Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/323830343a353135383a3a2f33322d3332203d3e20323638343436.roa
File:                     323830343a353135383a3a2f33322d3332203d3e20323638343436.roa (raw, json)
Hash identifier:          TeUrNGU2EdDyaPxjX0eBruzn9OJCu1l0VRuwl4NJe20=
Subject key identifier:   EF:64:A3:16:36:EC:C8:DA:35:79:67:9F:21:71:B0:C0:B7:B9:48:6A
Certificate issuer:       /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial:       2E59735AB0EAD91FE39CBFFA28F2B619DC3DBEF9
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/323830343a353135383a3a2f33322d3332203d3e20323638343436.roa
Signing time:             Wed 03 Apr 2024 18:33:10 +0000
ROA not before:           Wed 03 Apr 2024 18:28:10 +0000
ROA not after:            Wed 02 Apr 2025 18:33:10 +0000
asID:                     268446
IP address blocks:        2804:5158::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl
                          rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:59:73:5a:b0:ea:d9:1f:e3:9c:bf:fa:28:f2:b6:19:dc:3d:be:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
        Validity
            Not Before: Apr  3 18:28:10 2024 GMT
            Not After : Apr  2 18:33:10 2025 GMT
        Subject: CN=EF64A31636ECC8DA3579679F2171B0C0B7B9486A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:67:77:38:67:51:56:3b:0a:62:d7:19:96:
                    58:9d:6f:14:9e:03:5f:bf:fd:8b:d6:ee:33:28:de:
                    ba:00:05:79:c9:9c:12:d6:fb:2d:f7:69:f4:c0:c6:
                    6a:ef:9c:87:f3:95:00:d9:5f:75:64:aa:58:51:fa:
                    40:73:d8:0c:c1:84:ee:c0:49:1e:67:d7:c7:1f:cd:
                    24:fd:a9:5c:e4:72:0c:e2:67:50:d3:a8:11:92:9c:
                    f0:41:ba:9e:38:81:d1:9d:26:dc:70:7f:f3:37:2e:
                    38:2d:10:3e:23:ed:cc:f2:9e:d5:57:43:b8:8f:a9:
                    a0:02:1f:94:fe:42:db:dc:a2:8d:11:a8:64:00:11:
                    84:21:1d:95:43:f9:ab:99:1b:42:f9:fa:db:f7:21:
                    ec:72:a3:e1:2c:ae:8a:9a:3d:50:1e:99:2a:51:3a:
                    4c:d5:3b:6d:c1:72:72:ad:55:c5:70:65:53:9f:17:
                    83:78:c4:d3:59:e6:65:1b:f0:49:9e:4f:3d:a3:b3:
                    fb:0d:82:0f:7d:f2:eb:fa:36:83:0d:7d:78:fc:2f:
                    62:61:3c:45:ed:59:bd:75:22:07:fd:f1:43:4c:7f:
                    6b:9e:38:50:91:45:7f:67:1b:8d:20:ab:a7:d4:18:
                    6c:29:3f:a6:5d:55:bb:dd:06:05:24:c0:b5:22:c8:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:A3:16:36:EC:C8:DA:35:79:67:9F:21:71:B0:C0:B7:B9:48:6A
            X509v3 Authority Key Identifier:
                keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/323830343a353135383a3a2f33322d3332203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5158::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:12:19:1f:59:99:ab:78:58:e5:7d:1d:ee:9f:39:54:c0:2f:
         d5:5d:89:f3:ab:f8:81:f6:17:ed:d8:33:08:0c:6a:eb:01:45:
         e1:35:e4:a7:87:fa:54:d0:b1:c1:61:69:9a:91:4e:e2:dc:71:
         cf:1e:ef:03:d0:a7:70:f3:3c:70:fe:4e:b1:3d:38:37:66:0b:
         39:18:41:56:51:53:c1:e8:b3:1f:c2:3b:f1:12:5d:ef:6b:3a:
         a4:ed:84:f5:f3:06:25:c0:eb:21:f7:56:b1:4c:58:78:d8:13:
         8f:a5:2e:24:1c:ce:b2:9b:56:36:53:4a:53:92:ab:2b:ab:74:
         2d:99:fe:f4:c0:ca:83:97:27:c2:4f:43:e3:7d:f5:1b:29:d7:
         ad:a0:a4:1b:ad:1a:06:d2:9d:03:a9:85:69:11:85:1a:63:e0:
         56:f5:59:8c:34:d8:16:61:44:05:b9:12:8f:88:43:5c:8d:46:
         5c:cf:2c:6d:7b:b5:51:8e:24:5c:9c:3d:1b:37:24:04:08:1a:
         5d:07:42:09:57:8f:a4:b2:92:07:7f:d9:3b:c0:56:cf:cf:5f:
         e5:c1:e4:1f:c4:1b:19:ca:af:e0:78:70:3f:af:91:7c:ba:d2:
         cb:92:b5:f6:db:3c:8c:52:f3:a1:50:7c:8f:c9:57:45:75:ba:
         f5:dc:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:26:36 2024 by rpki-client on console-fra.rpki-client.org