Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3330303a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a3330303a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          N1h55QqiCSxhYg5KSnKEHctYoE+YEehqcw3ePLlTMFs=
Subject key identifier:   F5:73:38:90:71:2C:2F:1A:3D:2A:B2:1A:DA:87:FC:CD:B1:A8:1F:19
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       577A48D046D68DFEC83395B51532E3E81C8051DE
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3330303a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:49 +0000
ROA not before:           Thu 05 Oct 2023 17:46:49 +0000
ROA not after:            Thu 03 Oct 2024 17:51:49 +0000
asID:                     61832
IP address blocks:        2804:1a04:300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
                          rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7a:48:d0:46:d6:8d:fe:c8:33:95:b5:15:32:e3:e8:1c:80:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:49 2023 GMT
            Not After : Oct  3 17:51:49 2024 GMT
        Subject: CN=F5733890712C2F1A3D2AB21ADA87FCCDB1A81F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:d0:de:ff:46:87:36:3c:ee:21:c9:b2:1f:
                    41:9e:ee:de:86:0b:27:0e:41:e1:e6:90:3d:a7:fe:
                    7a:13:cc:7a:20:30:b2:b7:6a:4f:64:73:20:0f:92:
                    9b:43:12:42:96:40:7b:9a:b1:79:8d:0c:6d:0d:b7:
                    a5:bd:e0:5f:14:d0:0a:34:e1:bf:02:ed:e3:44:2b:
                    95:84:49:54:e4:ee:9b:20:e3:b9:92:1d:ec:da:b9:
                    86:7e:8a:e7:ff:97:e1:e5:ff:6e:8d:55:66:7e:60:
                    68:14:3e:b8:cc:c8:de:12:0a:9c:b5:10:e2:57:8a:
                    d2:67:a9:92:c4:82:53:41:8f:88:ce:de:2b:23:f9:
                    b7:fc:1e:b6:e8:d7:c2:e3:97:ea:6c:2b:44:3b:44:
                    52:86:97:80:29:40:94:ac:25:1b:b7:37:0a:68:be:
                    9d:c4:71:c9:08:fb:e1:60:0a:51:af:62:38:e9:bd:
                    ff:f4:79:40:e0:ed:7b:a7:0e:33:23:43:1e:57:f5:
                    5b:e3:d5:a2:67:07:97:ad:3d:29:f2:d2:dd:05:cd:
                    2f:d7:60:a6:d7:44:5e:30:67:81:d5:ec:9d:5f:82:
                    d1:09:a7:a8:d4:41:b2:64:68:ca:ea:98:36:29:43:
                    20:0e:98:20:f2:b8:32:cd:87:34:b7:64:23:31:39:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:73:38:90:71:2C:2F:1A:3D:2A:B2:1A:DA:87:FC:CD:B1:A8:1F:19
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3330303a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:d0:a4:1d:11:75:60:19:ac:74:05:a6:73:6d:6d:2c:3b:71:
         b9:ed:9b:2c:be:d0:64:9c:b5:83:da:01:bd:79:44:2c:e1:20:
         84:6a:55:cc:24:d2:fa:a5:22:f8:55:b6:bd:0e:06:78:19:25:
         8a:d1:3a:81:cf:6a:08:f7:f4:17:33:23:a9:1e:99:45:12:9a:
         df:36:56:ec:96:6a:d5:bd:b0:07:98:61:ba:5b:af:a3:2a:71:
         8a:86:62:09:33:ab:ec:8e:08:62:42:81:18:77:a2:68:fb:b4:
         ff:be:27:66:a0:f3:33:01:13:f0:ec:3a:14:4b:1c:ee:10:b2:
         ca:a3:00:e6:41:a9:70:ae:9b:d7:46:7a:f4:ae:1a:1f:33:1b:
         e7:87:d5:82:b9:68:ca:f3:04:63:33:0a:82:57:c4:56:49:3d:
         08:79:44:cf:ee:0d:0a:c6:6f:f9:f6:47:a5:ab:0a:2e:fb:c2:
         12:da:ab:cf:be:9a:9a:36:7c:e8:4c:b5:f8:dd:68:96:98:7d:
         47:6f:90:0d:36:43:af:0a:44:a9:41:6d:83:95:9e:d3:98:8b:
         96:8a:79:f9:ac:09:30:03:4a:5c:b7:34:95:00:eb:14:e2:a2:
         96:bf:14:76:46:0a:68:65:ca:f2:6a:da:06:86:31:89:3a:56:
         f2:4a:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:44:02 2024 by rpki-client on console.sobornost.net