Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa
File:                     323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (raw, json)
Hash identifier:          OBPDZjfQBR4kjUsEkITpb1JMvwcX5W5JFR92cdMAbMk=
Subject key identifier:   C7:DB:70:DB:26:55:B1:53:88:0B:5F:23:37:8E:98:37:AD:51:38:1E
Certificate issuer:       /CN=D4B92897692C4F611B738C6728923C318CA5378D
Certificate serial:       45C8C1876EBA51E36603469AE8310884CB791A8C
Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa
Signing time:             Sat 04 May 2024 18:41:40 +0000
ROA not before:           Sat 04 May 2024 18:36:40 +0000
ROA not after:            Sat 03 May 2025 18:41:40 +0000
asID:                     273654
IP address blocks:        2804:8a34:ec00::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl
                          rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c8:c1:87:6e:ba:51:e3:66:03:46:9a:e8:31:08:84:cb:79:1a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D
        Validity
            Not Before: May  4 18:36:40 2024 GMT
            Not After : May  3 18:41:40 2025 GMT
        Subject: CN=C7DB70DB2655B153880B5F23378E9837AD51381E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:7e:b9:fa:2c:28:3e:ca:1c:e4:e1:9e:5c:
                    29:72:76:f4:f9:53:e4:45:c3:12:5b:1d:b7:8b:fe:
                    e2:59:fc:6b:3a:ae:82:7c:84:79:ee:2e:5a:fd:84:
                    2e:d4:07:c4:a2:88:b8:a8:db:09:17:fa:b5:52:d1:
                    d5:05:0f:0b:a5:d8:40:a2:95:e8:5a:ab:1a:0f:07:
                    76:7e:fa:ba:0c:77:bb:c9:5d:66:45:da:9d:e0:82:
                    0d:0b:c0:09:4a:f3:8d:ab:a0:dd:83:b3:0e:a6:7e:
                    e4:e7:8b:c6:c7:d8:87:84:7c:88:d3:19:8f:a5:5c:
                    2e:b9:25:67:95:20:1e:16:9d:8a:a4:a3:f1:57:7d:
                    a3:8e:54:db:20:50:74:a1:35:df:4b:4b:cd:d3:dc:
                    5e:ed:97:22:26:8e:aa:51:9b:ad:bd:ce:83:72:af:
                    b6:42:4b:a7:b3:8b:4b:b5:2d:2c:d2:2e:5e:d7:48:
                    7c:54:f9:4c:76:8c:78:bb:28:de:25:67:11:e7:55:
                    72:98:db:de:d4:94:60:e3:c5:3c:04:ab:31:2d:77:
                    ba:f2:d7:fb:70:cc:67:52:06:ab:27:6e:db:68:8e:
                    b9:59:02:1f:8b:a3:b2:42:c0:d4:cd:f9:7b:49:0a:
                    30:30:b6:e2:ed:a3:5e:6f:61:f8:ea:53:91:df:63:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:70:DB:26:55:B1:53:88:0B:5F:23:37:8E:98:37:AD:51:38:1E
            X509v3 Authority Key Identifier:
                keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a34:ec00::/38

    Signature Algorithm: sha256WithRSAEncryption
         b7:7e:ad:01:cc:aa:41:54:38:e9:71:ba:d5:01:f3:0c:6b:9b:
         ba:17:a5:db:f6:fd:a4:3d:ca:62:19:db:da:82:6b:af:9f:13:
         01:9e:b3:1b:84:68:88:ee:9e:c3:d0:1f:ab:71:81:c6:07:fa:
         50:4c:0d:e4:d6:95:fb:41:46:e2:68:fb:e5:8d:d2:76:d6:6f:
         65:7a:44:11:ba:09:c3:97:1b:99:73:6c:33:6e:c7:33:b0:49:
         61:49:5c:79:86:12:4c:5b:2c:31:6c:f7:8f:35:87:a0:ed:3d:
         90:9a:77:ab:a1:73:35:dc:80:58:51:e8:e4:4b:a6:8e:ba:ed:
         b4:2d:47:4d:eb:40:c9:d9:92:c6:8b:ee:4c:16:5c:a0:5d:f9:
         f8:fd:fd:84:c2:82:41:98:00:89:44:20:a4:db:f8:dc:5f:dc:
         89:04:55:43:84:94:89:fa:25:9c:f5:7a:7a:53:45:a2:b4:3d:
         02:ec:10:1e:15:90:d3:15:b0:13:f4:e7:7f:83:4c:02:5b:87:
         40:31:bd:c2:a1:8b:6d:1c:e9:2e:80:a6:ab:58:8d:83:43:b7:
         03:44:27:16:a0:3e:b8:3b:c5:3c:bb:e3:0c:d9:67:f7:8c:30:
         61:37:f0:34:57:65:0c:e0:92:dc:80:78:c2:a2:17:77:33:a3:
         a1:dc:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:41 2024 by rpki-client on console-ams.rpki-client.org