Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f33332d3333203d3e203238333238.roa
File:                     323830343a3637343a383030303a3a2f33332d3333203d3e203238333238.roa (raw, json)
Hash identifier:          6uVm9Vcidwwr60lnmsFbmKqGoaUndktxfVQlEGVgcXM=
Subject key identifier:   57:41:7A:4A:75:B9:9D:3F:86:A2:B4:F1:30:24:ED:A4:8C:30:D4:D0
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       4D1414255BC9FB07CD017B87C1AC5301D4872F11
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f33332d3333203d3e203238333238.roa
Signing time:             Wed 24 Apr 2024 21:38:55 +0000
ROA not before:           Wed 24 Apr 2024 21:33:55 +0000
ROA not after:            Wed 23 Apr 2025 21:38:55 +0000
asID:                     28328
IP address blocks:        2804:674:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
                          rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:14:14:25:5b:c9:fb:07:cd:01:7b:87:c1:ac:53:01:d4:87:2f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Apr 24 21:33:55 2024 GMT
            Not After : Apr 23 21:38:55 2025 GMT
        Subject: CN=57417A4A75B99D3F86A2B4F13024EDA48C30D4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:e4:4d:22:d9:63:86:d3:0b:60:3c:66:5d:
                    2a:a9:b2:83:ae:6b:b1:60:3c:32:a5:30:3a:e7:31:
                    76:fb:b7:82:09:9c:18:b1:d3:0e:ca:6e:87:ef:d7:
                    25:26:f4:ff:61:3b:34:37:c5:b9:5a:09:6d:f5:54:
                    5f:f9:c9:e5:d1:6b:8a:a1:41:17:1a:59:f7:1a:68:
                    dd:e6:ee:cd:f7:10:ed:58:7d:79:87:db:66:04:9d:
                    63:e3:33:3d:4f:de:76:09:42:d0:b6:d3:0a:39:f9:
                    01:e6:99:f4:8e:3d:09:2c:9f:58:2a:8e:15:eb:3f:
                    d6:71:7a:b6:c8:98:7a:e4:28:5e:fc:4e:db:4f:31:
                    81:91:66:7e:6f:0f:92:ec:af:16:15:9f:27:3b:82:
                    cd:a4:3d:98:5c:bd:f3:cb:71:24:d0:d8:cb:f4:b6:
                    1c:3c:cd:21:c5:f5:62:03:f7:28:86:77:50:9d:2c:
                    73:c5:82:7d:e1:d2:01:65:c3:24:0b:0d:65:c2:2f:
                    df:8b:74:aa:7e:54:f5:45:cf:f8:ba:29:e3:ec:f2:
                    7c:45:82:d3:56:9d:cf:a6:9b:4a:9f:b1:b5:23:a8:
                    a8:26:eb:94:55:ed:50:8a:2d:31:86:75:35:30:eb:
                    41:b7:10:26:a4:33:b1:43:de:b1:91:00:14:85:ef:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:41:7A:4A:75:B9:9D:3F:86:A2:B4:F1:30:24:ED:A4:8C:30:D4:D0
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f33332d3333203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:06:ee:ea:53:5d:fb:8c:11:27:78:97:7a:dc:1a:59:b7:69:
         ab:b2:be:ce:f5:be:dd:e9:05:3e:be:e5:5e:9d:f5:95:36:4f:
         33:3a:c5:fb:de:e6:28:7b:42:f3:06:bd:39:8e:b0:de:ea:75:
         99:54:51:89:8f:16:e2:7a:82:6a:d0:f3:b6:1a:16:1a:8c:56:
         40:9a:b3:88:63:a8:7d:10:d8:3b:5f:a3:dc:b2:bb:23:b7:32:
         69:4f:46:c9:53:87:a8:40:7f:ff:55:d0:f3:4b:98:43:4a:7a:
         61:c7:dc:25:16:d1:1a:64:14:4b:83:dd:cb:48:43:b3:34:db:
         65:ac:69:65:ea:55:51:32:5b:2f:ce:86:20:ac:f8:46:5d:13:
         c1:96:19:f3:cd:ac:80:f6:df:c7:79:de:03:cb:17:80:84:4b:
         91:af:f4:02:cb:a4:51:91:42:5b:0c:57:6e:20:50:e7:ff:d3:
         3d:34:18:16:6a:b5:15:17:60:58:dc:78:cf:5b:97:0c:45:e0:
         3e:d4:cd:67:9e:54:e8:9f:bd:b3:e3:bc:ea:17:13:95:77:ad:
         23:a7:35:96:83:25:ef:f0:d8:08:a1:27:9a:85:f6:62:97:36:
         f3:be:da:d0:41:8e:fb:c1:3c:3d:a2:92:df:61:db:f8:1b:5f:
         c0:09:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:54 2024 by rpki-client on console-ams.rpki-client.org