Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/323830343a313636383a3a2f33322d3438203d3e203533313332.roa
File:                     323830343a313636383a3a2f33322d3438203d3e203533313332.roa (raw, json)
Hash identifier:          yigLNFtTq63P4OBLRAHPJPD2cG8hRZEEr9r54DlQLRQ=
Subject key identifier:   96:A2:9A:8A:84:C7:80:B1:A5:59:C9:B9:70:E4:30:78:69:89:A7:C0
Certificate issuer:       /CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
Certificate serial:       344969528E73C54372424330730F4786560F56E2
Authority key identifier: B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/323830343a313636383a3a2f33322d3438203d3e203533313332.roa
Signing time:             Thu 04 Apr 2024 03:33:11 +0000
ROA not before:           Thu 04 Apr 2024 03:28:11 +0000
ROA not after:            Thu 03 Apr 2025 03:33:11 +0000
asID:                     53132
IP address blocks:        2804:1668::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl
                          rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:49:69:52:8e:73:c5:43:72:42:43:30:73:0f:47:86:56:0f:56:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
        Validity
            Not Before: Apr  4 03:28:11 2024 GMT
            Not After : Apr  3 03:33:11 2025 GMT
        Subject: CN=96A29A8A84C780B1A559C9B970E430786989A7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:18:8e:f2:25:07:e9:ef:11:b2:e4:57:7b:
                    f3:59:5b:8d:8f:98:e0:58:db:ef:e6:00:72:36:fb:
                    6b:7a:de:73:7e:31:b5:31:76:ed:a7:e1:7d:8f:12:
                    f3:93:c4:fc:62:1e:6c:19:06:e0:e2:73:7d:50:67:
                    5e:00:7b:d3:65:50:b3:7a:c4:3a:f7:83:1b:59:ef:
                    13:37:0c:4b:f7:33:7a:52:e2:75:05:03:b6:71:68:
                    54:54:fc:25:69:da:4d:17:f0:f9:43:af:89:00:6f:
                    08:42:d3:50:03:8f:97:d7:66:c6:b9:71:4d:5f:07:
                    79:bd:11:5e:82:60:4f:b9:73:bd:3a:8c:35:21:cc:
                    d5:98:64:ef:11:35:42:94:d9:77:11:f6:24:7a:e6:
                    aa:0a:02:05:a3:1d:93:02:eb:a0:49:2c:c5:3c:2b:
                    54:d9:df:23:00:8e:2f:5c:49:ee:38:27:12:35:0b:
                    56:0a:7d:ff:e8:d2:1e:fe:4e:22:c0:5d:bc:c0:f7:
                    62:30:c1:14:34:20:9d:d7:c8:5f:25:61:3e:25:a4:
                    7e:b2:7b:9a:dc:cf:64:94:47:8b:b1:d3:a1:37:f5:
                    e2:07:17:57:9a:1a:0b:23:32:e5:98:d3:4e:ee:57:
                    07:74:d3:c6:c6:53:91:6a:74:59:41:ce:5b:ae:e9:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A2:9A:8A:84:C7:80:B1:A5:59:C9:B9:70:E4:30:78:69:89:A7:C0
            X509v3 Authority Key Identifier:
                keyid:B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/323830343a313636383a3a2f33322d3438203d3e203533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1668::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:56:c6:68:d4:90:e4:00:51:cc:4f:f3:eb:1e:53:46:4a:
         4d:47:10:c8:51:ea:20:bc:c8:b9:33:53:4e:00:58:4a:e8:51:
         95:c9:ac:be:67:6b:c6:cd:1f:7d:0e:28:a9:c1:eb:40:9b:33:
         20:0e:c8:7b:17:90:87:56:13:ee:ab:c2:bd:4c:11:0e:dc:7f:
         6d:cb:f0:d6:3a:00:1c:0f:25:4d:a5:68:6d:e4:95:83:66:7e:
         6e:63:2b:bd:08:59:b4:84:f3:7b:5c:8c:45:44:ad:71:91:2e:
         ce:63:26:03:e0:42:a0:d3:b8:c8:0b:e9:28:29:8a:d8:82:f6:
         d8:c0:7c:7e:6a:f9:cb:ec:51:47:25:c4:c8:a1:f5:ee:63:21:
         5d:ba:62:53:d6:50:af:8d:fe:18:80:1a:3b:1b:ee:78:43:23:
         bc:a4:e7:99:b0:bd:76:14:4c:06:13:c5:dd:16:50:5f:12:8b:
         a8:e1:de:9d:78:89:fb:e8:f3:f4:53:b7:6e:4b:f6:b3:da:09:
         90:6b:f7:56:97:f2:24:01:23:fd:da:e0:40:6e:e3:38:3c:6c:
         6f:5d:bb:c4:ff:73:98:a5:6d:f8:ed:c1:b6:ee:52:2f:52:64:
         07:18:03:99:eb:9a:c6:b0:17:0f:95:a1:c7:36:42:c4:6d:df:
         7a:78:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:42 2024 by rpki-client on console-ams.rpki-client.org