cc:72:69:65:6a:a6:bf:ce:69:09:45:9c:4e:71:
                    ef:f4:88:07:fb:9c:4b:89:21:51:2e:26:bf:04:83:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:02:F3:6B:3C:6A:75:C1:79:77:A8:20:CD:8C:87:F1:81:1A:7E
            X509v3 Authority Key Identifier:
                keyid:09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3230303a3a2f33392d3339203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c0:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         38:83:2d:34:94:8b:ad:5e:9a:b0:d7:ed:01:c9:09:6e:d4:d3:
         ff:43:99:2e:2e:3b:53:24:8e:37:32:ec:ea:f8:30:d1:05:05:
         e5:2c:ef:31:39:67:da:43:7e:9b:07:54:40:fa:a7:55:4f:33:
         b6:b1:5a:3b:24:b0:c8:cd:c2:e1:32:68:10:fe:c8:21:78:a3:
         78:6d:59:c4:3e:d3:f9:71:f8:be:c9:7f:03:a2:ad:a1:e5:9b:
         c2:8c:39:0d:3a:9a:55:c5:32:01:85:66:17:ca:fc:0f:ac:76:
         25:dc:3b:60:ef:db:35:6d:1d:74:47:24:19:22:1c:0a:b3:39:
         b7:40:6b:f4:6c:ac:e2:64:a9:58:4e:df:66:9e:18:f6:31:f6:
         6b:72:b8:2d:c2:a8:55:8b:c4:6b:57:78:6f:93:37:20:91:8d:
         6e:41:d5:0e:5c:89:c4:54:8c:02:c1:3b:95:d5:74:ca:40:18:
         13:70:47:9e:b5:99:9a:a8:11:fb:e2:15:0a:97:9e:ae:a5:0f:
         b9:a1:2e:36:24:6b:6b:8e:03:42:bb:1c:40:e4:0c:ff:50:3d:
         8d:b2:31:49:10:5c:61:89:21:9e:a6:7e:9d:c0:d4:00:18:b6:
         9c:e1:ec:74:5e:ca:af:ba:d3:eb:0f:cb:85:24:50:47:09:08:
         c6:44:b3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:39 2024 by rpki-client on console-fra.rpki-client.org