Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
File:                     323830343a323831383a3a2f33322d3332203d3e20323633393430.roa (raw, json)
Hash identifier:          4ouD0JMM8M+xyJIao3tyyd0rYlJjKFxQjYOvUBDYGLk=
Subject key identifier:   91:21:92:87:A0:A7:52:8E:16:AE:DE:5C:01:BC:FA:3F:D1:C6:B6:3B
Certificate issuer:       /CN=A231E2070327B78340403E3C1D060C59505210CE
Certificate serial:       20C24357E226F5A6C32FD805046605A7A2A6346F
Authority key identifier: A2:31:E2:07:03:27:B7:83:40:40:3E:3C:1D:06:0C:59:50:52:10:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
Signing time:             Wed 03 Apr 2024 22:53:26 +0000
ROA not before:           Wed 03 Apr 2024 22:48:26 +0000
ROA not after:            Wed 02 Apr 2025 22:53:26 +0000
asID:                     263940
IP address blocks:        2804:2818::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c2:43:57:e2:26:f5:a6:c3:2f:d8:05:04:66:05:a7:a2:a6:34:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A231E2070327B78340403E3C1D060C59505210CE
        Validity
            Not Before: Apr  3 22:48:26 2024 GMT
            Not After : Apr  2 22:53:26 2025 GMT
        Subject: CN=91219287A0A7528E16AEDE5C01BCFA3FD1C6B63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:1b:ba:b1:44:e8:2c:da:dd:75:fe:c5:18:
                    5b:71:85:c3:b7:e3:c2:31:44:b5:05:18:9c:c4:91:
                    e3:b0:d0:26:5e:56:f3:63:cb:07:57:ce:23:93:29:
                    31:ae:db:07:ed:95:a3:be:8f:4d:61:e2:8c:42:9f:
                    c3:8e:c9:53:46:13:9a:48:5a:00:fa:42:1a:7b:96:
                    ba:27:5e:4c:eb:53:dd:34:78:d3:3f:6b:b8:31:2d:
                    68:26:03:1d:0b:21:db:c9:3b:5b:a1:c7:1f:60:d2:
                    5f:29:de:d2:cd:75:55:07:9b:a9:1d:c3:6c:16:d5:
                    6c:db:43:f6:72:8e:cd:6a:df:49:74:69:b2:1a:7c:
                    56:a0:9f:b6:4a:75:31:cd:e8:70:78:7e:e8:3e:13:
                    a4:62:92:6a:b8:82:4d:d6:69:e1:6f:44:a9:43:1f:
                    ae:01:7e:56:2b:3a:44:11:67:68:45:01:a6:a1:34:
                    00:66:98:21:49:e5:11:55:db:3b:b5:e1:11:4e:09:
                    1d:3e:ee:1c:1b:37:1f:51:1d:08:fc:39:0c:78:46:
                    54:f3:c0:26:14:09:fc:20:fc:b5:9e:fc:2d:70:a4:
                    1e:1c:73:84:4d:1e:8c:20:ad:22:0e:86:a0:a5:05:
                    01:ec:b7:ac:6f:cf:2d:d5:33:f9:da:56:fd:bb:c1:
                    ae:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:21:92:87:A0:A7:52:8E:16:AE:DE:5C:01:BC:FA:3F:D1:C6:B6:3B
            X509v3 Authority Key Identifier:
                keyid:A2:31:E2:07:03:27:B7:83:40:40:3E:3C:1D:06:0C:59:50:52:10:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:8f:92:79:e0:fb:27:b2:02:69:d0:93:df:8e:b8:4e:ef:
         4f:6c:b1:41:5a:0c:82:10:03:eb:4a:e8:8b:dc:64:cb:15:0e:
         fc:9e:30:e5:ab:a1:b1:4f:d5:4f:09:f4:91:c4:7f:2c:3c:5c:
         7a:7a:83:55:7a:a8:2d:6e:68:89:17:5f:7f:51:31:91:bd:95:
         15:0d:db:b4:4d:4e:f6:95:8a:9d:10:b1:ac:78:23:b7:ea:a3:
         20:7b:30:16:bd:db:56:83:6d:51:f4:5a:74:4c:ba:c0:cd:b5:
         99:c7:b6:64:96:9c:18:a4:05:b6:23:71:76:71:35:7a:ce:00:
         97:37:b0:6a:b3:85:cb:f3:6b:12:b2:38:67:50:0a:e1:e2:cc:
         67:25:db:92:98:aa:5b:3d:39:ef:f0:d8:cb:47:8f:fd:0a:93:
         b7:2f:f4:14:66:e2:60:09:c2:27:54:b2:4d:3e:41:92:dd:13:
         6b:f4:1d:56:3d:a2:1b:84:49:e2:19:d7:e5:30:df:0f:cb:e5:
         92:d0:7c:e6:f1:8f:af:73:51:f3:55:dd:08:9b:b7:8c:cb:42:
         00:52:ba:68:3c:9c:fa:2b:9c:5d:d6:30:2b:f1:f4:9c:e6:c9:
         09:dc:df:9b:c3:fd:42:93:24:09:98:ca:9e:b6:04:da:63:75:
         4a:08:09:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:34 2024 by rpki-client on console-fra.rpki-client.org