Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/323830343a313136383a3a2f33322d313238203d3e203532393034.roa
File:                     323830343a313136383a3a2f33322d313238203d3e203532393034.roa (raw, json)
Hash identifier:          NS9y+VIALPQTTKXuubWI2iBvkdhmLCoFol1Zp5pNXTA=
Subject key identifier:   58:82:D3:B5:BD:E0:13:C8:02:77:7C:47:65:5F:36:93:D4:77:F4:22
Certificate issuer:       /CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C
Certificate serial:       3155C9B681D9E0EC2F9892BFBCFB241310B0CDE8
Authority key identifier: 5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/323830343a313136383a3a2f33322d313238203d3e203532393034.roa
Signing time:             Wed 03 Apr 2024 19:38:43 +0000
ROA not before:           Wed 03 Apr 2024 19:33:43 +0000
ROA not after:            Wed 02 Apr 2025 19:38:43 +0000
asID:                     52904
IP address blocks:        2804:1168::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl
                          rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 12:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:55:c9:b6:81:d9:e0:ec:2f:98:92:bf:bc:fb:24:13:10:b0:cd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C
        Validity
            Not Before: Apr  3 19:33:43 2024 GMT
            Not After : Apr  2 19:38:43 2025 GMT
        Subject: CN=5882D3B5BDE013C802777C47655F3693D477F422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:4d:65:6d:e1:c4:65:69:2b:71:0f:39:a6:
                    e6:eb:b0:50:b5:22:9c:15:28:1e:a2:a7:09:49:1c:
                    17:9c:0e:ee:00:ec:2b:42:c9:a2:3f:10:9c:21:3c:
                    d3:ee:76:6e:6b:4f:da:d5:17:91:63:f4:16:c1:0b:
                    e5:90:75:10:9d:35:f8:97:c5:0f:0f:68:65:8d:37:
                    3e:50:7c:6a:42:2c:4c:4a:0e:54:7d:59:93:03:c2:
                    70:c2:4e:91:e0:47:1d:29:76:81:a8:26:ca:54:81:
                    1f:56:54:45:e8:78:66:0d:ba:3d:78:17:6c:5c:38:
                    e3:6b:8e:b0:55:c4:08:1e:7b:6e:d0:2a:70:80:4a:
                    f8:03:84:b6:3d:83:af:34:dd:fc:0e:cc:e8:b8:d0:
                    73:7a:c8:35:53:38:17:ae:75:02:93:6a:3e:e2:b4:
                    7d:6c:50:c7:5f:55:48:14:60:46:91:5b:5d:f4:05:
                    17:29:59:41:cd:7a:85:ff:02:ef:1f:2e:52:29:9c:
                    0a:73:c9:64:2f:48:cc:6f:85:92:ac:9c:68:03:4b:
                    16:66:c5:ae:50:32:e2:21:28:94:21:0b:f5:5b:2c:
                    26:9d:5c:59:d7:0e:bf:8c:63:6d:49:9a:3e:88:63:
                    ff:70:10:04:6d:dc:7e:3c:b3:b8:ce:a1:4f:44:8d:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:82:D3:B5:BD:E0:13:C8:02:77:7C:47:65:5F:36:93:D4:77:F4:22
            X509v3 Authority Key Identifier:
                keyid:5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/323830343a313136383a3a2f33322d313238203d3e203532393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1168::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:13:e8:cf:bd:05:73:f3:46:ab:3d:ff:5b:04:cf:57:19:1d:
         28:56:f2:89:14:f0:54:a2:47:e7:b5:71:e8:dd:f0:01:f4:5f:
         cf:72:56:95:88:41:20:38:eb:cc:5c:7c:00:92:bd:0a:ca:93:
         0d:5e:b4:b1:37:a4:49:a7:fc:13:00:ea:df:d9:6d:57:e5:e3:
         27:e6:cd:52:67:dd:f1:7f:c0:61:a2:ba:3b:fb:ee:bf:8d:24:
         f1:a5:c6:1f:f4:16:b7:e4:4a:f7:a3:5d:e5:82:9b:3f:1b:43:
         01:84:54:66:92:ec:01:81:e0:d8:57:1c:ff:b4:9a:5c:df:23:
         48:36:82:df:06:20:ad:82:6f:ed:86:17:cb:14:59:62:16:3e:
         ea:1a:78:dd:75:36:a6:53:b5:ad:c4:62:7b:be:5a:1a:21:22:
         86:27:8e:07:c2:2c:cf:fb:f9:65:33:b8:78:22:3c:30:de:5e:
         10:1e:dc:4c:39:eb:14:6c:1d:1d:23:55:3e:1a:b3:02:38:6e:
         d5:73:be:14:ce:74:10:0d:27:c3:98:f5:0b:17:5e:1d:e8:a8:
         ad:ae:80:c5:e8:80:d5:06:b0:18:6a:96:af:a4:1d:08:b1:bd:
         ba:35:2d:02:e7:73:bc:6b:b5:27:93:d4:7c:34:e0:9e:09:04:
         d1:19:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 13:53:36 2024 by rpki-client on console-fra.rpki-client.org